- NAME
-
- gcloud kms keys versions get-certificate-chain - get a certificate chain for a given version
- SYNOPSIS
-
-
gcloud kms keys versions get-certificate-chainVERSION[--certificate-chain-type=CERTIFICATE_CHAIN_TYPE; default="all"] [--key=KEY] [--keyring=KEYRING] [--location=LOCATION] [--output-file=OUTPUT_FILE] [GCLOUD_WIDE_FLAG …]
-
- DESCRIPTION
- Returns the PEM-format certificate chain for the specified key version. The
optional flag
output-fileindicates the path to store the PEM. If not specified, the PEM will be printed to stdout. - EXAMPLES
- The following command saves the Cavium certificate chain for CryptoKey
Version 2 tofrodo:/tmp/my/cavium.pemgcloud kms keys versions get-certificate-chain 2 --key = frodo --keyring = fellowship --location = us-east1 --certificate-chain-type = cavium --output-file = /tmp/my/cavium.pem - POSITIONAL ARGUMENTS
-
-
VERSION - Name of the version from which to get the certificate chain.
-
- FLAGS
-
-
--certificate-chain-type=CERTIFICATE_CHAIN_TYPE; default="all" - Certificate chain to retrieve.
CERTIFICATE_CHAIN_TYPEmust be one of:all,cavium,google-card,google-partition. -
--key=KEY - The containing key.
-
--keyring=KEYRING - Key ring of the key.
-
--location=LOCATION - Location of the keyring.
-
--output-file=OUTPUT_FILE - Path to the output file to store PEM.
-
- GCLOUD WIDE FLAGS
- These flags are available to all commands:
--access-token-file,--account,--billing-project,--configuration,--flags-file,--flatten,--format,--help,--impersonate-service-account,--log-http,--project,--quiet,--trace-token,--user-output-enabled,--verbosity.Run
$ gcloud helpfor details. - NOTES
- These variants are also available:
gcloud alpha kms keys versions get-certificate-chaingcloud beta kms keys versions get-certificate-chain
gcloud kms keys versions get-certificate-chain
Except as otherwise noted, the content of this page is licensed under the Creative Commons Attribution 4.0 License , and code samples are licensed under the Apache 2.0 License . For details, see the Google Developers Site Policies . Java is a registered trademark of Oracle and/or its affiliates.
Last updated 2026-05-27 UTC.

