---
title: "Fetch a Signed Certificate for a BYOC deployment."
method: GET
path: "/accounts/{name}/certificate"
tags: ["Account Operations"]
---

# Fetch a Signed Certificate for a BYOC deployment.

`GET /accounts/{name}/certificate`

## Request

- Base URL: `https://replace-with-account.api.decodable.co/v1alpha2`
- URL: `https://replace-with-account.api.decodable.co/v1alpha2/accounts/{name}/certificate`
- Auth: HTTP bearer
- TypeScript: <https://skmtc.dev/decodable/apis/decodable-control-plane/docs/accounts/:name/certificate/get.ts> (a function with typed inputs; its response is checked against the schema)

Requires permission matching: `account:read:<name>`, where `name` is the account name.

Fetches a signed certificate for a BYOC deployment of Decodable. Contact [Decodable support](mailto:support@decodable.co) 
if you would like to set up a BYOC deployment of Decodable. See [Managed Cloud vs BYOC docs](https://docs.decodable.co/administer/managed-cloud-vs-byoc.html) for deployment details.

## Response `200`

A signed certificate.

## Other responses

- `400`: An invalid request was received.
- `401`: Access denied: Missing or invalid credentials
- `403`: Access denied: requesting user lacks a required permission.

---

[API](https://skmtc.dev/decodable/apis/decodable-control-plane.md) - [All operations](https://skmtc.dev/decodable/apis/decodable-control-plane/llms.txt) - [OpenAPI document](https://skmtc.dev/decodable/apis/decodable-control-plane/revisions/9718a3019da8?raw)