---
title: "PATCH /v1/apps/{appsId}/authorizedCertificates/{authorizedCertificatesId}"
method: PATCH
path: "/v1/apps/{appsId}/authorizedCertificates/{authorizedCertificatesId}"
tags: ["apps"]
---

# PATCH /v1/apps/{appsId}/authorizedCertificates/{authorizedCertificatesId}

`PATCH /v1/apps/{appsId}/authorizedCertificates/{authorizedCertificatesId}`

Updates the specified SSL certificate. To renew a certificate and maintain its existing domain mappings, update certificate_data with a new certificate. The new certificate must be applicable to the same domains as the original certificate. The certificate display_name may also be updated.

## Path parameters

- `appsId` string, required
- `authorizedCertificatesId` string, required

## Query parameters

- `updateMask` string

## Request body

- AuthorizedCertificate — An SSL certificate that a user has been authorized to administer. A user is authorized to administer any certificate that applies to one of their authorized domains.
  - `managedCertificate` ManagedCertificate — A certificate managed by App Engine.
    - `lastRenewalTime` string, google-datetime — Time at which the certificate was last renewed. The renewal process is fully managed. Certificate renewal will automatically occur before the certificate expires. Renewal errors can be tracked via ManagementStatus.@OutputOnly
    - `status` 'MANAGEMENT_STATUS_UNSPECIFIED' | 'OK' | 'PENDING' | 'FAILED_RETRYING_NOT_VISIBLE' | 'FAILED_PERMANENT' | 'FAILED_RETRYING_CAA_FORBIDDEN' | 'FAILED_RETRYING_CAA_CHECKING' — Status of certificate management. Refers to the most recent certificate acquisition or renewal attempt.@OutputOnly
  - `domainMappingsCount` integer — Aggregate count of the domain mappings with this certificate mapped. This count includes domain mappings on applications for which the user does not have VIEWER permissions.Only returned by GET or LIST requests when specifically requested by the view=FULL_CERTIFICATE option.@OutputOnly
  - `visibleDomainMappings` string[] — Output only. The full paths to user visible Domain Mapping resources that have this certificate mapped. Example: apps/myapp/domainMappings/example.com.This may not represent the full list of mapped domain mappings if the user does not have VIEWER permissions on all of the applications that have this certificate mapped. See domain_mappings_count for a complete count.Only returned by GET or LIST requests when specifically requested by the view=FULL_CERTIFICATE option.@OutputOnly
  - `certificateRawData` CertificateRawData — An SSL certificate obtained from a certificate authority.
    - `publicCertificate` string — PEM encoded x.509 public key certificate. This field is set once on certificate creation. Must include the header and footer. Example: -----BEGIN CERTIFICATE----- -----END CERTIFICATE-----
    - `privateKey` string — Unencrypted PEM encoded RSA private key. This field is set once on certificate creation and then encrypted. The key size must be 2048 bits or fewer. Must include the header and footer. Example: -----BEGIN RSA PRIVATE KEY----- -----END RSA PRIVATE KEY----- @InputOnly
  - `name` string — Output only. Full path to the AuthorizedCertificate resource in the API. Example: apps/myapp/authorizedCertificates/12345.@OutputOnly
  - `id` string — Output only. Relative name of the certificate. This is a unique value autogenerated on AuthorizedCertificate resource creation. Example: 12345.@OutputOnly
  - `displayName` string — The user-specified display name of the certificate. This is not guaranteed to be unique. Example: My Certificate.
  - `domainNames` string[] — Output only. Topmost applicable domains of this certificate. This certificate applies to these domains and their subdomains. Example: example.com.@OutputOnly
  - `expireTime` string, google-datetime — The time when this certificate expires. To update the renewal time on this certificate, upload an SSL certificate with a different expiration time using AuthorizedCertificates.UpdateAuthorizedCertificate.@OutputOnly

## Response `200`

Successful response

---

[API](https://skmtc.dev/google/apis/appengine.md) · [All operations](https://skmtc.dev/google/apis/appengine/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/google/appengine/revisions/ee6b3d5f5200/schema)