Thanks Francis! I was able to resolve that after a creating a Keystore jks with my cert & key and pointing my java code to that store using the system property, after that added keystore manager to the SSL context. Posted at Nginx Forum: https://forum.nginx.org/read.php?2,288541,288716#msg-288716