C:\UNISPH~1\EMC\SMAS\jboss\bin>service.bat listcerts APACHKASTU4V04.apac.nsroot.net@Keystore-2
JBOSS_HOME is C:\UNISPH~1\EMC\SMAS\jboss
JAVA_HOME is C:\UNISPH~1\EMC\SMAS\jre
U4V_HOME is C:\UNISPH~1\EMC\SMAS\jboss\domain
CSTPATH is C:\UNISPH~1\EMC\SMAS\jboss\standalone\lib
CST is \standalone\lib
PATH is C:\UNISPH~1\EMC\SMAS\jboss\standalone\lib;C:\UNISPH~1\EMC\SMAS\jboss\standalone\lib;C:\UNISPH~1\EMC\SMAS\jboss\s
tandalone\lib;C:\UNISPH~1\EMC\SMAS\jboss\standalone\lib;C:\UNISPH~1\EMC\SMAS\jboss\standalone\lib;C:\UNISPH~1\EMC\SMAS\j
boss\standalone\lib;C:\UNISPH~1\EMC\SMAS\jboss\standalone\lib;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:
\Windows\System32\WindowsPowerShell\v1.0\;C:\IBM\ITM\bin;C:\IBM\ITM\TMAITM6;C:\IBM\ITM\InstallITM;C:\Program Files\EMC\S
YMCLI\bin
Running command [REM "C:\UNISPH~1\EMC\SMAS\jre\bin\keytool" -list -v -keystore "C:\UNISPH~1\EMC\SMAS\jboss\standalone\co
nfiguration\keystore" -storepass [KEYSTORE_PASSPHRASE]]

Keystore type: JKS
Keystore provider: SUN

Your keystore contains 5 entries

Alias name: root
Creation date: Aug 6, 2015
Entry type: trustedCertEntry

Owner: CN=Citi Internal Root CA, DC=Citi, DC=net
Issuer: CN=Citi Internal Root CA, DC=Citi, DC=net
Serial number: df56964be51c1a6493b499dfd316416
Valid from: Tue Apr 12 01:33:18 SGT 2011 until: Sun Apr 12 01:43:18 SGT 2026
Certificate fingerprints:
         MD5:  09:0B:75:65:C7:44:07:CB:F9:73:5D:CF:27:14:80:42
         SHA1: DC:C1:D6:EF:F3:35:B5:3E:FD:87:1C:79:C6:70:D3:99:FE:B7:5F:31
         SHA256: 22:29:91:14:8B:77:47:30:AD:00:EB:1A:A2:C4:D4:80:75:62:6B:B9:04:3D:CF:30:90:90:A5:6B:80:00:DB:FE
         Signature algorithm name: SHA1withRSA
         Version: 3

Extensions:

#1: ObjectId: 1.3.6.1.4.1.311.21.1 Criticality=false
0000: 02 01 00                                           ...


#2: ObjectId: 2.5.29.19 Criticality=true
BasicConstraints:[
  CA:true
  PathLen:2147483647
]

#3: ObjectId: 2.5.29.15 Criticality=true
KeyUsage [
  Key_CertSign
  Crl_Sign
]

#4: ObjectId: 2.5.29.14 Criticality=false
SubjectKeyIdentifier [
KeyIdentifier [
0000: 12 71 BE 6B C4 B2 8E D2   41 3F E2 43 1D 27 C9 10  .q.k....A?.C.'..
0010: 89 FA E5 92                                        ....
]
]



*******************************************
*******************************************


Alias name: intermiediate2
Creation date: Aug 6, 2015
Entry type: trustedCertEntry

Owner: CN=Citi Internal Device CA 01, DC=nsroot, DC=net
Issuer: CN=Citi Internal Policy CA, DC=Citi, DC=net
Serial number: 19f6c932000000000005
Valid from: Fri May 06 06:44:18 SGT 2011 until: Sat May 06 06:54:18 SGT 2017
Certificate fingerprints:
         MD5:  77:71:37:9B:32:FB:D1:6A:30:6E:6B:54:C2:3A:AA:5E
         SHA1: B0:79:E1:6C:1E:8F:A1:72:00:92:F4:0F:ED:93:10:A1:27:50:31:7E
         SHA256: 8B:10:FB:09:1F:13:D7:82:91:0A:76:1A:B2:A1:E9:AC:50:B2:7C:88:81:33:33:6F:59:3F:EB:63:97:B9:66:1C
         Signature algorithm name: SHA1withRSA
         Version: 3

Extensions:

#1: ObjectId: 1.3.6.1.4.1.311.20.2 Criticality=false
0000: 1E 0A 00 53 00 75 00 62   00 43 00 41              ...S.u.b.C.A


#2: ObjectId: 1.3.6.1.4.1.311.21.1 Criticality=false
0000: 02 01 00                                           ...


#3: ObjectId: 1.3.6.1.5.5.7.1.1 Criticality=false
AuthorityInfoAccess [
  [
   accessMethod: caIssuers
   accessLocation: URIName: http://certificaterevocationlist.certificates.ti.citigroup.net/PKIRoot/Citi%20Internal%20Pol
icy%20CA.crt
,
   accessMethod: caIssuers
   accessLocation: URIName: ldap:///cn=Citi%20Internal%20Policy%20CA,CN=AIA,CN=Public%20Key%20Services,CN=Services,CN=Co
nfiguration,DC=nsroot,DC=net?cACertificate?base?objectClass=certificationAuthority
]
]

#4: ObjectId: 2.5.29.35 Criticality=false
AuthorityKeyIdentifier [
KeyIdentifier [
0000: E9 92 D5 1D 07 44 BB 77   82 C3 63 32 D7 72 88 50  .....D.w..c2.r.P
0010: 63 B5 CD 44                                        c..D
]
]

#5: ObjectId: 2.5.29.19 Criticality=true
BasicConstraints:[
  CA:true
  PathLen:2147483647
]

#6: ObjectId: 2.5.29.31 Criticality=false
CRLDistributionPoints [
  [DistributionPoint:
     [URIName: http://certificaterevocationlist.certificates.ti.citigroup.net/PKIRoot/Citi%20Internal%20Policy%20CA.crl,
 URIName: ldap:///cn=Citi%20Internal%20Policy%20CA,CN=nsrootcapswpp01,CN=CDP,CN=Public%20Key%20Services,CN=Services,CN=C
onfiguration,DC=nsroot,DC=net?certificateRevocationList?base?objectClass=cRLDistributionPoint]
]]

#7: ObjectId: 2.5.29.15 Criticality=false
KeyUsage [
  DigitalSignature
  Key_CertSign
  Crl_Sign
]

#8: ObjectId: 2.5.29.14 Criticality=false
SubjectKeyIdentifier [
KeyIdentifier [
0000: BA ED 4F BF 69 C6 D1 08   AB 61 60 C8 B2 0B EA 63  ..O.i....a`....c
0010: DB C6 2E 75                                        ...u
]
]



*******************************************
*******************************************


Alias name: intermiediate1
Creation date: Aug 6, 2015
Entry type: trustedCertEntry

Owner: CN=Citi Internal Policy CA, DC=Citi, DC=net
Issuer: CN=Citi Internal Root CA, DC=Citi, DC=net
Serial number: 1e2e622e000000000002
Valid from: Tue Apr 12 04:22:03 SGT 2011 until: Wed Apr 12 04:32:03 SGT 2023
Certificate fingerprints:
         MD5:  EF:61:49:8D:1D:B7:39:4D:87:84:9E:D9:2D:09:A5:CA
         SHA1: AA:D8:F9:54:2D:C1:2C:1B:D5:FD:11:04:6F:5A:79:79:8B:80:92:FF
         SHA256: 2D:1A:9E:C6:69:21:4B:E8:7A:A5:3B:1A:C5:CF:33:7B:EA:83:90:56:49:8E:BE:0F:16:EE:30:3B:F2:65:B3:9C
         Signature algorithm name: SHA1withRSA
         Version: 3

Extensions:

#1: ObjectId: 1.3.6.1.4.1.311.20.2 Criticality=false
0000: 1E 0A 00 53 00 75 00 62   00 43 00 41              ...S.u.b.C.A


#2: ObjectId: 1.3.6.1.4.1.311.21.1 Criticality=false
0000: 02 01 00                                           ...


#3: ObjectId: 1.3.6.1.5.5.7.1.1 Criticality=false
AuthorityInfoAccess [
  [
   accessMethod: caIssuers
   accessLocation: URIName: http://certificaterevocationlist.certificates.ti.citigroup.net/PKIRoot/Citi%20Internal%20Roo
t%20CA.crt
,
   accessMethod: caIssuers
   accessLocation: URIName: ldap:///cn=Citi%20Internal%20Root%20CA,CN=AIA,CN=Public%20Key%20Services,CN=Services,CN=Conf
iguration,DC=nsroot,DC=net?cACertificate?base?objectClass=certificationAuthority
]
]

#4: ObjectId: 2.5.29.35 Criticality=false
AuthorityKeyIdentifier [
KeyIdentifier [
0000: 12 71 BE 6B C4 B2 8E D2   41 3F E2 43 1D 27 C9 10  .q.k....A?.C.'..
0010: 89 FA E5 92                                        ....
]
]

#5: ObjectId: 2.5.29.19 Criticality=true
BasicConstraints:[
  CA:true
  PathLen:2147483647
]

#6: ObjectId: 2.5.29.31 Criticality=false
CRLDistributionPoints [
  [DistributionPoint:
     [URIName: http://certificaterevocationlist.certificates.ti.citigroup.net/PKIRoot/Citi%20Internal%20Root%20CA.crl, U
RIName: ldap:///cn=Citi%20Internal%20Root%20CA,CN=nsrootcarswpp01,CN=CDP,CN=Public%20Key%20Services,CN=Services,CN=Confi
guration,DC=nsroot,DC=net?certificateRevocationList?base?objectClass=cRLDistributionPoint]
]]

#7: ObjectId: 2.5.29.15 Criticality=false
KeyUsage [
  DigitalSignature
  Key_CertSign
  Crl_Sign
]

#8: ObjectId: 2.5.29.14 Criticality=false
SubjectKeyIdentifier [
KeyIdentifier [
0000: E9 92 D5 1D 07 44 BB 77   82 C3 63 32 D7 72 88 50  .....D.w..c2.r.P
0010: 63 B5 CD 44                                        c..D
]
]



*******************************************
*******************************************


Alias name: tomcat
Creation date: Aug 6, 2015
Entry type: PrivateKeyEntry
Certificate chain length: 4
Certificate[1]:
Owner: CN=APACHKASTU4V04.apac.nsroot.net, OU=164176, O=Citigroup Inc., L=Singapore, ST=SG, C=SG
Issuer: CN=Citi Internal Device CA 01, DC=nsroot, DC=net
Serial number: 2aa0946000000003200f
Valid from: Thu Jul 30 17:40:53 SGT 2015 until: Sat May 06 06:54:18 SGT 2017
Certificate fingerprints:
         MD5:  F0:9A:EA:C5:01:83:E4:14:FB:50:B3:87:E8:08:6C:DE
         SHA1: 92:56:0C:6D:77:95:6A:0A:23:99:8A:07:74:D9:41:40:20:18:01:8C
         SHA256: 7F:97:38:F7:12:FB:4D:13:72:BC:88:5B:FC:43:FE:C8:68:F8:7F:6E:C7:2A:55:E1:7A:3C:48:5E:C7:EF:51:C6
         Signature algorithm name: SHA1withRSA
         Version: 3

Extensions:

#1: ObjectId: 1.2.840.113549.1.9.15 Criticality=false
0000: 30 35 30 0E 06 08 2A 86   48 86 F7 0D 03 02 02 02  050...*.H.......
0010: 00 80 30 0E 06 08 2A 86   48 86 F7 0D 03 04 02 02  ..0...*.H.......
0020: 00 80 30 07 06 05 2B 0E   03 02 07 30 0A 06 08 2A  ..0...+....0...*
0030: 86 48 86 F7 0D 03 07                               .H.....


#2: ObjectId: 1.3.6.1.4.1.311.21.10 Criticality=false
0000: 30 0C 30 0A 06 08 2B 06   01 05 05 07 03 01        0.0...+.......


#3: ObjectId: 1.3.6.1.4.1.311.21.7 Criticality=false
0000: 30 2D 06 25 2B 06 01 04   01 82 37 15 08 84 80 DF  0-.%+.....7.....
0010: 2C 87 FE E0 2F 87 85 8D   1A 84 D6 9C 4E 93 FD 42  ,.../.......N..B
0020: 1B 83 AC 99 0A 84 E5 8B   5B 02 01 64 02 01 07     ........[..d...


#4: ObjectId: 1.3.6.1.5.5.7.1.1 Criticality=false
AuthorityInfoAccess [
  [
   accessMethod: caIssuers
   accessLocation: URIName: http://certificaterevocationlist.certificates.ti.citigroup.net/PKIRoot/Citi%20Internal%20Dev
ice%20CA%2001.crt
,
   accessMethod: caIssuers
   accessLocation: URIName: ldap:///cn=Citi%20Internal%20Device%20CA%2001,CN=AIA,CN=Public%20Key%20Services,CN=Services,
CN=Configuration,DC=nsroot,DC=net?cACertificate?base?objectClass=certificationAuthority
]
]

#5: ObjectId: 2.5.29.35 Criticality=false
AuthorityKeyIdentifier [
KeyIdentifier [
0000: BA ED 4F BF 69 C6 D1 08   AB 61 60 C8 B2 0B EA 63  ..O.i....a`....c
0010: DB C6 2E 75                                        ...u
]
]

#6: ObjectId: 2.5.29.31 Criticality=false
CRLDistributionPoints [
  [DistributionPoint:
     [URIName: http://certificaterevocationlist.certificates.ti.citigroup.net/PKIRoot/Citi%20Internal%20Device%20CA%2001
.crl, URIName: ldap:///cn=Citi%20Internal%20Device%20CA%2001,CN=nsrootcadswpp01,CN=CDP,CN=Public%20Key%20Services,CN=Ser
vices,CN=Configuration,DC=nsroot,DC=net?certificateRevocationList?base?objectClass=cRLDistributionPoint]
]]

#7: ObjectId: 2.5.29.37 Criticality=false
ExtendedKeyUsages [
  serverAuth
]

#8: ObjectId: 2.5.29.15 Criticality=true
KeyUsage [
  DigitalSignature
  Key_Encipherment
]

#9: ObjectId: 2.5.29.17 Criticality=false
SubjectAlternativeName [
  DNSName: apachkastu4v04.apac.nsroot.net
  DNSName: apachkastu4v04
]

#10: ObjectId: 2.5.29.14 Criticality=false
SubjectKeyIdentifier [
KeyIdentifier [
0000: 3E 57 82 54 F0 D4 18 BE   A8 04 98 88 D4 32 41 A2  >W.T.........2A.
0010: F8 E4 48 91                                        ..H.
]
]

Certificate[2]:
Owner: CN=Citi Internal Device CA 01, DC=nsroot, DC=net
Issuer: CN=Citi Internal Policy CA, DC=Citi, DC=net
Serial number: 19f6c932000000000005
Valid from: Fri May 06 06:44:18 SGT 2011 until: Sat May 06 06:54:18 SGT 2017
Certificate fingerprints:
         MD5:  77:71:37:9B:32:FB:D1:6A:30:6E:6B:54:C2:3A:AA:5E
         SHA1: B0:79:E1:6C:1E:8F:A1:72:00:92:F4:0F:ED:93:10:A1:27:50:31:7E
         SHA256: 8B:10:FB:09:1F:13:D7:82:91:0A:76:1A:B2:A1:E9:AC:50:B2:7C:88:81:33:33:6F:59:3F:EB:63:97:B9:66:1C
         Signature algorithm name: SHA1withRSA
         Version: 3

Extensions:

#1: ObjectId: 1.3.6.1.4.1.311.20.2 Criticality=false
0000: 1E 0A 00 53 00 75 00 62   00 43 00 41              ...S.u.b.C.A


#2: ObjectId: 1.3.6.1.4.1.311.21.1 Criticality=false
0000: 02 01 00                                           ...


#3: ObjectId: 1.3.6.1.5.5.7.1.1 Criticality=false
AuthorityInfoAccess [
  [
   accessMethod: caIssuers
   accessLocation: URIName: http://certificaterevocationlist.certificates.ti.citigroup.net/PKIRoot/Citi%20Internal%20Pol
icy%20CA.crt
,
   accessMethod: caIssuers
   accessLocation: URIName: ldap:///cn=Citi%20Internal%20Policy%20CA,CN=AIA,CN=Public%20Key%20Services,CN=Services,CN=Co
nfiguration,DC=nsroot,DC=net?cACertificate?base?objectClass=certificationAuthority
]
]

#4: ObjectId: 2.5.29.35 Criticality=false
AuthorityKeyIdentifier [
KeyIdentifier [
0000: E9 92 D5 1D 07 44 BB 77   82 C3 63 32 D7 72 88 50  .....D.w..c2.r.P
0010: 63 B5 CD 44                                        c..D
]
]

#5: ObjectId: 2.5.29.19 Criticality=true
BasicConstraints:[
  CA:true
  PathLen:2147483647
]

#6: ObjectId: 2.5.29.31 Criticality=false
CRLDistributionPoints [
  [DistributionPoint:
     [URIName: http://certificaterevocationlist.certificates.ti.citigroup.net/PKIRoot/Citi%20Internal%20Policy%20CA.crl,
 URIName: ldap:///cn=Citi%20Internal%20Policy%20CA,CN=nsrootcapswpp01,CN=CDP,CN=Public%20Key%20Services,CN=Services,CN=C
onfiguration,DC=nsroot,DC=net?certificateRevocationList?base?objectClass=cRLDistributionPoint]
]]

#7: ObjectId: 2.5.29.15 Criticality=false
KeyUsage [
  DigitalSignature
  Key_CertSign
  Crl_Sign
]

#8: ObjectId: 2.5.29.14 Criticality=false
SubjectKeyIdentifier [
KeyIdentifier [
0000: BA ED 4F BF 69 C6 D1 08   AB 61 60 C8 B2 0B EA 63  ..O.i....a`....c
0010: DB C6 2E 75                                        ...u
]
]

Certificate[3]:
Owner: CN=Citi Internal Policy CA, DC=Citi, DC=net
Issuer: CN=Citi Internal Root CA, DC=Citi, DC=net
Serial number: 1e2e622e000000000002
Valid from: Tue Apr 12 04:22:03 SGT 2011 until: Wed Apr 12 04:32:03 SGT 2023
Certificate fingerprints:
         MD5:  EF:61:49:8D:1D:B7:39:4D:87:84:9E:D9:2D:09:A5:CA
         SHA1: AA:D8:F9:54:2D:C1:2C:1B:D5:FD:11:04:6F:5A:79:79:8B:80:92:FF
         SHA256: 2D:1A:9E:C6:69:21:4B:E8:7A:A5:3B:1A:C5:CF:33:7B:EA:83:90:56:49:8E:BE:0F:16:EE:30:3B:F2:65:B3:9C
         Signature algorithm name: SHA1withRSA
         Version: 3

Extensions:

#1: ObjectId: 1.3.6.1.4.1.311.20.2 Criticality=false
0000: 1E 0A 00 53 00 75 00 62   00 43 00 41              ...S.u.b.C.A


#2: ObjectId: 1.3.6.1.4.1.311.21.1 Criticality=false
0000: 02 01 00                                           ...


#3: ObjectId: 1.3.6.1.5.5.7.1.1 Criticality=false
AuthorityInfoAccess [
  [
   accessMethod: caIssuers
   accessLocation: URIName: http://certificaterevocationlist.certificates.ti.citigroup.net/PKIRoot/Citi%20Internal%20Roo
t%20CA.crt
,
   accessMethod: caIssuers
   accessLocation: URIName: ldap:///cn=Citi%20Internal%20Root%20CA,CN=AIA,CN=Public%20Key%20Services,CN=Services,CN=Conf
iguration,DC=nsroot,DC=net?cACertificate?base?objectClass=certificationAuthority
]
]

#4: ObjectId: 2.5.29.35 Criticality=false
AuthorityKeyIdentifier [
KeyIdentifier [
0000: 12 71 BE 6B C4 B2 8E D2   41 3F E2 43 1D 27 C9 10  .q.k....A?.C.'..
0010: 89 FA E5 92                                        ....
]
]

#5: ObjectId: 2.5.29.19 Criticality=true
BasicConstraints:[
  CA:true
  PathLen:2147483647
]

#6: ObjectId: 2.5.29.31 Criticality=false
CRLDistributionPoints [
  [DistributionPoint:
     [URIName: http://certificaterevocationlist.certificates.ti.citigroup.net/PKIRoot/Citi%20Internal%20Root%20CA.crl, U
RIName: ldap:///cn=Citi%20Internal%20Root%20CA,CN=nsrootcarswpp01,CN=CDP,CN=Public%20Key%20Services,CN=Services,CN=Confi
guration,DC=nsroot,DC=net?certificateRevocationList?base?objectClass=cRLDistributionPoint]
]]

#7: ObjectId: 2.5.29.15 Criticality=false
KeyUsage [
  DigitalSignature
  Key_CertSign
  Crl_Sign
]

#8: ObjectId: 2.5.29.14 Criticality=false
SubjectKeyIdentifier [
KeyIdentifier [
0000: E9 92 D5 1D 07 44 BB 77   82 C3 63 32 D7 72 88 50  .....D.w..c2.r.P
0010: 63 B5 CD 44                                        c..D
]
]

Certificate[4]:
Owner: CN=Citi Internal Root CA, DC=Citi, DC=net
Issuer: CN=Citi Internal Root CA, DC=Citi, DC=net
Serial number: df56964be51c1a6493b499dfd316416
Valid from: Tue Apr 12 01:33:18 SGT 2011 until: Sun Apr 12 01:43:18 SGT 2026
Certificate fingerprints:
         MD5:  09:0B:75:65:C7:44:07:CB:F9:73:5D:CF:27:14:80:42
         SHA1: DC:C1:D6:EF:F3:35:B5:3E:FD:87:1C:79:C6:70:D3:99:FE:B7:5F:31
         SHA256: 22:29:91:14:8B:77:47:30:AD:00:EB:1A:A2:C4:D4:80:75:62:6B:B9:04:3D:CF:30:90:90:A5:6B:80:00:DB:FE
         Signature algorithm name: SHA1withRSA
         Version: 3

Extensions:

#1: ObjectId: 1.3.6.1.4.1.311.21.1 Criticality=false
0000: 02 01 00                                           ...


#2: ObjectId: 2.5.29.19 Criticality=true
BasicConstraints:[
  CA:true
  PathLen:2147483647
]

#3: ObjectId: 2.5.29.15 Criticality=true
KeyUsage [
  Key_CertSign
  Crl_Sign
]

#4: ObjectId: 2.5.29.14 Criticality=false
SubjectKeyIdentifier [
KeyIdentifier [
0000: 12 71 BE 6B C4 B2 8E D2   41 3F E2 43 1D 27 C9 10  .q.k....A?.C.'..
0010: 89 FA E5 92                                        ....
]
]



*******************************************
*******************************************


Alias name: univmaxrestforwardingclient
Creation date: Jul 30, 2015
Entry type: PrivateKeyEntry
Certificate chain length: 1
Certificate[1]:
Owner: CN=univmaxrestforwardingclient, OU=CTD, O=EMC, L=HOPKINTON, ST=MA, C=US
Issuer: CN=univmaxrestforwardingclient, OU=CTD, O=EMC, L=HOPKINTON, ST=MA, C=US
Serial number: 32a2fbcc
Valid from: Thu Jul 30 16:00:39 SGT 2015 until: Sat Jul 06 16:00:39 SGT 2115
Certificate fingerprints:
         MD5:  6D:FE:AD:61:04:2D:04:8C:85:3A:54:A1:1B:17:E5:B9
         SHA1: 39:D5:28:CD:D9:D7:0A:A6:EF:D3:C9:8A:08:0D:AF:BF:7C:03:97:BB
         SHA256: DD:5A:72:D8:47:AB:B1:EE:A1:B4:23:55:A3:F2:4D:A0:D6:3D:DF:8D:64:78:02:99:0E:57:8E:BD:45:70:32:E3
         Signature algorithm name: SHA512withRSA
         Version: 3

Extensions:

#1: ObjectId: 2.5.29.19 Criticality=false
BasicConstraints:[
  CA:true
  PathLen:2147483647
]

#2: ObjectId: 2.5.29.14 Criticality=false
SubjectKeyIdentifier [
KeyIdentifier [
0000: BC 5A F1 56 DD 70 E1 13   F8 83 73 B4 F4 BE C2 5B  .Z.V.p....s....[
0010: 4B 83 AA 12                                        K...
]
]



*******************************************
*******************************************



C:\UNISPH~1\EMC\SMAS\jboss\bin>