Exporting a personal certificate from a key repository on z/OS

Export the certificate using the RACDCERT command.

On the system from which we want to export the certificate, use the following command: 
RACDCERT ID(userid2) EXPORT(LABEL('label-name'))
DSN(output-data-set-name) FORMAT(CERTB64)
where:

  • userid2 is the user ID under which the certificate was added to the key ring.
  • label-name is the label of the certificate we want to extract.
  • output-data-set-name is the data set into which the certificate is placed.
  • CERTB64 is a DER encoded X.509 certificate that is in Base64 format. We can choose an alternative format, for example:

      CERTDER
      DER encoded X.509 certificate in binary format

      PKCS12B64
      PKCS #12 certificate in Base64 format

      PKCS12DER
      PKCS #12 certificate in binary format

Parent topic: Work with SSL/TLS on z/OS