Cloudflare API | ACM › Custom Trust Store › List Custom Origin Trust Store Details

API Reference

Overview

Account & User Management

Abuse Reports

Certificate Management

ACM

Custom Trust Store

List Custom Origin Trust Store Details

Upload Custom Origin Trust Store

Custom Origin Trust Store Details

Delete Custom Origin Trust Store

Total TLS

Certificate Authorities

Origin CA Certificates

Origin Post Quantum Encryption

Origin TLS Client Auth

SSL

Cloudflare One

Email Security

Zero Trust

DNS

Account Custom Nameservers

DNS

DNS Firewall

Domain/Zone Management

IP Addresses

Media

Networking

Magic Cloud Networking

Magic Network Monitoring

Magic Transit

Network Interconnects

Observability

Radar

Routing & Performance

Rules

Security

Leaked Credential Checks

Storage & Databases

Threat Intelligence

Workers & Pages

Workers For Platforms

Shared

ACM

acm

ACM

Custom Trust Store

acm.custom_trust_store

Methods

List Custom Origin Trust Store Details -> V4PagePaginationArray<

CustomTrustStore

get/zones/{zone_id}/acm/custom_trust_store

Get Custom Origin Trust Store for a Zone.

Security

The preferred authorization scheme for interacting with the Cloudflare API. Create a token.

Example: Authorization: Bearer Sn3lZJTBX6kkg7OdcBUAxOO963GEIyGQqnFTOFYY

Accepted Permissions (at least one required)

SSL and Certificates Write SSL and Certificates Read

path Parameters

zone_id: string

(maxLength: 32)

Identifier.

query Parameters

limit: number

Optional

Limit to the number of records returned.

offset: number

Optional

Offset the results

page: number

Optional

(minimum: 1, default: 1)

Page number of paginated results.

per_page: number

Optional

(maximum: 50, minimum: 5, default: 20)

Number of records per page.

Response fields

errors: Array<{ code, message, documentation_url, 1 more... }>

messages: Array<{ code, message, documentation_url, 1 more... }>

success: true

Whether the API call was successful.

result: Array<

CustomTrustStore

Optional

result_info: { count, page, per_page, 1 more... }

Optional

Request example

curl https://api.cloudflare.com/client/v4/zones/$ZONE_ID/acm/custom_trust_store \
    -H "Authorization: Bearer $CLOUDFLARE_API_TOKEN"

200Example

{
  "errors": [
    {
      "code": 1000,
      "message": "message",
      "documentation_url": "documentation_url",
      "source": {
        "pointer": "pointer"
      }
    }
  ],
  "messages": [
    {
      "code": 1000,
      "message": "message",
      "documentation_url": "documentation_url",
      "source": {
        "pointer": "pointer"
      }
    }
  ],
  "success": true,
  "result": [
    {
      "id": "023e105f4ecef8ad9ca31a8372d0c353",
      "certificate": "-----BEGIN CERTIFICATE-----\nMIIDdjCCAl6gAwIBAgIJAPnMg0Fs+/B0MA0GCSqGSIb3DQEBCwUAMFsx...\n-----END CERTIFICATE-----\n",
      "expires_on": "2122-10-29T16:59:47Z",
      "issuer": "GlobalSign",
      "signature": "SHA256WithRSA",
      "status": "active",
      "updated_at": "2014-01-01T05:20:00Z",
      "uploaded_on": "2014-01-01T05:20:00Z"
    }
  ],
  "result_info": {
    "count": 1,
    "page": 1,
    "per_page": 20,
    "total_count": 2000
  }
}

Upload Custom Origin Trust Store -> Envelope<

CustomTrustStore

post/zones/{zone_id}/acm/custom_trust_store

Add Custom Origin Trust Store for a Zone.

Custom Origin Trust Store Details -> Envelope<

CustomTrustStore

get/zones/{zone_id}/acm/custom_trust_store/{custom_origin_trust_store_id}

Retrieves details about a specific certificate in the custom origin trust store, including expiration and subject information.

Delete Custom Origin Trust Store -> Envelope<{ id }>

delete/zones/{zone_id}/acm/custom_trust_store/{custom_origin_trust_store_id}

Removes a CA certificate from the custom origin trust store. Origins using certificates signed by this CA will no longer be trusted.

Domain types

CustomTrustStore = { id, certificate, expires_on, 5 more... }

ACM

Total TLS

acm.total_tls

Methods

Total TLS Settings Details -> Envelope<{ certificate_authority, enabled, validity_period }>

get/zones/{zone_id}/acm/total_tls

Get Total TLS Settings for a Zone.

Enable Or Disable Total TLS -> Envelope<{ certificate_authority, enabled, validity_period }>

post/zones/{zone_id}/acm/total_tls

Set Total TLS Settings or disable the feature for a Zone.

Enable Or Disable Total TLS -> Envelope<{ certificate_authority, enabled, validity_period }>

post/zones/{zone_id}/acm/total_tls

Set Total TLS Settings or disable the feature for a Zone.

Domain types

CertificateAuthority = "google" | "lets_encrypt" | "ssl_com"

The Certificate Authority that Total TLS certificates will be issued through.