List ACME credentials

2 minute read

GET https://www.digicert.com/partner-subscription/api/v1/acme/{{acme_contract_id}}/credentials

Use this endpoint to list all ACME credentials for an ACME contract.

The response includes active and revoked credentials for the specified ACME contract. Use this endpoint to identify a specific credential for selective revocation or to verify which credentials are currently active.

This endpoint requires a subaccount Partner Subscriptions API key. Parent account API keys are not accepted for ACME contract operations.

Example requests and responses

curl -X GET \
  https://www.digicert.com/partner-subscription/api/v1/acme/12345/credentials \
  -H 'X-PARTNER-APIKEY: {{subaccount_partner_api_key}}'

import requests

url = "https://www.digicert.com/partner-subscription/api/v1/acme/12345/credentials"

headers = {
    'X-PARTNER-APIKEY': "{{subaccount_partner_api_key}}"
    }

response = requests.request("GET", url, headers=headers)

print(response.text)

package main

import (
	"fmt"
	"net/http"
	"io/ioutil"
)

func main() {

	url := "https://www.digicert.com/partner-subscription/api/v1/acme/12345/credentials"

	req, _ := http.NewRequest("GET", url, nil)

	req.Header.Add("X-PARTNER-APIKEY", "{{subaccount_partner_api_key}}")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := ioutil.ReadAll(res.Body)

	fmt.Println(res)
	fmt.Println(string(body))

}

var request = require("request");

var options = {
  method: 'GET',
  url: 'https://www.digicert.com/partner-subscription/api/v1/acme/12345/credentials',
  headers: {
    'X-PARTNER-APIKEY': '{{subaccount_partner_api_key}}'
  }
};

request(options, function (error, response, body) {
  if (error) throw new Error(error);

  console.log(body);
});

200 OK

{
  "credentials": [
    {
      "credential_id": 4821,
      "kid_hint": "ab12",
      "status": "active",
      "created_at": "2026-06-01 14:00:00"
    },
    {
      "credential_id": 4750,
      "kid_hint": "cd34",
      "status": "revoked",
      "created_at": "2026-05-15 10:30:00"
    }
  ]
}

URL path and query parameters

Name	Req/Opt	Type	Description
acme_contract_id	required	integer	Unique identifier of the ACME contract.

Request parameters

This endpoint does not use request body parameters.

Response parameters

Name	Type	Description
credentials	array[object]	List of ACME credential records for the ACME contract.
.. credential_id	integer	Unique identifier of the ACME credential. Use this value to revoke a specific credential.
.. kid_hint	string	Last four characters of the External Account Binding (EAB) Key ID. Use this value to identify which credential is configured in an ACME client or to match a credential with the EAB Key ID configured in an ACME client.
.. status	string	Current credential status. Allowed values: `active`, `revoked`
.. created_at	string	Date and time the credential was created.