Store certificates in Anypoint Secrets Manager and use them for one-way or mutual TLS between your managed gateway and an upstream with a private CA.