gcloud privateca certificates export - export a pem-encoded certificate to a file

gcloud privateca certificates export(CERTIFICATE :--issuer-location=ISSUER_LOCATION--issuer-pool=ISSUER_POOL)--output-file=OUTPUT_FILE[--include-chain][GCLOUD_WIDE_FLAG …]

gcloudprivatecacertificatesexportmy-cert--issuer-pool=my-pool--issuer-location=us-west1--output-file=cert.pem

To export a pem-encoded certificate along with its issuing chain in the samefile, run the following:

gcloudprivatecacertificatesexportmy-cert--issuer-pool=my-pool--issuer-location=us-west1--include-chain--output-file=chain.pem

You can omit the --issuer-location flag in both of the above examples if you'vealready set the privateca/location property. For example:

$gcloud config setprivateca/location us-west1

CERTIFICATE resource - The certificate to export. The arguments in this groupcan be used to specify the attributes of this resource. (NOTE) Some attributesare not given arguments in this group but can be set in other ways.

To set theproject attribute:

• provide the argumentCERTIFICATE on the command line with a fullyspecified name;
• provide the argument--project on the command line;
• set the propertycore/project.

This must be specified.

CERTIFICATE

ID of the CERTIFICATE or fully qualified identifier for the CERTIFICATE.

To set thecertificate attribute:

• provide the argumentCERTIFICATE on the command line.

This positional argument must be specified if any of the other arguments in thisgroup are specified.

--issuer-location=ISSUER_LOCATION

The location of the CERTIFICATE.

To set theissuer-location attribute:

• provide the argumentCERTIFICATE on the command line with a fullyspecified name;
• provide the argument--issuer-location on the command line;
• set the propertyprivateca/location.

--issuer-pool=ISSUER_POOL

The parent CA Pool of the CERTIFICATE.

To set theissuer-pool attribute:

• provide the argumentCERTIFICATE on the command line with a fullyspecified name;
• provide the argument--issuer-pool on the command line.

--output-file=OUTPUT_FILE

The path where the resulting PEM-encoded certificate will be written.

--include-chain

Whether to include the certificate's issuer chain in the exported file. If thisis set, the resulting file will contain the pem-encoded certificate and itsissuing chain, ordered from leaf to root.

Run$gcloud help for details.