---
type: api
title: Get TLS certificate
description: Retrieves a certificate in the TLS certificate chain.
url: https://www.elastic.co/elastic/docs-builder/docs/4493/api/doc/cloud-enterprise/operation/operation-get-tls-certificate
resource: https://www.elastic.co/elastic/docs-builder/docs/4493/api/doc/cloud-enterprise/operation/operation-get-tls-certificate
products:
  - Elastic Cloud Enterprise
---

# Get TLS certificate

## Paths

- `GET` `/platform/configuration/security/tls/{service_name}`

#### Path parameters

- `service_name` (enum) — required
  The service certificate chain to read.
  Values: `adminconsole`, `proxy`, `ui`, `internalca`

## Description

Retrieves a certificate in the TLS certificate chain.

## Authentication

- Basic: `Authorization: Basic <credentials>`
- Api key: `Authorization: <value>`

## Response

The TLS certificate chain, with private key omitted, for the given service and whether it was user specified

`application/octet-stream`

- `user_supplied` (boolean)
  Was this certificate chain user supplied or automatically generated?
- `chain` (string[])
  The list of PEM encoded X509 certificates that make up the certificate chain
- `chain_status` (object)
  Chain expiration information
  - `expiration_date` (string · format: date-time)
    When this chain is going to expire due any of its certificates expiring (ISO format in UTC)
  - `first_certificate_to_expire` (string)
    Information on the first certificate expiring in the chain
- `api_managed` (boolean)
  Whether or not this certificate can be updated using the API
## Code examples

#### curl

```curl
curl -X GET "${API_URL}/platform/configuration/security/tls/adminconsole" \
  -u "${USERNAME}:${PASSWORD}"
```