Method: projects.locations.caPools.certificateAuthorities.fetch

Fetch a certificate signing request (CSR) from a CertificateAuthority that is in state AWAITING_USER_ACTIVATION and is of type SUBORDINATE. The CSR must then be signed by the desired parent Certificate Authority, which could be another CertificateAuthority resource, or could be an on-prem certificate authority. See also certificateAuthorities.activate.

HTTP request

GET https://privateca.googleapis.com/v1/{name=projects/*/locations/*/caPools/*/certificateAuthorities/*}:fetch

The URL uses gRPC Transcoding syntax.

Path parameters

Parameters
name

string

Required. The resource name for this CertificateAuthority in the format projects/*/locations/*/caPools/*/certificateAuthorities/*.

Authorization requires the following IAM permission on the specified resource name:

  • privateca.certificateAuthorities.get

Request body

The request body must be empty.

Response body

Response message for CertificateAuthorityService.FetchCertificateAuthorityCsr.

If successful, the response body contains data with the following structure:

JSON representation 
{
  "pemCsr": string
}
Fields
pemCsr

string

Output only. The PEM-encoded signed certificate signing request (CSR).

Authorization scopes

Requires the following OAuth scope:

  • https://www.googleapis.com/auth/cloud-platform

For more information, see the Authentication Overview.