Get a CA certificate on a gateway group

GET /apisix/admin/ca_certificates/{ca_certificate_id}

Interactive request editor loads with JavaScript.

Path Parameters

ca_certificate_id*string

The unique identifier of the certificate.

Match^[a-zA-Z0-9-_.]+$

Length1 <= length <= 256

Query Parameters

gateway_group_id*string

Gateway group ID. Optional when using the gateway group admin key to authenticate.

Length1 <= length

Response Body

`application/json`

curl -X GET "$API_BASE_URL/apisix/admin/ca_certificates/bd58fce2-b6cc-4d2d-a53c-6ce11b19c101?gateway_group_id=86fb9981-d9d2-4555-9df8-91ae92129335"

Successfully retrieved the CA certificate.

{
  "value": {
    "name": "us-west-rsc",
    "desc": "Object description.",
    "cert": "-----BEGIN CERTIFICATE-----\n...\n-----END CERTIFICATE-----",
    "labels": {
      "version": "v2",
      "env": "prod"
    },
    "id": "bd58fce2-b6cc-4d2d-a53c-6ce11b19c101",
    "created_at": 1742288232,
    "updated_at": 1742288235,
    "associated_snis": [
      "string"
    ],
    "exptime": 1735680000,
    "validity_start": 1714540800,
    "validity_end": 1730419200
  }
}

Bad Request — The request was malformed or contained invalid parameters. Check the error_msg field for details.

{
  "value": {},
  "error_msg": "error message"
}

Complete operation details and schema variants

GET /apisix/admin/ca_certificates/{ca_certificate_id}

Get a CA certificate on a gateway group

Retrieve details of a specific CA certificate configured in the gateway group for mTLS validation. Required IAM Permission: Action gateway:GetCertificate, Resource arn:api7:gateway:gatewaygroup/%s

Parameters

ca_certificate_id (path, string, required): The unique identifier of the certificate.
gateway_group_id (query, string, required): Gateway group ID. Optional when using the gateway group admin key to authenticate.

Responses

200: Successfully retrieved the CA certificate.
allOf variant 1
value (object, optional): The specific resource.
allOf variant 2
value (object, optional): The Certificate response format, with filtering the sensitive fields and some other fields.
allOf variant 1
value.name (string, optional): The object name.
value.desc (string, optional): The object description.
value.cert (string, optional): The certificate in PEM format.
value.labels (object, optional): Key-value pairs of labels.
allOf variant 2
value.id (string, optional): The object ID.
value.created_at (integer, optional): The object created timestamp.
value.updated_at (integer, optional): The object updated timestamp.
value.associated_snis (array, optional): The SNI IDs associated with the certificate.
value.exptime (integer, optional): The SSL certificate expire time.
value.validity_start (integer, optional): The earliest time when the SSL certificate is used.
value.validity_end (integer, optional): The latest time when the SSL certificate is used.
400: Bad Request — The request was malformed or contained invalid parameters. Check the error_msg field for details.
value (object, optional): The specific resource.
error_msg (string, optional): The error message.

cURL

curl -X GET '$API_BASE_URL/apisix/admin/ca_certificates/{ca_certificate_id}'

Get a CA certificate on a gateway group

200application/json

400application/json

`application/json`

`application/json`