- Home
- DDoS Protection Software
- Cloudflare Advanced Certificate Manager
On the recordRead 9 Oct 202615 facts
Cloudflare Advanced Certificate Manager
San Francisco, California, United States
Plans and prices
Advanced Certificate Manager
$10a month
Paid add-on · $10/mo
Read 9 Oct 2026 · cloudflare.com
On the record
- API
- Cloudflare's API supports ordering, updating, deleting, and listing Advanced Certificate Manager certificate packs.developers.cloudflare.com · read 9 Oct 2026
- Automated protection
- Total TLS can automatically issue individual certificates for proxied hostnames not covered by Universal certificates.developers.cloudflare.com · read 9 Oct 2026
- Certificate coverage
- An advanced certificate can cover up to 50 hosts, including the zone apex, and can cover multiple subdomain levels.developers.cloudflare.com · read 9 Oct 2026
- Certificate customization
- Customers can customize certificate hostnames and validity periods, choose a certificate authority and cipher suites, and bring their own certificates.cloudflare.com · read 9 Oct 2026
- Default validity
- The product page states that the default certificate validity period is 90 days.cloudflare.com · read 9 Oct 2026
- Delegated validation
- The add-on supports delegated domain control validation for zones using a CNAME setup.developers.cloudflare.com · read 9 Oct 2026
- Domain validation
- Advanced certificates are Domain Validated (DV); they do not provide Organization Validated (OV) or Extended Validation (EV) certificates.developers.cloudflare.com · read 9 Oct 2026
- Enterprise allowance
- Enterprise customers can purchase an Advanced Certificate Manager subscription that allows up to 100 edge certificates per zone.developers.cloudflare.com · read 9 Oct 2026
- Limits
- Advanced certificates apply to hostnames within one domain and do not apply to Cloudflare Pages or R2 custom domains.developers.cloudflare.com · read 9 Oct 2026
- Origin authentication
- The add-on allows customers to select a custom trust store for origin authentication.developers.cloudflare.com · read 9 Oct 2026
- Per-hostname TLS control
- Advanced Certificate Manager users can set minimum TLS versions per hostname through the API.developers.cloudflare.com · read 9 Oct 2026
- Purpose
- Cloudflare Advanced Certificate Manager automates TLS certificate issuance, management, and renewal for websites.cloudflare.com · read 9 Oct 2026
- Total TLS availability
- Total TLS requires Advanced Certificate Manager and a full DNS setup, and does not issue certificates for hostnames used with Load Balancing, Tunnel, or Spectrum.developers.cloudflare.com · read 9 Oct 2026
