---
title: "Get mock API certificate settings"
method: GET
path: "/v1/mock-apis/{mockApiId}/settings/certificate"
tags: ["Settings"]
---

# Get mock API certificate settings

`GET /v1/mock-apis/{mockApiId}/settings/certificate`

Retrieve the certificate settings for a mock API. These settings are used to configure the cryptographic handlebars helpers,
[`sign`](/response-templating/cryptographic-helpers#signing) and [`x509Certificate`](/response-templating/cryptographic-helpers#x-509-certificate).

## Response `200`

The certificate settings

- object
  - `certificate` object
    - `rsa256PublicKey` string, required — RSA public key in PEM format. Pairs with rsa256PrivateKey. A valid pair is generated by the system upon mock API creation.
    - `rsa256PrivateKey` string, required — RSA private key in PEM format. Pairs with rsa256PublicKey. A valid pair is generated by the system upon mock API creation. Used by the [`sign`](/response-templating/cryptographic-helpers#signing) helper when generating RSA signatures.
    - `x509Certificate` string, required — X.509 certificate in PEM format. A valid pair is generated by the system upon mock API creation, using the generated RSA key pair to generate the signature.
    - `hmacSecret` string, required — A non-empty secret key. A random secret is generated by the system upon mock API creation. Used by the [`sign`](/response-templating/cryptographic-helpers#signing) helper when generating HMAC signatures.

## Other responses

- `401` — 401 Unauthenticated response
- `403` — 403 Unauthorized response
- `404` — 404 Not Found response

---

[API](https://skmtc.net/wiremock/apis/wiremock-cloud.md) · [All operations](https://skmtc.net/wiremock/apis/wiremock-cloud/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/wiremock/wiremock-cloud/revisions/93bebefc672f/schema)