NAME
    gcloud kms keys versions get-certificate-chain - get a certificate chain
        for a given version

SYNOPSIS
    gcloud kms keys versions get-certificate-chain VERSION
        [--certificate-chain-type=CERTIFICATE_CHAIN_TYPE; default="all"]
        [--key=KEY] [--keyring=KEYRING] [--location=LOCATION]
        [--output-file=OUTPUT_FILE] [GCLOUD_WIDE_FLAG ...]

DESCRIPTION
    Returns the PEM-format certificate chain for the specified key version. The
    optional flag output-file indicates the path to store the PEM. If not
    specified, the PEM will be printed to stdout.

EXAMPLES
    The following command saves the Cavium certificate chain for CryptoKey
    frodo Version 2 to /tmp/my/cavium.pem:

        $ gcloud kms keys versions get-certificate-chain 2 --key=frodo \
            --keyring=fellowship --location=us-east1 \
            --certificate-chain-type=cavium --output-file=/tmp/my/cavium.pem

POSITIONAL ARGUMENTS
     VERSION
        Name of the version from which to get the certificate chain.

FLAGS
     --certificate-chain-type=CERTIFICATE_CHAIN_TYPE; default="all"
        Certificate chain to retrieve. CERTIFICATE_CHAIN_TYPE must be one of:
        all, cavium, google-card, google-partition.

     --key=KEY
        The containing key.

     --keyring=KEYRING
        Key ring of the key.

     --location=LOCATION
        Location of the keyring.

     --output-file=OUTPUT_FILE
        Path to the output file to store PEM.

GCLOUD WIDE FLAGS
    These flags are available to all commands: --access-token-file, --account,
    --billing-project, --configuration, --flags-file, --flatten, --format,
    --help, --impersonate-service-account, --log-http, --project, --quiet,
    --trace-token, --user-output-enabled, --verbosity.

    Run $ gcloud help for details.

NOTES
    These variants are also available:

        $ gcloud alpha kms keys versions get-certificate-chain

        $ gcloud beta kms keys versions get-certificate-chain

