---
title: "POST /api/v1/cert-manager/certificates/{id}/application"
method: POST
path: "/api/v1/cert-manager/certificates/{id}/application"
tags: ["PKI Certificates"]
---

# POST /api/v1/cert-manager/certificates/{id}/application

`POST /api/v1/cert-manager/certificates/{id}/application`

Assign a certificate to an Application. Only certificates that aren't already attached to an Application can be assigned; once attached the binding cannot be moved.

## Path parameters

- `id` string, uuid, required

## Request body

- object
  - `applicationId` string, uuid, required

## Response `200`

Default Response

- object
  - `certificate` object, required
    - `id` string, uuid, required
    - `createdAt` string, date-time, required
    - `updatedAt` string, date-time, required
    - `caId` string, uuid, nullable
    - `status` string, required
    - `serialNumber` string, required
    - `friendlyName` string, required
    - `commonName` string, required
    - `notBefore` string, date-time, required
    - `notAfter` string, date-time, required
    - `revokedAt` string, date-time, nullable
    - `revocationReason` number, nullable
    - `altNames` string, nullable
    - `caCertId` string, uuid, nullable
    - `certificateTemplateId` string, uuid, nullable
    - `keyUsages` string[], nullable
    - `extendedKeyUsages` string[], nullable
    - `pkiSubscriberId` string, uuid, nullable
    - `profileId` string, uuid, nullable
    - `renewBeforeDays` number, nullable
    - `renewedFromCertificateId` string, uuid, nullable
    - `renewedByCertificateId` string, uuid, nullable
    - `renewalError` string, nullable
    - `keyAlgorithm` string, nullable
    - `signatureAlgorithm` string, nullable
    - `subjectOrganization` string, nullable
    - `subjectOrganizationalUnit` string, nullable
    - `subjectCountry` string, nullable
    - `subjectState` string, nullable
    - `subjectLocality` string, nullable
    - `fingerprintSha256` string, nullable
    - `fingerprintSha1` string, nullable
    - `isCA` boolean, nullable
    - `pathLength` number, nullable
    - `source` string, nullable
    - `discoveryMetadata` unknown
    - `externalMetadata` unknown
    - `applicationId` string, uuid, nullable
    - `keySource` string
    - `hsmConnectorId` string, uuid, nullable
    - `hsmKeyLabel` string, nullable
    - `hsmPublicKeySpki` unknown
    - `subjectDomainComponents` string, nullable

## Other responses

- `400` — Default Response
- `401` — Default Response
- `403` — Default Response
- `404` — Default Response
- `422` — Default Response
- `500` — Default Response

---

[API](https://skmtc.net/infisical/apis/infisical-api.md) · [All operations](https://skmtc.net/infisical/apis/infisical-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/infisical/infisical-api/versions/885aef3e6c11/schema)