You may use the azurerm_key_vault_certificate_data
data source.
Example from the docs
data "azurerm_key_vault" "example" { name = "examplekv" resource_group_name = "some-resource-group"}data "azurerm_key_vault_certificate_data" "example" { name = "secret-sauce" key_vault_id = data.azurerm_key_vault.example.id}output "example_pem" { value = data.azurerm_key_vault_certificate_data.example.pem}