The GDS can delete the private key and/or certificate after responding to finish request so implementing this would impose unnecessary burdens on the GDS for benefits that are not clear since calling StartRequest again is not a huge burden after a network interruption.

This feature is asking for a GetApplicationCertificate(s) Method on the TrustListType. The described use case is just one of the use cases.

Use Case GDS management (described above).
The method would be optional anyhow and a GDS does not need to implement if it does not store the certificate.
As described above, this is also important for diagnostics and a diagnostics application is not able to create a new certificate just to look at the certificate...

Use Case Server management
At the moment there is no way to get the certificates of an OPC UA application that are related to the CertificateGroup.
The certificates and information returned by GetEndpoints does not indicate the relation to the CertificateGroup.

Both use cases can be covered with a GetApplicationCertificates() Method on the TrustListType that returns the list of certificates.
This will be even more important as soon as we have a lager number of certificates with ECC.

Add GetCertificates Method parallel to GetTrustList.

The new Method covers only the use case on the GDS side (it is only part of the PULL interface).

It does not cover the use case for the server side.
Use Case Server management
At the moment there is no way to get the certificates of an OPC UA application that are related to the CertificateGroup.
The certificates and information returned by GetEndpoints does not indicate the relation to the CertificateGroup.

If the method would be on the TrustListType, it would cover both use cases.
A GetCertificates() Method on the TrustListType that returns the list of certificates.
This will be even more important as soon as we have a lager number of certificates with ECC.

Need endpoint management API and this should be part of it.

Created a clone for the endpoint management API.
The changes for this issue can be reviewed.

For PullManagement added GetCertificates in 7.7.8. For PushManagement added GetCertificates in 7.8.5

Agreed to changes edited in Munich F2F.