Using CA SMP/E Internet Service Retrieval and adding the SMP/E RECEIVE ORDER CA Certificate to RACF on z/OS.
RACDCERT CERTAUTH ADD('hlq.BROADCOM.RECEIVE.ORDER.CRT') WITHLABEL('DigiCert SHA2 Secure Server CA') TRUST
Error message:
IRRD126I The certificate contains either a key usage or basic constraint extension indicating that it may not be used as a Certificate
Release : All
Component : CCS390 - CA COMMON SERVICES FOR Z/OS
The certificate has to be uploaded to the mainframe as ASCII with the WRAP option to a fie with LRECL=256 and RECFM=VB.
If the wrap option is not used the certificate will be truncated and the IRRD126I error will be issued.
Use the following FTP commands to avoid truncation:
ASCII
QUOTE SITE WRAP LRECL=256 RECFM=VB
PUT cert_file_name 'your.mvs.dataset.name' (REPLACE
quit
See documentation section Obtain the Certificates for CA SMP/E Internet Service Retrieval and Configure IBM RACF Security