---
title: "Get cluster certificates."
method: GET
path: "/v1/cluster/certificates"
tags: ["Cluster"]
---

# Get cluster certificates.

`GET /v1/cluster/certificates`

Get cluster certificates.

## Response `200`

Cluster certificates retrieved successfully.

- ClusterCertificatesResponse — Cluster certificates response
  - `api_cert` string — PEM-encoded API certificate
  - `api_key` string — PEM-encoded private key for the API certificate
  - `ccs_internode_encryption_cert` string — PEM-encoded CCS internode encryption certificate
  - `ccs_internode_encryption_key` string — PEM-encoded private key for the CCS internode encryption certificate
  - `cm_cert` string — PEM-encoded cluster manager certificate
  - `cm_key` string — PEM-encoded private key for the cluster manager certificate
  - `data_internode_encryption_cert` string — PEM-encoded data internode encryption certificate
  - `data_internode_encryption_key` string — PEM-encoded private key for the data internode encryption certificate
  - `ldap_client_cert` string — PEM-encoded LDAP client certificate
  - `ldap_client_key` string — PEM-encoded private key for the LDAP client certificate
  - `metrics_exporter_cert` string — PEM-encoded metrics exporter certificate
  - `metrics_exporter_key` string — PEM-encoded private key for the metrics exporter certificate
  - `mtls_trusted_ca_cert` string — PEM-encoded trusted CA certificate for mTLS client authentication
  - `proxy_cert` string — PEM-encoded proxy certificate
  - `proxy_key` string — PEM-encoded private key for the proxy certificate
  - `sso_issuer_cert` string — PEM-encoded SSO issuer certificate
  - `sso_service_cert` string — PEM-encoded SSO service certificate
  - `sso_service_key` string — PEM-encoded private key for the SSO service certificate
  - `syncer_cert` string — PEM-encoded syncer certificate
  - `syncer_key` string — PEM-encoded private key for the syncer certificate

## Changes

- **2026-03-13** `4dd376d7fd64` — 1 info
  - endpoint added
- **2026-01-23** `9fdf3bc7ad77` — 1 breaking
  - api path removed without deprecation

[Change history](https://skmtc.dev/redis/apis/redis-software-rest-api/changes/v1/cluster/certificates/get.md)

---

[API](https://skmtc.dev/redis/apis/redis-software-rest-api.md) · [All operations](https://skmtc.dev/redis/apis/redis-software-rest-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/redis/redis-software-rest-api/revisions/caec2005b95b/schema)