Listing what we have
$ /opt/IBM/WebSphere/AppServer/java/jre/bin/ikeycmd -cert -list -db /opt/IBM/WebSphere/AppServer/profiles/BAMN1Profile/cognos/BAMSR011.Support/configuration/signkeypair/jCAKeystore -pw MONITOR -type pkcs12
Importing the WAS certificate
$ /opt/IBM/WebSphere/AppServer/java/jre/bin/ikeycmd -cert -add -db /opt/IBM/WebSphere/AppServer/profiles/BAMN1Profile/cognos/BAMSR011.Support/configuration/signkeypair/jCAKeystore -type pkcs12 -file /tmp/wasroot.cert -label WASCERT -pw MONITOR
Exporting the Cognos CA certificate
$ /opt/IBM/WebSphere/AppServer/java/jre/bin/ikeycmd -cert -extract -label ca -db /opt/IBM/WebSphere/AppServer/profiles/BAMN1Profile/cognos/BAMSR011.Support/configuration/signkeypair/jCAKeystore -type pkcs12 -pw MONITOR -target /tmp/cognos.cert