# Manage Keystores

An administrator can inspect the application's connections with various HSMs and view details of keypairs available in each HSM.

<figure><img src="https://2804668976-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FOwstGDJbR4yGRTr2aEFp%2Fuploads%2FoQhdcobJs5YeNA3uWC7i%2Fimage.png?alt=media&#x26;token=731e76f7-9c91-4099-97d3-975457ea01d0" alt=""><figcaption></figcaption></figure>

Click on <img src="https://2804668976-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FOwstGDJbR4yGRTr2aEFp%2Fuploads%2FKNNMpFUWgcFVFnZyIFHb%2Fimage.png?alt=media&#x26;token=a1b217c6-146a-4b83-961b-d7448be76348" alt="" data-size="line"> to show the details for the corresponding HSM. The following view will open:

<figure><img src="https://2804668976-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FOwstGDJbR4yGRTr2aEFp%2Fuploads%2FlFeOvtj7m79jrQLLg84l%2Fimage.png?alt=media&#x26;token=6c010492-1c9d-4720-a5ed-6888ab65dfbc" alt=""><figcaption></figcaption></figure>

In the top section, basic information about the HSM is displayed in order to help identify it.

All keys in the HSM Slot described by the corresponding PKCS11 configuration are listed in the lower section.

If more keys are found than can be displayed on one page, you can switch pages using the navigation element at the bottom of the table:

<figure><img src="https://2804668976-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FOwstGDJbR4yGRTr2aEFp%2Fuploads%2FNCHv6DKNTQRYAQylB0PM%2Fimage.png?alt=media&#x26;token=6d207ca7-c8c7-40d1-b92d-0f32367bebc6" alt="" width="155"><figcaption></figcaption></figure>

{% hint style="info" %}
**Information:** Unused keys can be identified by their Alias Name and CN being equal.
{% endhint %}

Click on <img src="https://2804668976-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FOwstGDJbR4yGRTr2aEFp%2Fuploads%2FandMpLEHeHh8KI4DHtlF%2Fimage.png?alt=media&#x26;token=4831d609-54a5-46f3-96d7-f71360d8b80a" alt="" data-size="line">to download the certificate assigned to key as:

* DER-encoded X.509 certificate (.cer)
* Base64-encoded X.509 certificate (.cer)
* Cryptographic Message Syntax Standard PKCS#7 certificate (.p7b)

<figure><img src="https://2804668976-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FOwstGDJbR4yGRTr2aEFp%2Fuploads%2FzHrZ5YjPPqwSUIDMAsA5%2Fimage.png?alt=media&#x26;token=996e0573-2093-419d-8fcb-e4dcf67aada9" alt="" width="257"><figcaption></figcaption></figure>

Select the export format of your choice and click Download to start the download of the user certificate. The user certificate will be downloaded to the standard download location of your OS.

{% hint style="info" %}
**Information:** Unused keys have expired certificates available for download. The validity of these certificates is 0 seconds.
{% endhint %}