List all certificates and their details

Products

• Top Secret

Issue/Introduction

TSS LIST(ACIDS) DIGICERT(ALL) displays all certificates and their owners, but it doesnt display the certificate details and attributes.

Is there a way to display all certificates and their details?

Environment

Release : 16.0

Component :

Resolution

SAFCRRPT is a batch certificate reporting utility which can be used to list all certificates on the security file.

//CERTUTL JOB 1,'CA-TSS CERT UTILITY',MSGCLASS=A,TYPRUN=HOLD            00010002
//*                                                                     00020000
//*************************************************************         00030000
//*                                                           *         00040000
//*   CA-TSS  (16.00) SECURITY FOR Z/OS                       *         00050003
//*   Copyright © 2015 CA, Inc. All rights reserved.          *         00060000
//*                                                           *         00070000
//*   MEMBER:    CERTUTIL                                     *         00080000
//*   FUNCTION:  This job can be used to run the certificate  *         00090000
//*              utility.                                     *         00100000
//*                                                           *         00110000
//*************************************************************         00120000
//*                                                                     00130000
//*------------------------------------------------------------         00140000
//* Use the Certificate Utility to display the certificate hierarchy    00141002
//* in your database. Optionally, it will display each certificate, its 00142002
//* signing certificate, the certificates that it has signed, and all   00143002
//* of the information provided with the CHKCERT and LIST commands.     00144002
//*------------------------------------------------------------         00180000
//*                                                                     00190000
//ALLCERTS EXEC PGM=SAFCRRPT,PARM='TITLE(Default Title)'                00200000
//*                                                                     00210000
//SYSUDUMP DD   SYSOUT=*                                                00220000
//SYSPRINT DD   SYSOUT=*                                                00230000
//SYSIN    DD   *                                                       00240000
FIELDS(ISSUER SUBJECT ACTIVE EXPIRE KEYSIZE PUBLIC PKDS SIGNOF LABEL 
SERIAL) 

RECORDID(-)                                                             00250000
//