Cloudflare Docs
Visit SSL/TLS on GitHub
Set theme to dark (⇧+D)

Advanced certificates

Advanced certificates offers a flexible and customizable way to issue and manage certificates.

Use advanced certificates when you want something more customizable than Universal SSL but still want the convenience of SSL certificate issuance and renewal.

​​ Features

Advanced certificates allow you multiple customization options:

  • Include the zone apex and less than 50 hosts as covered hostnames.
  • Cover more than one level of subdomain.
  • Select the preferred validation method (HTTP, TXT, or Email).
  • Choose the certificate validity period (14, 30, or 90 days).
  • Choose the Certificate Authority to issue the certificate.
  • Remove Cloudflare branding that are normally present on Universal certificates.
  • Select a custom trust store for origin authentication.
  • Control cipher suites used for TLS.


Paid add-onPaid add-onPaid add-onPaid add-on

​​ Availability

​​ Limitations

Advanced Certificate Manager cannot be used with Cloudflare Pages due to certificate prioritization. This is because Pages uses Cloudflare for SaaS for Custom Domains.