Download Certificate
Download a previously-uploaded certificate as a JSON bundle of PEM blocks: the leaf cert, the private key, any intermediate CA chain, and a pre-assembled fullchain.pem (leaf + chain).
The private key is returned in key_pem (decrypted server-side). Treat the response as sensitive — it contains the full key material.
Path parameters
uuid string (uuid) Req
Certificate UUID. Get from /certificates/self.
Response (200 OK)
Content-Type: application/json. All values are strings.
cert_pem string
PEM-encoded leaf certificate.
key_pem string
PEM-encoded private key (decrypted). Sensitive.
chain_pem string
PEM-encoded intermediate CA chain. May be empty if none was uploaded.
fullchain_pem string
Leaf cert concatenated with the chain — what you'd put in a
fullchain.pem file.name string
Friendly label supplied at upload.
Errors
401 Unauthorized
Missing auth.
404 Not Found
Cert doesn't exist or doesn't belong to the calling user.
Request
curl "https://api.ngris.com/v1/certificates/self/<uuid>/download" \
-H "X-API-KEY: <your_api_key>" \
| jq -r .fullchain_pem > cert.pem
Python
from ngris import Ngris
client = Ngris(api_key="<your_api_key>")
bundle = client.certificates.download("<cert_uuid>")
with open("fullchain.pem", "w") as f:
f.write(bundle["fullchain_pem"])
with open("privkey.pem", "w") as f:
f.write(bundle["key_pem"])
Response — 200 OK
{
"cert_pem": "-----BEGIN CERTIFICATE-----\nMIIDXTCCAkWg...\n-----END CERTIFICATE-----\n",
"key_pem": "-----BEGIN PRIVATE KEY-----\nMIIEvQIBADAN...\n-----END PRIVATE KEY-----\n",
"chain_pem": "-----BEGIN CERTIFICATE-----\nMIIElDCCAxyg...\n-----END CERTIFICATE-----\n",
"fullchain_pem": "-----BEGIN CERTIFICATE-----\nMIIDXTCCAkWg...\n-----END CERTIFICATE-----\n-----BEGIN CERTIFICATE-----\nMIIElDCCAxyg...\n-----END CERTIFICATE-----\n",
"name": "wildcard.example.com"
}