Cloudera private (on-prem) profile setup

Hi,
We are using Cloudera private cloud
according to Cloudera, I should have Kerberos authentication, but Cloudera admin sent me a JKS file and keytab file

according to my research, the keytab file is required for Kerberos
and the JKS file for SSL
but, I don’t know how to use the JKS file for the SSL

according to ChatGPT, I should convert the JKS to pem and put it in the profile as the following
ssl_cert: /path/to/cert.pem
ssl_key: /path/to/key.pem
ssl_ca: /path/to/ca.pem

I tried a lot, and I always fail
I don’t know if the problem with the conversion of the JKS file to PEM
or the problem that the dbt-hive documentation never mentioned the profile’s attributes which Chatgpt mentioned