---
title: "Revoke all active ACME credentials"
source_url: https://dev.digicert.com/partner-subscriptions-api/acme-contract-management/revoke-all-active-acme-credentials.html
api_method: POST
api_endpoint: "/partner-subscription/api/v1/acme/<acme_contract_id>/credentials/revoke"
api_url: "https://www.digicert.com/partner-subscription/api/v1/acme/{{acme_contract_id}}/credentials/revoke"
---

**POST** `https://www.digicert.com/partner-subscription/api/v1/acme/{{acme_contract_id}}/credentials/revoke`

Use this endpoint to revoke all active ACME credentials for an ACME contract.

Revoking ACME credentials invalidates the existing External Account Binding (EAB) credentials used by ACME clients for certificate issuance. Use this endpoint when credentials are compromised or must be immediately invalidated.


> **Info**
>
> This endpoint requires a subaccount Partner Subscriptions API key. Parent account API keys are not accepted for ACME contract operations.


> **Warning**
>
> Revokes all active ACME credentials for the specified ACME contract. Revoking ACME credentials does not cancel the ACME contract. The contract, SANs, product, and billing remain active. Existing EAB credentials no longer work for certificate issuance. To resume certificate issuance after revocation, use the Regenerate ACME credentials endpoint to create new EAB credentials. For more information, see [Regenerate ACME credentials](https://dev.digicert.com/md/partner-subscriptions-api/acme-contract-management/regenerate-acme-credentials.md).


## Example requests and responses

**cURL**

```bash
curl -X POST \
  https://www.digicert.com/partner-subscription/api/v1/acme/12345/credentials/revoke \
  -H 'X-PARTNER-APIKEY: {{subaccount_partner_api_key}}'
```

**Python**

```python
import requests

url = "https://www.digicert.com/partner-subscription/api/v1/acme/12345/credentials/revoke"

headers = {
    'X-PARTNER-APIKEY': "{{subaccount_partner_api_key}}"
    }

response = requests.request("POST", url, headers=headers)

print(response.text)
```

**Go**

```go
package main

import (
	"fmt"
	"net/http"
	"io/ioutil"
)

func main() {

	url := "https://www.digicert.com/partner-subscription/api/v1/acme/12345/credentials/revoke"

	req, _ := http.NewRequest("POST", url, nil)

	req.Header.Add("X-PARTNER-APIKEY", "{{subaccount_partner_api_key}}")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := ioutil.ReadAll(res.Body)

	fmt.Println(res)
	fmt.Println(string(body))

}
```

**NodeJS**

```javascript
var request = require("request");

var options = {
  method: 'POST',
  url: 'https://www.digicert.com/partner-subscription/api/v1/acme/12345/credentials/revoke',
  headers: {
    'X-PARTNER-APIKEY': '{{subaccount_partner_api_key}}'
  }
};

request(options, function (error, response, body) {
  if (error) throw new Error(error);

  console.log(body);
});
```


## 204 No Content

All active ACME credentials were revoked successfully. The response does not include a body.


## URL path and query parameters

<table class="params-table">
<thead>
<tr>
<th>Name</th>
<th>Req/Opt</th>
<th>Type</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td>acme_contract_id</td>
<td>required</td>
<td>integer</td>
<td>Unique identifier of the ACME contract.</td>
</tr>
</tbody>
</table>


## Request parameters

This endpoint does not use request body parameters.

## Response parameters

This endpoint does not return response parameters.