---
title: "Get CA Cert Store"
method: GET
path: "/.well-known/est/cacerts"
tags: ["Well Known"]
---

# Get CA Cert Store

`GET /.well-known/est/cacerts`

## Request

- Base URL: `https://demo.ziti.dev/edge/client/v1`
- URL: `https://demo.ziti.dev/edge/client/v1/.well-known/est/cacerts`
- Auth: none required

This endpoint is used during enrollments to bootstrap trust between enrolling clients and the Ziti Edge API.
This endpoint returns a base64 encoded PKCS7 store. The content can be base64 decoded and parsed by any library
that supports parsing PKCS7 stores.

## Response `200`

A base64 encoded PKCS7 store

---

[API](https://skmtc.dev/openziti/apis/ziti-edge-client.md) - [All operations](https://skmtc.dev/openziti/apis/ziti-edge-client/llms.txt) - [OpenAPI document](https://skmtc.dev/openziti/apis/ziti-edge-client/revisions/f7b51eaafbbb?raw)