Checking Validity of Certificate

You can use the CHECKCERT command to determine if a certificate is valid.

The CHECKCERT command can only check certificates. The z/OS file that contains the certificate must be defined as RECFM=VB. Only certificates that contain the following data in the first line can be checked:

-----BEGIN CERTIFICATE----

Example

See the following example of RACF command to check a certificate:

RACDCERT CHECKCERT(z/OS dataset)