---
title: "List all Certificates"
method: GET
path: "/v2/control-planes/{controlPlaneId}/core-entities/certificates"
tags: ["Certificates"]
---

# List all Certificates

`GET /v2/control-planes/{controlPlaneId}/core-entities/certificates`

## Request

- Base URL: `https://global.api.konghq.com`
- URL: `https://global.api.konghq.com/v2/control-planes/{controlPlaneId}/core-entities/certificates`
- Auth: one of:
  - HTTP bearer
  - HTTP bearer
  - HTTP bearer
  - HTTP bearer

List all Certificates

## Query parameters

- `size` integer
- `offset` string
- `tags` string

## Response `200`

A successful response listing Certificates

- object
  - `data` Certificate[]
    - `cert` string, required: PEM-encoded public certificate chain of the SSL key pair. This field is _referenceable_, which means it can be securely stored as a [secret](/gateway/latest/plan-and-deploy/security/secrets-management/getting-started) in a vault. References must follow a [specific format](/gateway/latest/plan-and-deploy/security/secrets-management/reference-format).
    - `cert_alt` string, nullable: PEM-encoded public certificate chain of the alternate SSL key pair. This should only be set if you have both RSA and ECDSA types of certificate available and would like Kong to prefer serving using ECDSA certs when client advertises support for it. This field is _referenceable_, which means it can be securely stored as a [secret](/gateway/latest/plan-and-deploy/security/secrets-management/getting-started) in a vault. References must follow a [specific format](/gateway/latest/plan-and-deploy/security/secrets-management/reference-format).
    - `created_at` integer, nullable: Unix epoch when the resource was created.
    - `id` string, nullable: A string representing a UUID (universally unique identifier).
    - `key` string, required: PEM-encoded private key of the SSL key pair. This field is _referenceable_, which means it can be securely stored as a [secret](/gateway/latest/plan-and-deploy/security/secrets-management/getting-started) in a vault. References must follow a [specific format](/gateway/latest/plan-and-deploy/security/secrets-management/reference-format).
    - `key_alt` string, nullable: PEM-encoded private key of the alternate SSL key pair. This should only be set if you have both RSA and ECDSA types of certificate available and would like Kong to prefer serving using ECDSA certs when client advertises support for it. This field is _referenceable_, which means it can be securely stored as a [secret](/gateway/latest/plan-and-deploy/security/secrets-management/getting-started) in a vault. References must follow a [specific format](/gateway/latest/plan-and-deploy/security/secrets-management/reference-format).
    - `snis` string[], nullable
    - `tags` string[], nullable: An optional set of strings associated with the Certificate for grouping and filtering.
    - `updated_at` integer, nullable: Unix epoch when the resource was last updated.
  - `next` string: URI to the next page (may be null)
  - `offset` string: Offset is used to paginate through the API. Provide this value to the next list operation to fetch the next page

## Other responses

- `401`: Unauthorized

## Changes

- **2025-08-22** `3c0154b2053a`: 1 breaking
  - the response property `data` became nullable for the status `200`
- **2025-07-22** `76b0fefddb0d`: 1 breaking
  - the response property `data/items/tags` became nullable for the status `200`

[Operation history](https://skmtc.dev/kong/apis/konnect-api-go-sdk/changes/v2/control-planes/:controlPlaneId/core-entities/certificates/get.md)

---

[API](https://skmtc.dev/kong/apis/konnect-api-go-sdk.md) · [All operations](https://skmtc.dev/kong/apis/konnect-api-go-sdk/llms.txt) · [OpenAPI document](https://skmtc.dev/kong/apis/konnect-api-go-sdk/revisions/7aab863a6daa?raw)