Use RACDCERT LISTTOKEN to display the tokens contents. Ensure that you are referring to the correct token and that the token contains the required certificate. If the certificate is in the token but not defined to RACF, it might still be referred to by its sequence number. Reissue the RACDCERT command specifying the certificates sequence number and the FORCE keyword.