To export a certificate from a specified key pair, the GET /environments/{environmentId}/key/{keyId} operation downloads a certificate file in the specified file format. This operation requires an Accept header in the request that specifies application/x-pkcs7-ca-cert.

The sample shows an export operation to download a certificate in PKCS7 DER format.

The downloaded certificate file has a .p7b file extension.