Example of securely requesting an existing certificate chain?

[boldandbusted]

Howdy. I'm asking here as a 'consumer' or 'user' of Lemur, not as a Lemur Admin:

How do I properly request an existing certificate chain from Lemur to install on an instance for locally-installed applications to use? Is there a preferred "better practice" pattern for this request in a 'machine-to-machine' use-case?

Personally, my goal is to make this happen with Ansible, on behalf of a local HashiCorp Vault instance to encrypt its requests between clients and itself. Having an HTTP/API request/response example to go by would be great to have. Apologies in advance if this is already clear in the documentation, but I couldn't find a single place that shows an example of this.

If this doesn't exist, I can try to make one, but hoping I'm just not looking in the right place for it. :) Thanks for Lemur!