Management model for SSL in security realms allows to configure alias to be used for the keystore. Neverhteless this configuration doesn't work for non-file-based keystores.

E.g.

    <ssl>
      <keystore provider="custodia-cli"
        alias="server-ssl" keystore-password="thepassword" />
    </ssl>

The problem is probably in ProviderKeyManagerService class which has no evidence about the alias.