The certificates report provides certificate information from a RACF keyring, SAF data set, or certificate database.
To generate a certificate report on IBM i, enter the following command. For example:
SBMJOB JOB(PWXCERTS) JOBQ(*JOBD) CMD(CALL PGM(PWXLIB/PWXUGSK)
PARM('CMD=REPORT_CERTIFICATES'))
To generate a certificate report on z/OS, use the following JCL parameters. For example:
//STEP1 EXEC PGM=PWXUGSK,REGION=900M,
// PARM='CMD=REPORT_CERTIFICATES LOC_TYPE=KEYRING
// LOC_NAME=MyKeyRingName VERBOSE=N'
The following output is an example of a certificate report on z/OS with the VERBOSE option set to Y:
PWXUGSK REPORT_CERTIFICATES
===========================
Verbose Y
---------
Processing console program. PWXUGSK CMD=REPORT_CERTIFICATES VERBOSE=Y LOC_TYPE=KEYRING LOC_NAME=ATTLS_keyring
VERBOSE='Y'
Report for command REPORT_CERTIFICATES
======================================
Initializing
------------
Calling gsk_get_cms_vector()
Mask = 2047 X'000007FF' (API: LVL1, LVL2, LVL3, LVL4, LVL5, LVL6, LVL7, LVL8, LVL9, LVL10, LVL11)
Number of functions = 223
gsk_cms_vector. Returned size=892. Compiled size=636
Calling gsk_open_keyring(). Name='ATTLS_keyring'. Function address=1F173BF0
gsk_open_keyring() returned db_handle=1EF7A610 num_records=2
Labels
------
gsk_get_record_labels()CA Certificates without Private keys labels=1 LOCALCA
gsk_get_record_labels()Subject Certificates with Private keys labels=1 INFACert1
Looping calling gsk_get_record_by_index() to get certificates
Certificate 1 Label 'LOCALCA'
-----------------------------
Record Type = 2 (CA Certificate)
Algorithm type = 22 (sha1WithRsaEncryption)
Algorithm oid count = 7
Version = 2
Serial Number = 00
Record Id = 1
Issuer Record Id = 1
Not Before Timestamp = 2006-11-06 00:00:00
Not After Timestamp = 2040-12-31 23:59:59
Subject
Name Type = 1 (DN). Rdn attributes=4
attributeType = 13 (countryName) length= 2 data='GB'
attributeType = 9 (organizationName) length=11 data='Informatica'
attributeType = 10 (organizationalUnitName) length= 9 data='zOS.Admin'
attributeType = 6 (commonName) length=32 data='irrcerta.abc1234.informatica.com'
CN = irrcerta.abc1234.informatica.com OU = zOS.Admin O = Informatica C = GB
Issuer
Name Type = 1 (DN). Rdn attributes=4
attributeType = 13 (countryName) length= 2 data='GB'
attributeType = 9 (organizationName) length=11 data='Informatica'
attributeType = 10 (organizationalUnitName) length= 9 data='zOS.Admin'
attributeType = 6 (commonName) length=32 data='irrcerta.abc1234.informatica.com'
CN = irrcerta.abc1234.informatica.com OU = zOS.Admin O = Informatica C = GB
*** Self-signed certificate
*** SITE certificate with user id 'IRRCERTA'
Subject Name Attributes
Buffer: length=100 data=3062310B300906035504061302474231143012060355040A130B496E666F726D617469636131123010060355040B13097A4F532E4164
6D696E312930270603550403132069727263657274612E6D687A383930322E696E666F726D61746963612E636F6D
C = GB
O = Informatica
OU = zOS.Adminca
CN = irrcerta.abc1234.informatica.com
Issuer Name Attributes
Buffer: length=100 data=3062310B300906035504061302474231143012060355040A130B496E666F726D617469636131123010060355040B13097A4F532E4164
6D696E312930270603550403132069727263657274612E6D687A383930322E696E666F726D61746963612E636F6D
C = GB
O = Informatica
OU = zOS.Adminca
CN = irrcerta.abc1234.informatica.com
F51_ValidateCertMode starts
Calling gsk_validate_certificate_mode
Certificate validated OK by gsk_validate_certificate_mode
Certificate 2 Label 'INFACert1'
-------------------------------
Record Type = 3 (Subject Certificate & Private Key)
Algorithm type = 22 (sha1WithRsaEncryption)
Algorithm oid count = 7
Version = 2
Serial Number = 0D
Record Id = 2
Issuer Record Id = 1
Not Before Timestamp = 2008-01-15 00:00:00
Not After Timestamp = 2031-12-31 23:59:59
Subject
Name Type = 1 (DN). Rdn attributes=4
attributeType = 13 (countryName) length= 2 data='GB'
attributeType = 9 (organizationName) length=11 data='Informatica'
attributeType = 10 (organizationalUnitName) length= 9 data='zOS.Admin'
attributeType = 6 (commonName) length=33 data='INFAtest.abc123-4.informatica.com'
CN = INFAtest.abc123-4.informatica.com OU = zOS.Admin O = Informatica C = GB
Issuer
Name Type = 1 (DN). Rdn attributes=4
attributeType = 13 (countryName) length= 2 data='GB'
attributeType = 9 (organizationName) length=11 data='Informatica'
attributeType = 10 (organizationalUnitName) length= 9 data='zOS.Admin'
attributeType = 6 (commonName) length=32 data='irrcerta.abc1234.informatica.com'
CN = irrcerta.abc1234.informatica.com OU = zOS.Admin O = Informatica C = GB
Subject Name Attributes
Buffer: length=101 data=3063310B300906035504061302474231143012060355040A130B496E666F726D617469636131123010060355040B13097A4F532E4164
6D696E312A30280603550403132153545141746573742E6D687A3839302D322E696E666F726D61746963612E636F6D
C = GB
O = Informatica
OU = zOS.Adminca
CN = INFAtest.abc123-4.informatica.com
Issuer Name Attributes
Buffer: length=100 data=3062310B300906035504061302474231143012060355040A130B496E666F726D617469636131123010060355040B13097A4F532E4164
6D696E312930270603550403132069727263657274612E6D687A383930322E696E666F726D61746963612E636F6D
C = GB
O = Informatica
OU = zOS.Adminca
CN = irrcerta.abc1234.informatica.com
F51_ValidateCertMode starts
Calling gsk_validate_certificate_mode
Certificate validated OK by gsk_validate_certificate_mode
Issuer_record_id = 1
CA certificates = 1
Subject certificates = 1
Total certificates = 2
Terminating
-----------
Calling gsk_close_database(). db_handle=1EF7A610. Function address=1F173250
rc=0 X'00000000' from gsk_close_database(). db_handle=0
