---
title: "GET /v1/ca/{subject_dn}/certificate/download"
method: GET
path: "/v1/ca/{subject_dn}/certificate/download"
tags: ["v1/ca"]
---

# GET /v1/ca/{subject_dn}/certificate/download

`GET /v1/ca/{subject_dn}/certificate/download`

Get PEM file with the active CA certificate chain

## Path parameters

- `subject_dn` string, required

## Response `default`

default response

## Changes

- **2025-03-11** `4045b1bab09f` — 1 info
  - added the media type `*/*` for the response with the status `default`
- **2025-03-11** `37878df36b77` — 1 breaking
  - removed the media type `*/*` for the response with the status `default`
- **2025-01-24** `d0f3affe7c3c` — 1 info
  - added the media type `*/*` for the response with the status `default`
- **2024-07-05** `b6fc2ad168e5` — 1 breaking
  - removed the media type `*/*` for the response with the status `default`

[Change history](https://skmtc.dev/keyfactor/apis/ejbca-rest-interface/changes/v1/ca/:subject_dn/certificate/download/get.md)

---

[API](https://skmtc.dev/keyfactor/apis/ejbca-rest-interface.md) · [All operations](https://skmtc.dev/keyfactor/apis/ejbca-rest-interface/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/keyfactor/ejbca-rest-interface/revisions/44f8798658e2/schema)