Keys and Certificates for the Main Subsystems430 Netscape Certificate Management System Installation and Setup Guide • May 2002OCSP-compliant client that the Online Certificate Status Manager has processedthe request. The first time you generated this certificate is when you installed theOnline Certificate Status Manager. The default nickname for the certificate isocspSigningCert cert-, where identifies theCMS instance in which the Online Certificate Status Manager is installed.The Online Certificate Status Manager’s signing certificate was issued by the CA towhich you submitted the certificate signing request. You might have submitted therequest to an internally deployed CA or a public CA. To find out the issuer name,follow the instructions in “Viewing the Certificate Database Content” on page 482.SSL Server Key Pair and CertificateEvery Online Certificate Status Manager you have installed has at least one SSLserver certificate. The first time you generated this certificate is when you installedthe Online Certificate Status Manager. The default nickname for the certificate isServer-Cert cert-, where identifies the CMSinstance in which the Online Certificate Status Manager is installed.The Online Certificate Status Manager’s SSL server certificate was issued by the CAto which you submitted the certificate signing request. You might have submittedthe request to an internally deployed CA or a public CA. To find out the issuername, follow the instructions in “Viewing the Certificate Database Content” onpage 482.The Online Certificate Status Manager uses its SSL server certificate to do SSLserver-side authentication to the Online Certificate Status Manager Agent Servicesinterface.By default, the Online Certificate Status Manager uses a single SSL servercertificate for authentication purposes. However, you can request and installadditional SSL server certificates for the Online Certificate Status Manager. Forexample, you can configure the Online Certificate Status Manager to use separateserver certificates for authenticating to Netscape Console and the Online CertificateStatus Manager Agent Services interface. For instructions, see “Configuring theServer to Use Separate SSL Server Certificates” on page 459.
