From 17ad695397555ecbd62052f7dcda763a55f2b4e1 Mon Sep 17 00:00:00 2001
From: Dante Catalfamo <43040593+dantecatalfamo@users.noreply.github.com>
Date: Tue, 2 Dec 2025 10:53:59 -0500
Subject: [PATCH] Custom EST Proxy: Contributor example (#35375)

UPDATE: @noahtalerman: I updated this PR to just include the contributor
example. I assigned myself the guide update issue:
- #34279

For the guide, we want to open a PR agains the `docs-v4.77.0` branch
instead of main.

---

**Related issue:** Wont resolve: #34279

---------

Co-authored-by: Noah Talerman <47070608+noahtalerman@users.noreply.github.com>
---
 orbit/cmd/fetch_cert/README.md | 21 +++++++++++++++++++++
 1 file changed, 21 insertions(+)
 create mode 100644 orbit/cmd/fetch_cert/README.md

diff --git a/orbit/cmd/fetch_cert/README.md b/orbit/cmd/fetch_cert/README.md
new file mode 100644
index 0000000000..87b2283bc6
--- /dev/null
+++ b/orbit/cmd/fetch_cert/README.md
@@ -0,0 +1,21 @@
+# fetch_cert
+
+Example client for fetching certificates via fleet's `/api/v1/fleet/certificate_authorities/{id}/request_certificate` endpoint, authenticated using TPM-backed HTTP Message Signing.
+
+## Usage
+
+```
+Usage of ./fetch_cert:
+  -ca uint
+        certificate authority ID
+  -csr string
+        csr path
+  -debug
+        enable debug logging
+  -fleeturl string
+        fleet server base URL
+  -out string
+        output certificate path (default "certificate.pem")
+  -rootdir string
+        fleetd installation root (default "/opt/orbit")
+```