AIA Certificate Issuer

Since Stream 2.0.8

Stream allows you to download the Certificate of the CAs (external and managed). This is usually used in AIA issuer certificate extension to be able to download the certificate of the issuing Certificate Authority.

The standard download URL format is http(s)://[stream_url]/aias/CA_internal_name. This URL can be accessed by anyone without prior authentication, either through HTTP or HTTPS.

You need to specify the Internal name of the CA to download its certificate and not its Common Name (CN).

The certificate format depends on the request ACCEPT header:

  • application/x-pem-file: returns the certificate in PEM

  • application/pkix-cert: returns the certificate in DER

  • application/x-pkcs7-certificates: returns the certificate in PKCS7

If no ACCEPT header is specified, return the certificate in DER.

The certificate is returned with the following headers:

  • Content-Type:

    • application/x-pem-file for PEM

    • application/pkix-cert for DER

    • application/x-pkcs7-certificates for PKCS7

  • Content-Disposition: 'attachment; filename=<ca name>'