How to download the certificate for the client TLS option after creating the destination
I would like to change the TLS client destination setting for the Bluemix Secure Gateway connection after the destination is created.
I edited the destination and downloaded the certificate. But the certificate doesn't seem to load. The upload fields didn't change anything. If I check the client's TLS setting, the upload box is disabled and I cannot upload the certificate.
Is this the only way to enable the client TLS option and download the certificate creating a new one?
[upload the certificate, but nothing has changed] 
[check the box, the upload field will disappear] 
source to share
Based on your screenshots, it doesn't look like it is working correctly.
To enable client TLS and download the certificate, you need to check the checkbox and you need to download the certificate. If you can't get this script, I believe that if you download the certificate with the checkbox checked and update the destination, then update the destination with the checkbox checked, your certificate should still be there.
Otherwise, you can use the REST API to upload your certificate after you have enabled client TLS in your destination.
I'll go over the UI issue you are seeing.
source to share