首先，我们将导出个人证书。
要下载并安装个人证书，请执行下列操作。
该站点要求输入密码或个人证书。
This site is requesting a password or a personal certificate.
您需要添加队列管理器的个人证书，即前面生成的。
You need to add the queue manager's personal certificate, which was generated previously.
并拥有对等方的个人证书所对应的签名证书。
Possesses the signing certificate that corresponds to its peer's personal certificate.
在管理控制台中选择一个个人证书，显示它的指纹。
Selecting a personal certificate in the admin console displays its fingerprint.
通常，Web服务客户机将把此公钥导入其信任存储，然后用它来生成个人证书密钥请求。
Normally the web service client will import this public key into its trust store and use it to generate a personal certificate key request.
该命令指定在一个位于当前目录下的密钥库中生成一张个人证书（公钥／私钥对）。
This command specifies that a personal certificate (public/private key pair) be generated in a keystore that is to be located in the current directory.
证明链定义了批准认证中心的层次，并且提供了批准一张给定的个人证书所需的ca证书列表。
The certification chain defines the hierarchy of approving certification Authorities, and provides a list of ca certificates required to approve a given personal certificate.
选择这个个人证书，添加被签证的证书(图4)，然后从拷贝的位置添加这个服务器证书。
Select the personnel certificate, add signer certificates (Figure 4), and then add the server certificate from the copied location.
在此情况下，CAHelper应用服务器用做CA的网站，用户可以从该服务器下载个人证书。
In this case, the ca Helper application serves as the ca's Web site from which users can download their personal certificates.
删除其中现有的全部证书，然后添加verisign个人证书和was_jms_client公钥。
Remove all certificates that are currently there and add the VeriSign private certificate and was_jms_client public key.
此前不需要设置的密码现在需要传递到JSSE，以便它访问您的个人证书，这也是前面指定密码的原因。
The password that was not required to be set before will now need to be passed to the JSSE in order for it to access your personal certificate, which is why it was specified earlier.
“输入密码以打开文件”对话框提示您输入密码以将一个现有的证书导入到个人证书存储区中。
Enter password to open file dialog box prompts you to enter a password to import an existing certificate into the personal certificate store.
本文主要就PKI在以下两个方面的应用进行了介绍，一个是个人证书在安全电子邮件服务认证方面的应用；
This text has mainly made an introduction on the application in two following respects of PKI, One is application in safe E-mail service authentication of personal certificate;
该命令将用于个人证书(存储在jmskeystore下)的公钥导出到名为jmsclient . key的文件中。
This command exports the public key for the personal certificate stored in jmskeystore to a file called jmsclient.key.
因此，您应该将ca证书和其他签名证书放入信任存储库，并将私有信息(含有私钥的个人证书)放入密钥存储库中。
Thus, you should place ca certificates and other signing certificates in a trust store and private information (personal certificates with private keys) in the key store.
因此，您应该将ca证书和其他签名证书放入信任存储库，并将私有信息(含有私钥的个人证书)放入密钥存储库中。
Thus, you should place ca certificates and other signing certificates in a trust store and private information (personal certificates with private keys) in the key store.
应用推荐