Exporting a personal certificate from a key repository
On the system from which you want to extract the certificate, use the following command:
RACDCERT ID(userid2) EXPORT(LABEL('label-name')) DSN(output-data-set-name) FORMAT(CERTB64)where:
- userid2 is the user ID under which the certificate was added to the key ring.
- label-name is the label of the certificate you want to extract.
- output-data-set-name is the data set into which the certificate is placed.
- CERTB64 is a DER encoded X.509 certificate that is in Base64 format. You can choose an alternative format, for example:
- CERTDER
- DER encoded X.509 certificate in binary format
- PKCS12B64
- PKCS #12 certificate in Base64 format
- PKCS12DER
- PKCS #12 certificate in binary format
Note that PKCS12DER is supported only on OS/390 V2.10 and z/OS V1.1 and subsequent releases.
Parent topic:
Transferring certificates
sy12600_