Advanced certificates

Use advanced certificates when you want something more customizable than Universal SSL but still want the convenience of SSL certificate issuance and renewal.

To order advanced certificates you must purchase the Advanced Certificate Manager add-on, which also includes other features.

Advanced Certificate Manager

Advanced Certificate Manager allows you to:

• Order advanced certificates that can:
  • Include the zone apex and up to 50 hosts as covered hostnames.
  • Cover more than one level of subdomain.
  • Be issued by the certificate authority (CA) you choose.
  • Use your preferred validation method.
  • Have the validity period you choose.
• Use delegated DCV to delegate the DCV process of your partial zones to Cloudflare.
• Enable Total TLS to automatically protect proxied hostnames.
• Select a custom trust store for origin authentication.
• Control cipher suites and per-hostname minimum TLS version.

Note

Enterprise customers can also purchase a subscription for Advanced Certificate Manager, which allows them to add up to 100 edge certificates per zone.

Availability

	Free	Pro	Business	Enterprise
Availability	Paid add-on	Paid add-on	Paid add-on	Paid add-on

Note

Enterprise customers can preview this product as a non-contract service, which provides full access, free of metered usage fees, limits, and certain other restrictions.

Limitations

Advanced certificates are not used with Cloudflare Pages nor R2 due to certificate prioritization. Both Pages and R2 custom domains use Cloudflare for SaaS certificates.

Advanced certificates are Domain Validated (DV). If your organization needs Organization Validated (OV) or Extended Validation (EV) certificates, refer to Custom certificates.

Related resources

• Manage advanced certificates
• API commands