5.3 Retrieve Certificate

Perform the following command to retrieve certificate:

GET /oclm-config/v1/certs/{name-or-uuid}

Retrieves the generated certificate and private key for a previous create request. This API does not use a request payload. Clients can retrieve by name when the create request omitted uuid.

Certificates can be retrieved only once because OCLM does not store end entity certificates on the OCLM node.

Successful response:

200 OK

{
  "cert": "-----BEGIN CERTIFICATE-----\n...\n-----END CERTIFICATE-----\n",
  "key": "-----BEGIN PRIVATE KEY-----\n...\n-----END PRIVATE KEY-----\n"
}

If the certificate is not ready or no generated files exist, the response is 404 IO_READ_ERROR.