Cloudflare Docs
SSL/TLS
Cloudflare Docs
SSL/TLS
Edit this page
Report an issue with this page
Log into the Cloudflare dashboard
Set theme to dark (⇧+D)
  1. Products
  2. SSL/TLS
  3. Reference
  4. Features and plans

SSL/TLS features and availability

Cloudflare provides the following features for different plans.

​​ Features

​​ Advanced Certificates

Link: Advanced Certificates

Feature availability

  • Free: Paid add-on
  • Pro: Paid add-on
  • Business: Paid add-on
  • Enterprise: Paid add-on

​​ Always Use HTTPS

Link: Always Use HTTPS

Feature availability

  • Free: Yes
  • Pro: Yes
  • Business: Yes
  • Enterprise: Yes

​​ Authenticated origin pull

Link: Authenticated origin pull

Feature availability

  • Free: Yes
  • Pro: Yes
  • Business: Yes
  • Enterprise: Yes

​​ Automatic HTTPS Rewrites

Link: Automatic HTTPS Rewrites

Feature availability

  • Free: Yes
  • Pro: Yes
  • Business: Yes
  • Enterprise: Yes

​​ Backup Certificates

Link: Backup Certificates

Feature availability

  • Free: Yes
  • Pro: Yes
  • Business: Yes
  • Enterprise: Yes

Can opt out?

Enterprise-only

  • Free: No
  • Pro: No
  • Business: No
  • Enterprise: Yes

​​ Certificate Transparency Monitoring

Link: Certificate Transparency Monitoring

Feature availability

  • Free: Yes
  • Pro: Yes
  • Business: Yes
  • Enterprise: Yes

Email Recipients

  • Free: All account members
  • Pro: All account members
  • Business: Specified email addresses
  • Enterprise: Specified email addresses

​​ Certificate Signing Requests

Link: Certificate Signing Requests

Feature availability

​​ Custom Certificates

Link: Custom Certificates

Feature availability

  • Free: No
  • Pro: No
  • Business: Yes
  • Enterprise: Yes

Certificates included

  • Free: 0
  • Pro: 0
  • Business: 1 (Modern)
    1 (Legacy)
  • Enterprise: 1 (Modern) (can purchase more)
    1 (Legacy) (can purchase more)

​​ Custom origin trust store

Link: Custom origin trust store

Feature availability

​​ Delegated DCV

Link: Delegated DCV

Feature availability

​​ SSL/TLS encryption mode

Link: SSL/TLS encryption mode

Feature availability

  • Free: Yes
  • Pro: Yes
  • Business: Yes
  • Enterprise: Yes

Strict (SSL-Only Origin Pull)

Enterprise-only

  • Free: No
  • Pro: No
  • Business: No
  • Enterprise: Yes

​​ HTTP Strict Transport Security

Link: HTTP Strict Transport Security

Feature availability

  • Free: Yes
  • Pro: Yes
  • Business: Yes
  • Enterprise: Yes

​​ Keyless SSL

Link: Keyless SSL

Feature availability

  • Free: No
  • Pro: No
  • Business: No
  • Enterprise: Paid add-on

​​ Minimum TLS Version

Link: Minimum TLS Version

Feature availability

  • Free: Yes
  • Pro: Yes
  • Business: Yes
  • Enterprise: Yes

​​ Opportunistic Encryption

Link: Opportunistic Encryption

Feature availability

  • Free: Yes
  • Pro: Yes
  • Business: Yes
  • Enterprise: Yes

​​ Origin certificates

Link: Origin certificates

Feature availability

  • Free: Yes
  • Pro: Yes
  • Business: Yes
  • Enterprise: Yes

​​ SSL/TLS Recommender

Link: SSL/TLS Recommender

Feature availability

  • Free: Yes
  • Pro: Yes
  • Business: Yes
  • Enterprise: Yes

​​ Staging environment

Link: Staging environment

Feature availability

  • Free: No
  • Pro: No
  • Business: No
  • Enterprise: Yes
    (open beta)

​​ TLS 1.3

Link: TLS 1.3

Feature availability

  • Free: Yes
  • Pro: Yes
  • Business: Yes
  • Enterprise: Yes

​​ Total TLS

Link: Total TLS

Feature availability

​​ Universal Certificates

Link: Universal Certificates

Feature availability

  • Free: Yes
  • Pro: Yes
  • Business: Yes
  • Enterprise: Yes

​​ Custom Hostnames

Link: Custom Hostnames

Feature availability

  • Free: Yes
  • Pro: Yes
  • Business: Yes
  • Enterprise: Yes

Hostnames included

Varies

  • Free: 100
  • Pro: 100
  • Business: 100
  • Enterprise: 0

Max hostnames

  • Free: 5000
  • Pro: 5000
  • Business: 5000
  • Enterprise: Unlimited, but contact sales if using over 5000.

CSR support

  • Free: No
  • Pro: No
  • Business: No
  • Enterprise: Yes

Custom analytics

  • Free: Yes
  • Pro: Yes
  • Business: Yes
  • Enterprise: Yes

Custom certificates

  • Free: No
  • Pro: No
  • Business: No
  • Enterprise: Yes

Custom origin

  • Free: No
  • Pro: No
  • Business: No
  • Enterprise: Yes

mTLS support

  • Free: No
  • Pro: No
  • Business: No
  • Enterprise: Yes

Non-SNI support for SaaS zone

  • Free: No
  • Pro: Yes
  • Business: Yes
  • Enterprise: Yes

Selectable CA

  • Free: No
  • Pro: No
  • Business: No
  • Enterprise: Yes

WAF for SaaS

  • Free: WAF rules with current zone plan
  • Pro: WAF rules with current zone plan
  • Business: WAF rules with current zone plan
  • Enterprise: Create and apply custom firewall rulesets.

Wildcard custom hostnames

  • Free: No
  • Pro: No
  • Business: No
  • Enterprise: Yes

Apex proxying/BYOIP

  • Free: No
  • Pro: No
  • Business: No
  • Enterprise: Paid add-on

Custom metadata

  • Free: No
  • Pro: No
  • Business: No
  • Enterprise: Paid add-on