Available in Classic and VPC
Get the CSR of an intermediate CA that you can sign yourself.
Note
You can't get the CSR for an intermediate CA whose signature is complete.
Request
The following describes the request format for the endpoint. The request format is as follows:
| Method | URI |
|---|---|
| GET | /api/v1/ca/{caTag}/sub/csr |
Request headers
For information about the headers common to all CA APIs, see CA request headers.
Request path parameters
You can use the following path parameters with your request:
| Field | Type | Required | Description |
|---|---|---|---|
caTag |
String | Required | CA tag value
|
Request example
The following is a sample request.
curl --location --request GET 'https://pca.apigw.ntruss.com/api/v1/ca/********-********/sub/csr' \
--header 'x-ncp-apigw-timestamp: {Timestamp}' \
--header 'x-ncp-iam-access-key: {Access Key}' \
--header 'x-ncp-apigw-signature-v2: {API Gateway Signature}' \
--header 'Content-Type: application/json'
Response
The following describes the response format.
Response body
The following describes the response body.
| Field | Type | Required | Description |
|---|---|---|---|
code |
String | - | Response code |
msg |
String | - | Response message |
data |
Object | - | Response result |
data.csrPem |
String | - | CSR(PEM) |
Response status codes
For information about the HTTP status codes common to all CA APIs, see CA response status codes.
Response example
The following is a sample example.
{
"code": "SUCCESS",
"msg": "Success",
"data": {
"csrPem": "-----BEGIN CERTIFICATE REQUEST-----\n{CSR}\n-----END CERTIFICATE REQUEST-----"
}
}