It would be quite useful if there was an option (ex: -chain) to export the entire certificate chain associated with a key entry in a keystore, in either PKCS7 format or a sequence of rfc base64 encoded certs.