Skip to content
Cloudflare API
Start here
API Reference
Zero Trust
Access

Certificates

List mTLS certificates
zero_trust.access.certificates.list(CertificateListParams**kwargs) -> SyncV4PagePaginationArray[Certificate]
GET/{accounts_or_zones}/{account_or_zone_id}/access/certificates
Get an mTLS certificate
zero_trust.access.certificates.get(strcertificate_id, CertificateGetParams**kwargs) -> Certificate
GET/{accounts_or_zones}/{account_or_zone_id}/access/certificates/{certificate_id}
Add an mTLS certificate
zero_trust.access.certificates.create(CertificateCreateParams**kwargs) -> Certificate
POST/{accounts_or_zones}/{account_or_zone_id}/access/certificates
Update an mTLS certificate
zero_trust.access.certificates.update(strcertificate_id, CertificateUpdateParams**kwargs) -> Certificate
PUT/{accounts_or_zones}/{account_or_zone_id}/access/certificates/{certificate_id}
Delete an mTLS certificate
zero_trust.access.certificates.delete(strcertificate_id, CertificateDeleteParams**kwargs) -> CertificateDeleteResponse
DELETE/{accounts_or_zones}/{account_or_zone_id}/access/certificates/{certificate_id}
ModelsExpand Collapse
str

A fully-qualified domain name (FQDN).

class Certificate: …
id: Optional[str]

The ID of the application that will use this certificate.

associated_hostnames: Optional[List[AssociatedHostnames]]

The hostnames of the applications that will use this certificate.

expires_on: Optional[datetime]
formatdate-time
fingerprint: Optional[str]

The MD5 fingerprint of the certificate.

name: Optional[str]

The name of the certificate.

class CertificateDeleteResponse: …
id: Optional[str]

UUID.

maxLength36

CertificatesSettings

List all mTLS hostname settings
zero_trust.access.certificates.settings.get(SettingGetParams**kwargs) -> SyncSinglePage[CertificateSettings]
GET/{accounts_or_zones}/{account_or_zone_id}/access/certificates/settings
Update an mTLS certificate's hostname settings
zero_trust.access.certificates.settings.update(SettingUpdateParams**kwargs) -> SyncSinglePage[CertificateSettings]
PUT/{accounts_or_zones}/{account_or_zone_id}/access/certificates/settings
ModelsExpand Collapse
class CertificateSettings: …
china_network: bool

Request client certificates for this hostname in China. Can only be set to true if this zone is china network enabled.

client_certificate_forwarding: bool

Client Certificate Forwarding is a feature that takes the client cert provided by the eyeball to the edge, and forwards it to the origin as a HTTP header to allow logging on the origin.

hostname: str

The hostname that these settings apply to.