A mismatch was found using the Certificate Utility report (CERTUTIL)
Applied the certificate but it is showing the mismatch and the output is different.
Release : 16.0
Component : ACF2 for z/OS
Sometimes this is due to non invocation of the ACF2 REFRESH commands.
IF you add, delete or change certificates the ACF2 REFRESH commands should be issued.
The CERTDATA record table builds dynamically unless it's a shared database environment, but the KEYRING records have to always be manually rebuilt.
Suggest issuing the following ACF2 modify commands and verify if the behavior changes.
F ACF2,REBUILD(USR),CLASS(P)
F ACF2,OMVS