ssl - java.lng.Exception: `Input not an X.509 certificate` when importing .pem certificate -

i have created self-signed certificate makecert, exported private key .pfx file , imported on server. copied 1 on client , tried importing using keytool. got error input not x.509 certificate. converted .pfx certificate .pem using openssl , tried again - same result.

i did research , found might need convert .der, still might not work. apparently keytool supports single certificate pem files. though mine single certificate, pem file contains private key information:

-----begin private key---- -----end private key------   ----begin certificate----- ----end certificate------- 

so not sure should next step ensure import work when done keytool on client. can shed light on issue?