My understanding of a Java keystore is that it is an encrypted (and optionally, password-protected) file that houses 0+ certificates, each of which can also be individu