List ACME contract certificates

2 minute read

GET https://www.digicert.com/partner-subscription/api/v1/acme/{{acme_contract_id}}/certificates

Use this endpoint to retrieve certificate details for certificates issued under an ACME contract.

The response returns a list of certificate records associated with the contract. Each record includes the certificate domain, current status, expiration date, serial number, and SANs included in that certificate.

This endpoint requires a subaccount Partner Subscriptions API key. Parent account API keys are not accepted for ACME contract operations. Also, this endpoint does not retrieve the certificate files, PEM data, or certificate chain data.

Example requests and responses

curl -X GET \
  https://www.digicert.com/partner-subscription/api/v1/acme/12345/certificates \
  -H 'X-PARTNER-APIKEY: {{subaccount_partner_api_key}}'

import requests

url = "https://www.digicert.com/partner-subscription/api/v1/acme/12345/certificates"

headers = {
    'X-PARTNER-APIKEY': "{{subaccount_partner_api_key}}"
    }

response = requests.request("GET", url, headers=headers)

print(response.text)

package main

import (
	"fmt"
	"net/http"
	"io/ioutil"
)

func main() {

	url := "https://www.digicert.com/partner-subscription/api/v1/acme/12345/certificates"

	req, _ := http.NewRequest("GET", url, nil)

	req.Header.Add("X-PARTNER-APIKEY", "{{subaccount_partner_api_key}}")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := ioutil.ReadAll(res.Body)

	fmt.Println(res)
	fmt.Println(string(body))

}

var request = require("request");

var options = {
  method: 'GET',
  url: 'https://www.digicert.com/partner-subscription/api/v1/acme/12345/certificates',
  headers: {
    'X-PARTNER-APIKEY': '{{subaccount_partner_api_key}}'
  }
};

request(options, function (error, response, body) {
  if (error) throw new Error(error);

  console.log(body);
});

200 OK

{
  "certificates": [
    {
      "domain": "example.com",
      "status": "issued",
      "expiration_date": "2025-07-15T12:00:00Z",
      "serial_number": "0A1B2C3D4E5F6A7B8C9D0E1F2A3B4C5D",
      "sans": [
        "example.com",
        "www.example.com"
      ]
    },
    {
      "domain": "api.example.com",
      "status": "issued",
      "expiration_date": "2025-08-20T12:00:00Z",
      "serial_number": "1B2C3D4E5F6A7B8C9D0E1F2A3B4C5D6E",
      "sans": [
        "api.example.com"
      ]
    }
  ]
}

200 OK - No certificates

{
  "certificates": []
}

URL path and query parameters

Name	Req/Opt	Type	Description
acme_contract_id	required	integer	Unique identifier of the ACME contract.

Request parameters

This endpoint does not use request body parameters.

Response parameters

Name	Type	Description
certificates	array[object]	List of certificate records associated with the ACME contract. Returns an empty array if no certificates are available.
.. domain	string	Domain associated with the certificate record.
.. status	string	Current status of the certificate. Status types: `issued`, `pending`, `renewed`, `not_renewed`, `expired`, or `revoked`.
.. expiration_date	string\|null	Certificate expiration date in ISO 8601 format, or `null` if the certificate has not been issued.
.. serial_number	string\|null	Certificate serial number, or `null` if the certificate has not been issued.
.. sans	array[string]	Subject Alternative Names included in the certificate.