Export Certificates and Keys

To export certificates and keys, specify query parameters

certificate-name

,

format

, and

passphrase

:

https://

							
<firewall>/api/?key=
<apikey>&type=export&category=<certificate>

							&certificate-name=

							
<certificate_name>

							&passphrase=

							
<passphrase>

							&format=<pkcs12><pem><pkcs10>&include-key=<yes><no>&vsys=<vsys>

							<omit this parameter to import it into a shared location>

						

certificate-name
—name of the certificate object on the firewall
passphrase
—required when including the certificate key
format
—certificate format:
pkcs12
,
pem
, or
pkcs10
include-key
—yes or no parameter to include or exclude the key
vsys
—virtual system where the certificate object is used. Ignore this parameter if the certificate is a shared object.

You can use the example above to export a certificate signing request (CSR). If you do so, then specify the following two parameters as shown:

format
—
pkcs10
include-key
—
no

Confirm that the XML response includes the certificate:

-----BEGIN CERTIFICATE-----

							MIIDXTCCAkWgAwIBAgIJAJC1HiIAZAiIMA0GCSqGSIb3Df

							BAYTAkFVMRMwEQYDVQQIDApTb21lLVN0YXRlMSEwHwYDVx

							aWRnaXRzIFB0eSBMdGQwHhcNMTExMjMxMDg1OTQ0WhcNMT

							<!-- TRUNCATED -->

							-----END CERTIFICATE-----