Installing the signed certificate

This procedure describes how to install the signed certificate.

When you are done with this procedure, proceed with Setting up a signed certificate for a Java keystore.

To install the signed certificate:

  1. If a certificate is not in X.509 format, use a translation program to convert it.
  2. In the sslcmd menu, select option 4 Add cert to add a digital certificate to the SSL key database.
  3. Enter the full path and file name for the digital certificate.

    The certificate is installed in the key database. Lines similar to the following output are displayed:

    -----BEGIN CERTIFICATE-----

    MIID5TCCA4+gAwIBAgIIZfuEvAAADDAwDQYJKoZIhvcNAQEEBQAwgYUxCzAJBgNV

    BAYTAlVTMQ4wDAYDVQQIEwVUZXhhczEQMA4GA1UEBxMHSG91c3RvbjEVMBMGA1UE

    ChMMQk1DIFNvZnR3YXJlMQ8wDQYDVQQLEwZXRUJERVYxLDAqBgNVBAMTI1dXV1FB

    IFRlc3RpbmcgQ2VydGlmaWNhdGUgQXV0aG9yaXR5MB4XDTAzMDQzMDEwMTg1MloX

    DTA0MDMyNTE4NDQxNFowejEoMCYGCSqGSIb3DQEJARYZdGVjaG5pY2FsX3N1cHBv

    cnRAYm1jLmNvbTELMAkGA1UEBhMCSUwxFjAUBgNVBAcTDUtpcmlhdCBBdGlkaW0x

    DDAKBgNVBAoTA0JNQzEMMAoGA1UECxMDTVBNMQ0wCwYDVQQDEwROU0ROMFowDQYJ

    KoZIhvcNAQEBBQADSQAwRgJBAOU2fcKSIHJZ10dsWGl62vuhLFD/YcLZ+6KVdHko

    rldjJpGvwyUuj/nGWcqPp40AsmJAUSuC+NSbX5J7rnYjuVcCAQOjggHtMIIB6TCB

    wQYDVR0jBIG5MIG2gBSfCfg37QCdSlWTMVOAe6FC4ASUJaGBi6SBiDCBhTELMAkG

    A1UEBhMCVVMxDjAMBgNVBAgTBVRleGFzMRAwDgYDVQQHEwdIb3VzdG9uMRUwEwYD

    VQQKEwxCTUMgU29mdHdhcmUxDzANBgNVBAsTBldFQkRFVjEsMCoGA1UEAxMjV1dX

    UUEgVGVzdGluZyBDZXJ0aWZpY2F0ZSBBdXRob3JpdHmCECzEOEsQABKPEdLi4KkW

    gdQwgbEGA1UdHwSBqTCBpjBQoE6gTIZKaHR0cDovL0tFTk5FTlBDL0NlcnRTcnYv

    Q2VydEVucm9sbC9XV1dRQSBUZXN0aW5nIENlcnRpZmljYXRlIEF1dGhvcml0eS5j

    cmwwUqBQoE6GTGZpbGU6Ly9cXEtFTk5FTlBDXENlcnRTcnZcQ2VydEVucm9sbFxX

    V1dRQSBUZXN0aW5nIENlcnRpZmljYXRlIEF1dGhvcml0eS5jcmwwbwYIKwYBBQUH

    AQEEYzBhMF8GCCsGAQUFBzAChlNodHRwOi8vS0VOTkVOUEMvQ2VydFNydi9DZXJ0

    RW5yb2xsL0tFTk5FTlBDX1dXV1FBIFRlc3RpbmcgQ2VydGlmaWNhdGUgQXV0aG9y

    aXR5LmNydDANBgkqhkiG9w0BAQQFAANBAIN0KGCUr2TnhvLMPcA21IMCNfLRIqq+

    35OZLHGHijOL0c8TebXP3h7ora+ddgIhCM7eqyEmOUqjfX+szZyl5fQ=

    -----END CERTIFICATE-----

    Command Add cert successful

  4. In the sslcmd menu, select option 7 List keys to list the digital certificates that are in the SSL key database.

    The alias assigned to each signed certificate is displayed in the output, which resembles this data:

    ***Label 0:

    NSDN

    Subject Distinguished Name:

    CN=NSDN,OU=MPM,O=BMC,L=Costa Mesa,ST=California,C=US,[email protected]

    Issuer Distinguished Name:

    CN=WWWQA Testing Certificate Authority,OU=WEBDEV,O=BMC Software,L=Houston,ST=Texas,C=US

    Certificate Serial=202f8ad900000733

    RSA public key length: 512 bits

    Valid Begin: Tue Feb 26 07:57:18 2002

    Valid End: Thu Feb 26 07:57:18 2004

    Status: REVOCATION UNKNOWN

    The following Certificate Extensions exist:

    Authority Key Identifier

    OID: 551d23

    Criticality Bit: Off

    ...

    Data: 30 61 30 5f 06 08 2b 06 01 05 05 07 30 02 86 53 68 74 74 70 3a 2f 2f 4b 45 4e 4e 45 4e 50 43 2f 43 65 72 74 53 72 76 2f 43 65 72 74 45 6e 72 6f 6c 6c 2f 4b 45 4e 4e 45 4e 50 43 5f 57 57 57 51 41 20 54 65 73 74 69 6e 67 20 43 65 72 74 69 66 69 63 61 74 65 20 41 75 74 68 6f 72 69 74 79 2e 63 72 74

    Subject Distinguished Name:

    CN=WWWQA Testing Certificate Authority,OU=WEBDEV,O=BMC Software,L=Houston,ST=Texas,C=US

    Issuer Distinguished Name:

    CN=WWWQA Testing Certificate Authority,OU=WEBDEV,O=BMC Software,L=Houston,ST=Texas,C=US

    Certificate Serial=2cc4384b1000128f11d2e2e0a91681d4

    RSA public key length: 512 bits

    Valid Begin: Thu Mar 25 20:44:14 1999

    Valid End: Thu Mar 25 20:44:14 2004

    Status: TRUSTED_ROOT

    The following Certificate Extensions exist:

    Key Usage

    OID: 551d0f

    Criticality Bit: Off

    Data: 03 02 00 c4

    Basic Constraints

    OID: 551d13

    Criticality Bit: Off

    Data: 30 03 01 01 ff

    Subject Key Identifier

    OID: 551d0e

    Criticality Bit: Off

    Data: 04 14 9f 09 f8 37 ed 00 9d 4a 55 93 31 53 80 7b a1 42 e0 04 94 25

    ***Label 1:

    CODN

    Subject Distinguished Name:

    CN=CODN,OU=MPM,O=BMC,L=Costa Mesa,ST=California,C=US,[email protected]

    Issuer Distinguished Name:

    CN=WWWQA Testing Certificate Authority,OU=WEBDEV,O=BMC Software,L=Houston,ST=Texas,C=US

    Certificate Serial=2030934100000734

    RSA public key length: 512 bits

    Valid Begin: Tue Feb 26 07:58:26 2002

    Valid End: Thu Feb 26 07:58:26 2004

    Status: REVOCATION UNKNOWN

    The following Certificate Extensions exist:

    Authority Key Identifier

    OID: 551d23

    Criticality Bit: Off ...

    Subject Distinguished Name:

    CN=WWWQA Testing Certificate Authority,OU=WEBDEV,O=BMC Software,L=Houston,ST=Texas,C=US

    Issuer Distinguished Name:

    CN=WWWQA Testing Certificate Authority,OU=WEBDEV,O=BMC Software,L=Houston,ST=Texas,C=US

    Certificate Serial=2cc4384b1000128f11d2e2e0a91681d4

    RSA public key length: 512 bits

    Valid Begin: Thu Mar 25 20:44:14 1999

    Valid End: Thu Mar 25 20:44:14 2004

    Status: TRUSTED_ROOT

    The following Certificate Extensions exist:

    Key Usage

    OID: 551d0f

    Criticality Bit: Off

    Data: 03 02 00 c4

    Basic Constraints

    OID: 551d13

    Criticality Bit: Off

    Data: 30 03 01 01 ff

    Subject Key Identifier

    OID: 551d0e

    Criticality Bit: Off

    Data: 04 14 9f 09 f8 37 ed 00 9d 4a 55 93 31 53 80 7b a1 42 e0 04 94 25

    Command List certs successful

    Enter to proceed

Parent Topic

Setting up a signed certificate