Use the z/OS® UNIX certbundle command to create a certificate bundle file. A certificate bundle file can contain certificate and certificate revocation list (CRL) information. You can place certificate bundle files on an HTTP server. You can configure the CertificateBundleURL parameter on the IPSecDisciplineConfig statement in the configuration file of the network security services server to associate a label on the key ring of the NSSD with the URL for the certificate bundle. See the information about storing certificate-related information on an HTTP server in z/OS Communications Server: IP Configuration Guide for additional details.