need to download a copy of the PFX I uploaded to app service

Hi Paul,

This is by design for security reasons- Azure only stores the private key material for binding, not for later export. You won’t find an option in the Azure portal to download a certificate (PFX) once it’s been uploaded to an App Service.

Few options:

Re-export from the original source

• If you uploaded the PFX yourself, the only supported way to get it again is to re-export it from the original system or key vault where it was created.
• For example, if it was generated from an on-premises certificate store or Key Vault, export it again from there.

If certificate is in Azure Key Vault

• You can download/export from Key Vault, provided the certificate’s exportable private key option was enabled when uploaded.
• Docs: Download certificates from Azure Key Vault

If you no longer have the PFX, You’ll need to re-issue the certificate from your CA (Certificate Authority). After re-issuing, upload the new PFX to App Service again.

Azure intentionally does not provide a "download" button for uploaded certificates in App Service to prevent private key leakage.

you cannot download the PFX back from App Service. You must either re-export from the original location or re-issue it.