You want to know which certificates, keystores, and keys are used in Symantec/Broadcom Data Loss Prevention.
Console Browser Certificate(.keystore): Create, sign, and import an SSL certificate signed by a Trusted Certificate Authority for the Enforce Console Certificate
Java cacerts keystore(cacerts): Importing SSL certificates to Enforce or Discover servers
Cloud Detector Certificate: Installing cloud certificates for detectors
Enforce to SMG Email quarantine: Configuring certificates and authentication section of the Symantec Data Loss Prevention Email Quarantine Connect FlexResponse Implementation Guide
Enforce to Amazon RDS for Oracle secure connection: About securing communications between the Enforce Server and Amazon RDS for Oracle
Enforce Server to Oracle secure connection: About securing communications between the Enforce server and the database
On-Premise Detection Server Certificates(.sslkeystore): How to generate and add a new Detection Server certificates using SSLkeytool
Network Prevent for Email server(prevent.ks): Setting up TLS encryption for SMTP Prevent
Network Prevent for Web server(secureicap.jks): Configuring a secure ICAP keystore for Network Prevent for Web
OCR Client Certificates and Keystores(ocr_keystore.jks): What Certificates, keystores, and keys are used on Symantec Data Loss Prevention OCR(Optical Character Recognition) Servers
Endpoint Prevent Server:
Working with endpoint certificates
Secure communications between DLP Agents and Endpoint Servers
Agent Package Certs(.cer): Agent installation package contents
OCR Server Certificates and keystores(ocr_keystore.jks): What Certificates, keystores, and keys are used on Symantec Data Loss Prevention OCR(Optical Character Recognition) Servers