gcloud beta privateca certificates export - export a pem-encoded certificate to a file
gcloud beta privateca certificates export (CERTIFICATE : --issuer=ISSUER --issuer-location=ISSUER_LOCATION) --output-file=OUTPUT_FILE [--include-chain] [GCLOUD_WIDE_FLAG ...]
(BETA) Export a pem-encoded certificate to a file.
To export a single pem-encoded certificate to a file, run the following:
$ gcloud beta privateca certificates export my-cert --issuer=my-ca \ --issuer-location=us-west1 --output-file=cert.pem
To export a pem-encoded certificate along with its issuing chain in the same file, run the following:
$ gcloud beta privateca certificates export my-cert --issuer=my-ca \ --issuer-location=us-west1 --include-chain \ --output-file=chain.pem
You can omit the --issuer-location flag in both of the above examples if you've already set the privateca/location property. For example:
$ gcloud config set privateca/location us-west1
# The following is equivalent to the first example above. $ gcloud beta privateca certificates export my-cert --issuer=my-ca \ --output-file=cert.pem
# The following is equivalent to the second example above. $ gcloud beta privateca certificates export my-cert --issuer=my-ca \ --include-chain --output-file=chain.pem
- CERTIFICATE resource - The certificate to export. The arguments in this group
can be used to specify the attributes of this resource. (NOTE) Some attributes are not given arguments in this group but can be set in other ways. To set the project attribute:
- —
provide the argument CERTIFICATE on the command line with a fully specified name;
- —
provide the argument --project on the command line;
- —
set the property core/project.
This must be specified.
- CERTIFICATE
ID of the CERTIFICATE or fully qualified identifier for the CERTIFICATE. To set the certificate attribute:
provide the argument CERTIFICATE on the command line.
This positional argument must be specified if any of the other arguments in this group are specified.
- --issuer=ISSUER
The issuing certificate authority of the CERTIFICATE. To set the issuer attribute:
provide the argument CERTIFICATE on the command line with a fully specified name;
provide the argument --issuer on the command line.
- --issuer-location=ISSUER_LOCATION
The location of the CERTIFICATE. To set the issuer-location attribute:
provide the argument CERTIFICATE on the command line with a fully specified name;
provide the argument --issuer-location on the command line;
set the property privateca/location.
- --output-file=OUTPUT_FILE
The path where the resulting PEM-encoded certificate will be written.
- --include-chain
Whether to include the certificate's issuer chain in the exported file. If this is set, the resulting file will contain the pem-encoded certificate and its issuing chain, ordered from leaf to root.
These flags are available to all commands: --access-token-file, --account, --billing-project, --configuration, --flags-file, --flatten, --format, --help, --impersonate-service-account, --log-http, --project, --quiet, --trace-token, --user-output-enabled, --verbosity.
Run $ gcloud help for details.
This command is currently in beta and might change without notice. This variant is also available:
$ gcloud privateca certificates export