You can view information about TLS server certifications

About this task

Note: This procedure describes steps used in Domino 11 and earlier versions. As of Domino 12, use of Certificate Manager and Certificate Store (certstore.nsf) is the preferred method for generating and managing certificates. For more information, see Managing TLS certificates with Certificate Manager.

Each TLS server certificate contains this information:

• The expiration date. The default trusted roots that come with Domino® do not have expiration dates.
• The distinguished name of the server that requested the certificate.
• The distinguished name of the CA that signed the certificate.
• The size of the public key. The size determines the strength of the encrypted public key.

To view an TLS server certificate

Procedure

1. Map a network drive to the directory that contains the key ring file.

2. From the Notes® client, open the Server Certificate Admin (CERTSRV.NSF) application.

3. Click View & Edit Key Rings.

4. Click Choose Key Ring to Display.

5. Enter the name of the key ring file that contains the certificates you want to view.

6. Enter the password for the key ring file.

7. Do one of these:

• To view the server certificate, select a document in the Site Certificates category.
• To view a trusted root certificate, select a document in the Certification Authorities category.

Help on Help

All Help Contents

Help on Help