--- title: "Update ACME restrictions" source_url: https://dev.digicert.com/certcentral-apis/services-api/api-keys/update-acme-restrictions.html api_method: PATCH api_endpoint: "/services/v2/key/{{key_id}}/restrictions" api_url: "https://www.digicert.com/services/v2/key/{{key_id}}/restrictions" --- **PATCH** `https://www.digicert.com/services/v2/key/{{key_id}}/restrictions` Use this endpoint to update the allowed SANs and order-count restriction for an existing ACME key and its associated ACME Directory URL. ## Example requests and responses **cURL (with restrictions)** ```bash curl -X PATCH \ 'https://www.digicert.com/services/v2/key/{{key_id}}/restrictions' \ -H 'Content-Type: application/json' \ -H 'X-DC-DEVKEY: {{api_key}}' \ -d '{ "allowed_order_count": 3, "sans": [ "somedomain.com" ] }' ``` **cURL (without restrictions)** ```bash curl -X PATCH \ 'https://www.digicert.com/services/v2/key/{{key_id}}/restrictions' \ -H 'Content-Type: application/json' \ -H 'X-DC-DEVKEY: {{api_key}}' \ -d '{ "sans": [] }' ``` ## 204 No Content ```json // empty ``` ## URL path parameters
| Name | Req/Opt | Type | Description |
|---|---|---|---|
| key_id | required | int | ID of the ACME key to update. |
| Name | Req/Opt | Type | Description |
|---|---|---|---|
| sans | optional | array[string] | Specify the domains (subject alternative names (SANs)) and wildcards allowed for certificates issued with this ACME key. Submit an empty array [] to remove all SAN restrictions. If omitted, the current SAN restrictions remain unchanged.
Maximum: 250 SANs per ACME Directory URL. |
| allowed_order_count | optional | int | Specify the maximum number of certificate orders that can be created with this ACME key. The value cannot be lower than the current used_order_count. |