Exporting the server certificate

Use Java™ Keytool or the IBM® Key Management Utility (IKEYMAN) to export the certificate from the SSL keystore.

About this task

To use IKEYMAN, start the ikeyman program. To use the Java Keytool, take these steps:

Procedure

  1. Open a command line on the system where the server instance runs.
  2. Enter the following command on one line:
    keytool -exportcert
     -file certificate_file 
     -alias name
     -keystore ssl_keystore_file
     
    certificate_file
    Specify a fully qualified file name for the server certificate. If you omit the path, the certificate is stored in the current directory.
    name
    Specify the name that you assigned to the keystore entry when you created the SSL keystore and the server certificate.
    ssl_keystore_file
    Specify the fully qualified file name of the SSL keystore.
    Example:
    keytool -exportcert
     -file /home/iccsapadmin/instance1/security/https/iccsap_instance1.cer
     -alias iccsap_instance1
     -keystore /home/iccsapadmin/instance1/security/https/keystore.jks