---
title: "Create a new CA Certificate"
method: POST
path: "/v2/control-planes/{controlPlaneId}/core-entities/ca_certificates"
tags: ["CA Certificates"]
---

# Create a new CA Certificate

`POST /v2/control-planes/{controlPlaneId}/core-entities/ca_certificates`

## Request

- Base URL: `https://global.api.konghq.com`
- URL: `https://global.api.konghq.com/v2/control-planes/{controlPlaneId}/core-entities/ca_certificates`
- Auth: one of:
  - HTTP bearer
  - HTTP bearer
  - HTTP bearer
  - HTTP bearer

Create a new CA Certificate

## Request body

- CACertificate: A CA certificate object represents a trusted CA. These objects are used by Kong to verify the validity of a client or server certificate.
  - `cert` string, required: PEM-encoded public certificate of the CA.
  - `cert_digest` string, nullable: SHA256 hex digest of the public certificate. This field is read-only and it cannot be set by the caller, the value is automatically computed.
  - `created_at` integer, nullable: Unix epoch when the resource was created.
  - `id` string, nullable: A string representing a UUID (universally unique identifier).
  - `tags` string[], nullable: An optional set of strings associated with the Certificate for grouping and filtering.
  - `updated_at` integer, nullable: Unix epoch when the resource was last updated.

## Response `201`

Successfully created CA Certificate

- CACertificate: A CA certificate object represents a trusted CA. These objects are used by Kong to verify the validity of a client or server certificate.
  - `cert` string, required: PEM-encoded public certificate of the CA.
  - `cert_digest` string, nullable: SHA256 hex digest of the public certificate. This field is read-only and it cannot be set by the caller, the value is automatically computed.
  - `created_at` integer, nullable: Unix epoch when the resource was created.
  - `id` string, nullable: A string representing a UUID (universally unique identifier).
  - `tags` string[], nullable: An optional set of strings associated with the Certificate for grouping and filtering.
  - `updated_at` integer, nullable: Unix epoch when the resource was last updated.

## Other responses

- `401`: Unauthorized

## Changes

- **2025-07-22** `76b0fefddb0d`: 1 breaking, 1 info
  - the response property `tags` became nullable for the status `201`
  - the request property `tags` became nullable

[Operation history](https://skmtc.dev/kong/apis/konnect-api-go-sdk/changes/v2/control-planes/:controlPlaneId/core-entities/ca_certificates/post.md)

---

[API](https://skmtc.dev/kong/apis/konnect-api-go-sdk.md) · [All operations](https://skmtc.dev/kong/apis/konnect-api-go-sdk/llms.txt) · [OpenAPI document](https://skmtc.dev/kong/apis/konnect-api-go-sdk/revisions/7aab863a6daa?raw)