The first step in retrieving user certificates is to find the certificates based on search criteria. The second step is to so get each certificate and associated information using the accessor function provided.
To find user certificates, call NPKIFindUserCertificates. Other than the mandatory field of userDN, all other search criteria are optional. Only certificates that match all of your search criteria are returned.
NOTE:: If the nickName field is used, all other search criteria is ignored.
After a successful return, call the accessor function NPKIUserCertInfo to retrieve each certificate and its associated information.
For a sample implementation of this task, see FindUserCerts.