# 1. Convert .jks to .p12 (need password)
keytool -importkeystore -srckeystore your-file.jks -destkeystore new-output.p12 -deststoretype PKCS12

# 2. Extract .pem from .p12 (need password)
openssl pkcs12 -nokeys -in new-output.p12 -out new-output.pem

# 3. Extract unencrypted .key from .p12 (need password)
openssl pkcs12 -nocerts -nodes -in new-output.p12 -out final-output.key