You want to know which certificates, keystores and keys are used in Symantec/Broadcom Data Loss Prevention.
Enforce Server
Console Browser Certificate: Create, sign, and import an SSL certificate signed by a Trusted Certificate Authority for the Enforce Console Certificate
Java cacerts keystore: Importing SSL certificates to Enforce or Discover servers
Cloud Detector Certificate: Installing cloud certificates for detectors
Enforce to SMG Email quarantine: Configuring certificates and authentication section of the Symantec Data Loss Prevention Email Quarantine Connect FlexResponse Implementation Guide
Enforce to Amazon RDS for Oracle secure connection: About securing communications between the Enforce Server and Amazon RDS for Oracle
Enforce Server to Oracle secure connection: About securing communications between the Enforce server and the database section in the Symantec Data Loss Prevention Installation Guide for Windows
Detection Servers
On-Prem Detection Server Certificates: How to generate and add a new Detection Server certificates using SSLkeytool
Network Prevent for Email server: Setting up TLS encryption for SMTP Prevent
Network Prevent for Web server: Configuring a secure ICAP keystore for Network Prevent for Web
OCR Client Certificates and Keystores: What Certificates, keystores and keys are used on Symantec Data Loss Prevention OCR(Optical Character Recognition) Servers
Endpoint Prevent Server:
Working with endpoint certificates
About secure communications between DLP Agents and Endpoint Servers
Endpoint Agents
Agent Package Certs: Agent installation package contents
OCR Servers
OCR Server Certificates and keystores: What Certificates, keystores and keys are used on Symantec Data Loss Prevention OCR(Optical Character Recognition) Servers