Since I use FireFox too, I had the same problem, so I went to 
http://www.digicert.com and did a search for "DigiCertGlobalRootCA" and got to 
this page: https://www.digicert.com/digicert-root-certificates.htm
Then do a web page find with a portion of the serial number, note: every two 
characters insert a colon (":"), "08:3B:30:56".
That got me to the line with " DigiCert Global Root CA", there to the right is 
a "Download" link, I right clicked and did a "Save As" to a directory and file 
name of my choosing.  I resumed with step "II." Of the instructions and 
everything worked for me, at least.

Al Nims
Systems Admin/Programmer 3
UFIT
University of Florida
(352) 273-1298

-----Original Message-----
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf 
Of Paul Gilmartin
Sent: Monday, January 22, 2018 2:45 PM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: Update: Server Certificates Expiring - Sooner!

On Mon, 22 Jan 2018 13:36:48 -0600, Mark Zelden wrote:
>
>What didn't work:
>
>If I click on the URL in Firefox (my default browers), win-doze just says "the 
>certificate is already installed".
>
>If I put the URL in a IE window (or make IE my default), the URL brings up the 
>certificate.  
>I do "Save as", select text file.    
>I upload the z/OS as binary, LRECL=256,RECFM=VB,BLKSIZE=0   
>
>I turn the data set over to the RACF admin and they issue the RACDCERT command
>exactly as in the flash, substituting the data set name I supplied.   
>
>The RACF admin gets the following error:
>IRRD104I The input data set does not contain a valid certificate.   
>
>I tried using different encodings with "SAVE AS", like Unicode, Unicode 
>UTF-8 etc, but
>  none of them worked with RACDCERT or with windows.  
>
>=========================================
>
>What does work! ...  
>
>Put the URL in an IE window.  SAVE as "Webpage, HTML only".    
>Then upload the z/OS as binary, LRECL=256,RECFM=VB, BLKSIZE=n   
>issue RACDCERT command with the uploaded data set.
>
>=========================================
Sigh.  They could have made it a resource with MIME type 
application/octet-stream.  If they cared.

-- gil

----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions, send email to 
lists...@listserv.ua.edu with the message: INFO IBM-MAIN

----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Reply via email to