---
title: "Get a DataPlane Certificate"
method: GET
path: "/v1/ai-gateways/{gatewayId}/data-plane-certificates/{certificateId}"
tags: ["AI Gateway DataPlane Certificates"]
---

# Get a DataPlane Certificate

`GET /v1/ai-gateways/{gatewayId}/data-plane-certificates/{certificateId}`

## Request

- Base URL: `https://global.api.konghq.com`
- URL: `https://global.api.konghq.com/v1/ai-gateways/{gatewayId}/data-plane-certificates/{certificateId}`
- Auth: one of:
  - HTTP bearer
  - HTTP bearer
  - HTTP bearer
  - HTTP bearer

Retrieve a DataPlane certificate associated to this AI Gateway. A DataPlane certificate allows DataPlanes configured with the certificate and corresponding private key to establish connection with this AI Gateway.

## Response `200`

Response body for retrieving a DataPlane certificate.

- AIGatewayDataPlaneClientCertificate
  - `cert` string, required: JSON escaped string of the certificate.
  - `title` string, required: A human-readable name for the certificate.
  - `description` string: An optional description of the certificate.
  - `labels` PublicLabels: Public labels store information about an entity that can be used for filtering a list of objects. Public labels are intended to store **PUBLIC** metadata. Keys must be of length 1-63 characters, and cannot start with "kong", "konnect", "mesh", "kic", or "_".
  - `managed_by` ManagedBy: Stores information about what manages this entity, such as the tool or system responsible for its lifecycle (for example, `terraform`). Keys must be 1–63 characters long and start with an alphanumeric character.
  - `id` string, uuid, required: Contains a unique identifier used for this resource.
  - `created_at` string, date-time, required: An ISO-8601 timestamp representation of entity creation date.
  - `updated_at` string, date-time, required: An ISO-8601 timestamp representation of entity update date.
  - `metadata` object: Metadata extracted from the certificate.
    - `subject` string: The certificate subject.
    - `issuer` string: The certificate issuer.
    - `san_names` string[]: Subject alternative names (deprecated).
    - `expiry` integer: Unix timestamp of certificate expiry.
    - `key_usages` string[]: Key usage types for the certificate.
    - `snis` string[]: Server Name Indications associated with the certificate.
    - `dns_names` string[]: DNS subject alternative names.
    - `email_addresses` string[]: Email subject alternative names.
    - `ip_addresses` string[]: IP subject alternative names.
    - `uris` string[]: URI subject alternative names.
    - `is_ca` boolean: Whether the certificate is a CA certificate.

## Other responses

- `400`: Bad Request
- `401`: Unauthorized
- `403`: Forbidden
- `404`: Not Found
- `429`: Too Many Requests

## Changes

- **2026-10-15** `7aab863a6daa`: 1 breaking, 2 warning
  - added `#/components/schemas/InvalidParameterMinimumTime, #/components/schemas/InvalidParameterMaximumTime` to the `invalid_parameters/items/` response property `oneOf` list for the response status `400`
  - added the new `key_invalid` enum value to the `invalid_parameters/items/oneOf[#/components/schemas/InvalidParameterStandard]/rule` response property for the response status `400`
  - added the new `unique` enum value to the `invalid_parameters/items/oneOf[#/components/schemas/InvalidParameterStandard]/rule` response property for the response status `400`
- **2026-09-30** `de79e1192f11`: 2 info
  - added the optional property `labels` to the response with the `200` status
  - added the optional property `managed_by` to the response with the `200` status
- **2026-09-25** `68d43091b84d`: 3 warning
  - added the new `400.00` enum value to the `status` response property for the response status `400`
  - added the new `403.00` enum value to the `status` response property for the response status `403`
  - added the new `404.00` enum value to the `status` response property for the response status `404`
- …earlier changes not shown

[Operation history](https://skmtc.dev/kong/apis/konnect-api-go-sdk/changes/v1/ai-gateways/:gatewayId/data-plane-certificates/:certificateId/get.md)

---

[API](https://skmtc.dev/kong/apis/konnect-api-go-sdk.md) · [All operations](https://skmtc.dev/kong/apis/konnect-api-go-sdk/llms.txt) · [OpenAPI document](https://skmtc.dev/kong/apis/konnect-api-go-sdk/revisions/7aab863a6daa?raw)