Custom Origin Trust Store
By default, Cloudflare’s global network maintains a list of publicly trusted certificate authorities. This means that when using , Cloudflare will only trust origin server certificates issued by a CA in this trust store.
Custom Origin Trust Store allows you to upload certificate authorities (CAs) that Cloudflare will use to authenticate connections to your origin server. Use this feature to override the default trust store with your preferred CA or CAs.
When a CA has been uploaded to Custom Origin Server Trust Store, Cloudflare will ignore all default publicly trusted CAs and exclusively use the CA or CAs that have been uploaded to authenticate the origin server.
To manage origin trust stores in the dashboard, go to SSL/TLS > Origin Server and use the Custom Origin Trust Store card.
|Create custom origin trust store|
|List custom origin trust stores|
|Get custom origin trust store|
|Delete custom origin trust store|