Re: Expired certificates

[Pete Helgren <pete@xxxxxxxxxx>]

The label is also used to refer to the certificate in the HTTP Server 
for i.  I have a wildcard cert for my helgren.com website. When I 
created the CSR I gave it the label of "Helgren_Wildcard" and processed 
it to create the certificate.  Since I host the website on my IBM i, in 
the reverse proxy I have  SSLServerCert directive set to 
Helgren_Wildcard so it knows what certificate to apply to the instance 
(I have many certs and websites hosted on my i).

So, you can give it a label of whatever you want but you'll use that 
label if you are using TLS on your IBM i HTTP server.  That is the only 
"connection" I am aware of.

Pete Helgren
www.petesworkshop.com
CISSP - MSCM
GIAC Cloud Penetration Tester
AWS Certified Cloud Practitioner
Microsoft Certified: Azure Fundamentals

On 2/9/2026 3:56 PM, v4forbes@xxxxxxxxx wrote:
> I asked IBM this question a while ago.  It used to cause problems, but IBM
> now ignores them.  The main reason to delete them is for readability.  I
> only keep the previous one as a reference of the parms for the cert.
>
> The label field is merely a text field for you to know what the cert is used
> for.  I.e., I used FTP2026 as a label for the cert that handles FTP features
> like file transfer, 5250 etc.
>
> -----Original Message-----
> From: MIDRANGE-L <midrange-l-bounces@xxxxxxxxxxxxxxxxxx> On Behalf Of
> smith5646midrange@xxxxxxxxx
> Sent: Monday, February 9, 2026 3:03 PM
> To: 'Midrange Systems Technical Discussion' <midrange-l@xxxxxxxxxxxxxxxxxx>
> Subject: Expired certificates
>
> This might be some stupid questions but.
>
>   
>
> My client has a boatload of expired certificates on their machines.  Some
> expired 10 years ago.  Do old expired certificates need to remain on the
> system for any reason or is this just a case of them not cleaning the
> expired ones up?
>
>   
>
> When I import a certificate using the DCM, one of the fields is "Label".
> Does it matter what I put in this field?  Is it for reference only or is it
> used by the programs that needs the certificate?
>
> --
> This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
> To post a message email: MIDRANGE-L@xxxxxxxxxxxxxxxxxx To subscribe,
> unsubscribe, or change list options,
> visit: https://lists.midrange.com/mailman/listinfo/midrange-l
> or email: MIDRANGE-L-request@xxxxxxxxxxxxxxxxxx
> Before posting, please take a moment to review the archives at
> https://archive.midrange.com/midrange-l.
>
> Please contact support@xxxxxxxxxxxxxxxxxxxx for any subscription related
> questions.