---
title: "List ACME credentials"
source_url: https://dev.digicert.com/partner-subscriptions-api/acme-contract-management/list-acme-credentials.html
api_method: GET
api_endpoint: "/partner-subscription/api/v1/acme/<acme_contract_id>/credentials"
api_url: "https://www.digicert.com/partner-subscription/api/v1/acme/{{acme_contract_id}}/credentials"
---

**GET** `https://www.digicert.com/partner-subscription/api/v1/acme/{{acme_contract_id}}/credentials`

Use this endpoint to list all ACME credentials for an ACME contract.

The response includes active and revoked credentials for the specified ACME contract. Use this endpoint to identify a specific credential for selective revocation or to verify which credentials are currently active.


> **Info**
>
> This endpoint requires a subaccount Partner Subscriptions API key. Parent account API keys are not accepted for ACME contract operations.


## Example requests and responses

**cURL**

```bash
curl -X GET \
  https://www.digicert.com/partner-subscription/api/v1/acme/12345/credentials \
  -H 'X-PARTNER-APIKEY: {{subaccount_partner_api_key}}'
```

**Python**

```python
import requests

url = "https://www.digicert.com/partner-subscription/api/v1/acme/12345/credentials"

headers = {
    'X-PARTNER-APIKEY': "{{subaccount_partner_api_key}}"
    }

response = requests.request("GET", url, headers=headers)

print(response.text)
```

**Go**

```go
package main

import (
	"fmt"
	"net/http"
	"io/ioutil"
)

func main() {

	url := "https://www.digicert.com/partner-subscription/api/v1/acme/12345/credentials"

	req, _ := http.NewRequest("GET", url, nil)

	req.Header.Add("X-PARTNER-APIKEY", "{{subaccount_partner_api_key}}")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := ioutil.ReadAll(res.Body)

	fmt.Println(res)
	fmt.Println(string(body))

}
```

**NodeJS**

```javascript
var request = require("request");

var options = {
  method: 'GET',
  url: 'https://www.digicert.com/partner-subscription/api/v1/acme/12345/credentials',
  headers: {
    'X-PARTNER-APIKEY': '{{subaccount_partner_api_key}}'
  }
};

request(options, function (error, response, body) {
  if (error) throw new Error(error);

  console.log(body);
});
```


## 200 OK

```json
{
  "credentials": [
    {
      "credential_id": 4821,
      "kid_hint": "ab12",
      "status": "active",
      "created_at": "2026-06-01 14:00:00"
    },
    {
      "credential_id": 4750,
      "kid_hint": "cd34",
      "status": "revoked",
      "created_at": "2026-05-15 10:30:00"
    }
  ]
}
```


## URL path and query parameters

<table class="params-table">
<thead>
<tr>
<th>Name</th>
<th>Req/Opt</th>
<th>Type</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td>acme_contract_id</td>
<td>required</td>
<td>integer</td>
<td>Unique identifier of the ACME contract.</td>
</tr>
</tbody>
</table>


## Request parameters

This endpoint does not use request body parameters.

## Response parameters

<table class="params-table">
<thead>
<tr>
<th>Name</th>
<th>Type</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td>credentials</td>
<td>array[object]</td>
<td>List of ACME credential records for the ACME contract.</td>
</tr>
<tr>
<td>.. credential_id</td>
<td>integer</td>
<td>Unique identifier of the ACME credential. Use this value to revoke a specific credential.</td>
</tr>
<tr>
<td>.. kid_hint</td>
<td>string</td>
<td>Last four characters of the External Account Binding (EAB) Key ID. Use this value to identify which credential is configured in an ACME client or to match a credential with the EAB Key ID configured in an ACME client.
</td>
</tr>
<tr>
<td>.. status</td>
<td>string</td>
<td>Current credential status.<br>Allowed values: <code>active</code>, <code>revoked</code></td>
</tr>
<tr>
<td>.. created_at</td>
<td>string</td>
<td>Date and time the credential was created.</td>
</tr>
</tbody>
</table>