Enable

To enable Total TLS - which issues individual certificates for your proxied hostnames - follow these instructions:

Dashboard

To enable Total TLS in the dashboard:

1. Log into the Cloudflare dashboard ↗.
2. Choose your account and domain.
3. Go to SSL/TLS > Edge Certificates.
4. For Total TLS, switch the toggle to On and - if desired - choose an issuing Certificate Authority.

API

To enable Total TLS with the API, send a PATCH request with the enabled parameter set to your desired setting (true or false).

You can also specify a desired certificate authority by adding a value to the certificate_authority parameter.

Aspects to consider

• Total TLS certificates follow the Common Name (CN) restriction of 64 characters (RFC 5280 ↗). If you have a hostname that exceeds this length, you can create an Advanced Certificate via API to cover it.

Was this helpful?

What did you like?

Accurate

Easy to understand

Solved my problem

Helped me decide to use the product

Other

What went wrong?

Hard to understand

Incorrect information

Missing the information

Other

Thank you for helping improve Cloudflare's documentation!