Skip to content

Downloading certificates, certificate chains, and keystores

You can download both certificates and keystores from Venafi as a Service after a certificate has been issued. This can be done using the Venafi as a Service or via the API.

Downloading a keystore

Keystore download is available only when the key pair was generated by Venafi.

For information on using the API, see Downloading a certificate.

  1. Go to Inventory > Certificates to find the certificate you want to download.

    OR

  2. Go to Organization > Applications and find the application that the certificate is assigned to. Select the checkbox next to the application, and then click View Certificates in the local menu bar.

  3. In the left navigation, click on the certificate that you want to download.

    1. In the local menu bar, click Download.
    2. Select the Certificate only radio button.
    3. Select the PEM (End entity only) radio button.
    4. Click Download.
    1. In the local menu bar, click Download.
    2. Select the Certificate only radio button.
    3. Select either of the PEM (full chain) options, depending on whether you want the End Entity (EE) or Root certificate listed first in the download.
    4. Click Download.

    Downloading a keystore

    Keystore download is available only when the key pair was generated by Venafi.

    1. In the local menu bar, click Download.
    2. Select the Keystore radio button.
    3. Choose and export format.
    4. Enter a password, which will be used to encrypt the private key.
    5. Click Download.

Last update: November 12, 2021