Can two certificates for mvsdev.abcstoret,com with different issuers exist in the ACF2 database? Would the certificates be a duplicate?
Release : 16.0
Component : ACF2 for z/OS
There can be two certificates for mvsdev.abcstoret.com which will have different issuers, if the two certificates are owned by the same logonid the certificates would need to have different labels.
Here is an example of two certificates owned by logonid ELADD with the same SUBJDN with different ISSUERDSs:
GENCERT ELADD.CERT1 SUBJ(CN=‘mvsdev.abcstoret.com’ OU=‘MyCo’ C=US) LABEL(ELAServer) SIGNWITH(certauth Label(LocalELA1 CA))
CERTDATA / ELADD.CERT1 LAST CHANGED BY USER002 ON 07/18/22-10:57
ISSUERDN(CN=ELA1CA.OU=Auditing Department.O=Company Name.
C=US) KEYSIZE(2,048) LABEL(ELAServer) SERIAL#(02)
SUBJDN(CN=mvsdev.abcstoret.com.OU=MyCo.C=US) TRUST
Certificate is not connected to any key rings
PROFILE
GENCERT ELADD.CERT2 SUBJ(CN=‘mvsdev.abcstoret.com’ OU=‘MyCo’ C=US) LABEL(ELAServer2) SIGNWITH(certauth Label(LocalELA2 CA))
CERTDATA / ELADD.CERT2 LAST CHANGED BY USER002 ON 07/18/22-10:57
ISSUERDN(CN=ELA2CA.OU=Auditing Department.O=Company Name.
C=US) KEYSIZE(2,048) LABEL(ELAServer2) SERIAL#(03)
SUBJDN(CN=mvsdev.abcstoret.com.OU=MyCo.C=US) TRUST
Certificate is not connected to any key rings