---
title: "Create an AI Gateway CA Certificate"
method: POST
path: "/v1/ai-gateways/{gatewayId}/ca-certificates"
tags: ["AI Gateway CA Certificates"]
---

# Create an AI Gateway CA Certificate

`POST /v1/ai-gateways/{gatewayId}/ca-certificates`

## Request

- Base URL: `https://global.api.konghq.com`
- URL: `https://global.api.konghq.com/v1/ai-gateways/{gatewayId}/ca-certificates`
- Auth: one of:
  - HTTP bearer
  - HTTP bearer
  - HTTP bearer
  - HTTP bearer

Creates a new CA certificate for the AI Gateway.

## Request body

- CreateAIGatewayCACertificateRequest: A CA certificate represents a trusted CA. These objects are used to verify the validity of a client or server certificate.
  - `name` string, required: Identifier for an AI Gateway entity. In some cases, this may be the entity name or ID.
  - `cert` string, required: PEM-encoded public certificate of the CA.
  - `cert_digest` string, nullable: SHA256 hex digest of the public certificate. This field is read-only and is automatically computed; it cannot be set by the caller.
  - `labels` PublicLabels: Public labels store information about an entity that can be used for filtering a list of objects. Public labels are intended to store **PUBLIC** metadata. Keys must be of length 1-63 characters, and cannot start with "kong", "konnect", "mesh", "kic", or "_".
  - `managed_by` ManagedBy: Stores information about what manages this entity, such as the tool or system responsible for its lifecycle (for example, `terraform`). Keys must be 1–63 characters long and start with an alphanumeric character.

## Response `201`

AI Gateway CA Certificate created successfully.

- AIGatewayCACertificate: A CA certificate represents a trusted CA. These objects are used to verify the validity of a client or server certificate.
  - `name` string, required: Identifier for an AI Gateway entity. In some cases, this may be the entity name or ID.
  - `cert` string, required: PEM-encoded public certificate of the CA.
  - `cert_digest` string, nullable: SHA256 hex digest of the public certificate. This field is read-only and is automatically computed; it cannot be set by the caller.
  - `labels` PublicLabels: Public labels store information about an entity that can be used for filtering a list of objects. Public labels are intended to store **PUBLIC** metadata. Keys must be of length 1-63 characters, and cannot start with "kong", "konnect", "mesh", "kic", or "_".
  - `managed_by` ManagedBy: Stores information about what manages this entity, such as the tool or system responsible for its lifecycle (for example, `terraform`). Keys must be 1–63 characters long and start with an alphanumeric character.
  - `id` string, uuid, required: Contains a unique identifier used for this resource.
  - `created_at` string, date-time, required: An ISO-8601 timestamp representation of entity creation date.
  - `updated_at` string, date-time, required: An ISO-8601 timestamp representation of entity update date.

## Other responses

- `400`: Bad Request
- `401`: Unauthorized
- `403`: Forbidden
- `404`: Not Found
- `409`: Conflict
- `429`: Too Many Requests

## Changes

- **2026-10-15** `7aab863a6daa`: 1 breaking, 2 warning
  - added `#/components/schemas/InvalidParameterMinimumTime, #/components/schemas/InvalidParameterMaximumTime` to the `invalid_parameters/items/` response property `oneOf` list for the response status `400`
  - added the new `key_invalid` enum value to the `invalid_parameters/items/oneOf[#/components/schemas/InvalidParameterStandard]/rule` response property for the response status `400`
  - added the new `unique` enum value to the `invalid_parameters/items/oneOf[#/components/schemas/InvalidParameterStandard]/rule` response property for the response status `400`
- **2026-09-25** `68d43091b84d`: 4 warning
  - added the new `400.00` enum value to the `status` response property for the response status `400`
  - added the new `403.00` enum value to the `status` response property for the response status `403`
  - added the new `404.00` enum value to the `status` response property for the response status `404`
  - added the new `409.00` enum value to the `status` response property for the response status `409`
- **2026-09-18** `f324fb7610e4`: 5 breaking, 1 warning, 37 info
  - the response's body type changed from no type to `object` for status `400`
  - the response's body type changed from no type to `object` for status `403`
  - the response's body type changed from no type to `object` for status `404`
  - the response's body type changed from no type to `object` for status `409`
  - …39 more
- …earlier changes not shown

[Operation history](https://skmtc.dev/kong/apis/konnect-api-go-sdk/changes/v1/ai-gateways/:gatewayId/ca-certificates/post.md)

---

[API](https://skmtc.dev/kong/apis/konnect-api-go-sdk.md) · [All operations](https://skmtc.dev/kong/apis/konnect-api-go-sdk/llms.txt) · [OpenAPI document](https://skmtc.dev/kong/apis/konnect-api-go-sdk/revisions/7aab863a6daa?raw)