---
title: "Revoke an ACME credential"
source_url: https://dev.digicert.com/partner-subscriptions-api/acme-contract-management/revoke-an-acme-credential.html
api_method: POST
api_endpoint: "/partner-subscription/api/v1/acme/<acme_contract_id>/credentials/revoke/<credential_id>"
api_url: "https://www.digicert.com/partner-subscription/api/v1/acme/{{acme_contract_id}}/credentials/revoke/{{credential_id}}"
---

**POST** `https://www.digicert.com/partner-subscription/api/v1/acme/{{acme_contract_id}}/credentials/revoke/{{credential_id}}`

Use this endpoint to revoke a specific ACME credential for an ACME contract.

Use this endpoint for selective revocation when multiple ACME credentials exist for a contract and you need to invalidate only one credential, such as a credential used by a compromised ACME client.


> **Info**
>
> - This endpoint requires a subaccount Partner Subscriptions API key. Parent account API keys are not accepted for ACME contract operations.
> - Use the [List ACME credentials](https://dev.digicert.com/md/partner-subscriptions-api/acme-contract-management/list-acme-credentials.md) endpoint to find the `credential_id` for the credential you want to revoke.


> **Warning**
>
> Revoking an ACME credential does not cancel the ACME contract. The contract, SANs, product, and billing remain active. The revoked credential can no longer be used for certificate issuance. If you need new credentials, use the Regenerate ACME credentials endpoint. For more information, see [Regenerate ACME credentials](https://dev.digicert.com/md/partner-subscriptions-api/acme-contract-management/regenerate-acme-credentials.md)


## Example requests and responses

**cURL**

```bash
curl -X POST \
  https://www.digicert.com/partner-subscription/api/v1/acme/12345/credentials/revoke/4821 \
  -H 'X-PARTNER-APIKEY: {{subaccount_partner_api_key}}'
```

**Python**

```python
import requests

url = "https://www.digicert.com/partner-subscription/api/v1/acme/12345/credentials/revoke/4821"

headers = {
    'X-PARTNER-APIKEY': "{{subaccount_partner_api_key}}"
    }

response = requests.request("POST", url, headers=headers)

print(response.text)
```

**Go**

```go
package main

import (
	"fmt"
	"net/http"
	"io/ioutil"
)

func main() {

	url := "https://www.digicert.com/partner-subscription/api/v1/acme/12345/credentials/revoke/4821"

	req, _ := http.NewRequest("POST", url, nil)

	req.Header.Add("X-PARTNER-APIKEY", "{{subaccount_partner_api_key}}")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := ioutil.ReadAll(res.Body)

	fmt.Println(res)
	fmt.Println(string(body))

}
```

**NodeJS**

```javascript
var request = require("request");

var options = {
  method: 'POST',
  url: 'https://www.digicert.com/partner-subscription/api/v1/acme/12345/credentials/revoke/4821',
  headers: {
    'X-PARTNER-APIKEY': '{{subaccount_partner_api_key}}'
  }
};

request(options, function (error, response, body) {
  if (error) throw new Error(error);

  console.log(body);
});
```


## 204 No Content

The ACME credential was revoked successfully. The response does not include a body.

## URL path and query parameters

<table class="params-table">
<thead>
<tr>
<th>Name</th>
<th>Req/Opt</th>
<th>Type</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td>acme_contract_id</td>
<td>required</td>
<td>integer</td>
<td>Unique identifier of the ACME contract.</td>
</tr>
<tr>
<td>credential_id</td>
<td>required</td>
<td>integer</td>
<td>Unique identifier of the ACME credential to revoke. This value is returned by contract creation, credential regeneration, or the List ACME credentials endpoint.</td>
</tr>
</tbody>
</table>

This endpoint does not use URL query parameters.

## Request parameters

This endpoint does not use request body parameters.

## Response parameters

This endpoint does not return response parameters.