---
title: "Create a New DataPlane Certificate"
method: POST
path: "/v1/event-gateways/{gatewayId}/data-plane-certificates"
tags: ["Event Gateway DataPlane Certificates"]
---

# Create a New DataPlane Certificate

`POST /v1/event-gateways/{gatewayId}/data-plane-certificates`

Create new dataplane certificate to this event gateway. A dataplane certificate allows dataplanes configured with the certificate and corresponding private key to establish connection with this event gateway.

## Request body

- object
  - `certificate` string, required — JSON escaped string of the certificate.
  - `name` string, nullable — The name to identify of the certificate.
  - `description` string — A description of the certificate.

## Response `201`

Created

- EventGatewayDataPlaneCertificate — A dataplane certificate.
  - `id` string, uuid, required — The unique identifier of the certificate.
  - `certificate` string, required — JSON escaped string of the certificate.
  - `name` string, nullable — The name to identify of the certificate.
  - `description` string, nullable — A description of the certificate.
  - `created_at` string, date-time, required — An ISO-8601 timestamp representation of entity creation date.
  - `updated_at` string, date-time, required — An ISO-8601 timestamp representation of entity update date.
  - `metadata` CertificateMetadata — Metadata extracted from a certificate.
    - `issuer` string, nullable — The issuer of the certificate.
    - `subject` string, nullable — The subject of the certificate.
    - `key_usages` string[], nullable — The key usages of the certificate.
    - `expiry` integer, nullable — The expiry date of the certificate as a unix timestamp.
    - `san_names` string[], nullable — The Subject Alternative Names (SAN) of the certificate.
    - `dns_names` string[], nullable — The DNS names in the certificate SAN.
    - `email_addresses` string[], nullable — The email addresses in the certificate SAN.
    - `ip_addresses` string[], nullable — The IP addresses in the certificate SAN.
    - `uris` string[], nullable — The URIs in the certificate SAN.
    - `sha256_fingerprint` string, nullable — The SHA-256 fingerprint of the certificate.

## Other responses

- `400` — Bad Request
- `401` — Unauthorized
- `403` — Forbidden
- `404` — Not Found

## Changes

- **2025-11-06** `5d2b35832e3f` — 1 warning
  - added the new `type` enum value to the `allOf[subschema #2]/invalid_parameters/items/oneOf[#/components/schemas/InvalidParameterStandard]/rule` response property for the response status `400`
- **2025-10-17** `564d63b800a1` — 1 breaking
  - the request property `description` became not nullable
- **2025-10-02** `ecce2daf9de6` — 1 info
  - endpoint added

[Change history](https://skmtc.dev/kong/apis/konnect-api-beta/changes/v1/event-gateways/:gatewayId/data-plane-certificates/post.md)

---

[API](https://skmtc.dev/kong/apis/konnect-api-beta.md) · [All operations](https://skmtc.dev/kong/apis/konnect-api-beta/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/kong/konnect-api-beta/revisions/cef0f947e9c9/schema)