---
title: Client Certificates
---

[Skip to content](#%5Ftop) 

[API Reference](https://developers.cloudflare.com/api/typescript)

Copy Markdown

Open in **Claude**

Open in **ChatGPT**

Open in **Cursor**

---

**Copy Markdown**

**View as Markdown**

# Client Certificates

##### [List Client Certificates](https://developers.cloudflare.com/api/typescript/resources/client%5Fcertificates/methods/list)

client.clientCertificates.list(ClientCertificateListParams { zone\_id, limit, offset, 3 more } params, RequestOptionsoptions?): V4PagePaginationArray<[ClientCertificate](https://developers.cloudflare.com/api/typescript/resources/client%5Fcertificates#%28resource%29%20client%5Fcertificates%20%3E%20%28model%29%20client%5Fcertificate%20%3E%20%28schema%29) { id, certificate, certificate\_authority, 15 more } \>

GET/zones/{zone\_id}/client\_certificates

##### [Client Certificate Details](https://developers.cloudflare.com/api/typescript/resources/client%5Fcertificates/methods/get)

client.clientCertificates.get(stringclientCertificateID, ClientCertificateGetParams { zone\_id } params, RequestOptionsoptions?): [ClientCertificate](https://developers.cloudflare.com/api/typescript/resources/client%5Fcertificates#%28resource%29%20client%5Fcertificates%20%3E%20%28model%29%20client%5Fcertificate%20%3E%20%28schema%29) { id, certificate, certificate\_authority, 15 more } 

GET/zones/{zone\_id}/client\_certificates/{client\_certificate\_id}

##### [Create Client Certificate](https://developers.cloudflare.com/api/typescript/resources/client%5Fcertificates/methods/create)

client.clientCertificates.create(ClientCertificateCreateParams { zone\_id, csr, validity\_days } params, RequestOptionsoptions?): [ClientCertificate](https://developers.cloudflare.com/api/typescript/resources/client%5Fcertificates#%28resource%29%20client%5Fcertificates%20%3E%20%28model%29%20client%5Fcertificate%20%3E%20%28schema%29) { id, certificate, certificate\_authority, 15 more } 

POST/zones/{zone\_id}/client\_certificates

##### [Reactivate Client Certificate](https://developers.cloudflare.com/api/typescript/resources/client%5Fcertificates/methods/edit)

client.clientCertificates.edit(stringclientCertificateID, ClientCertificateEditParams { zone\_id, reactivate } params, RequestOptionsoptions?): [ClientCertificate](https://developers.cloudflare.com/api/typescript/resources/client%5Fcertificates#%28resource%29%20client%5Fcertificates%20%3E%20%28model%29%20client%5Fcertificate%20%3E%20%28schema%29) { id, certificate, certificate\_authority, 15 more } 

PATCH/zones/{zone\_id}/client\_certificates/{client\_certificate\_id}

##### [Revoke Client Certificate](https://developers.cloudflare.com/api/typescript/resources/client%5Fcertificates/methods/delete)

client.clientCertificates.delete(stringclientCertificateID, ClientCertificateDeleteParams { zone\_id } params, RequestOptionsoptions?): [ClientCertificate](https://developers.cloudflare.com/api/typescript/resources/client%5Fcertificates#%28resource%29%20client%5Fcertificates%20%3E%20%28model%29%20client%5Fcertificate%20%3E%20%28schema%29) { id, certificate, certificate\_authority, 15 more } 

DELETE/zones/{zone\_id}/client\_certificates/{client\_certificate\_id}

##### ModelsExpand Collapse 

ClientCertificate { id, certificate, certificate\_authority, 15 more } 

id?: string

Identifier.

maxLength32

certificate?: string

The Client Certificate PEM.

certificate\_authority?: CertificateAuthority { id, name } 

Certificate Authority used to issue the Client Certificate.

id?: string

name?: string

common\_name?: string

Common Name of the Client Certificate.

country?: string

Country, provided by the CSR.

csr?: string

The Certificate Signing Request (CSR). Must be newline-encoded.

expires\_on?: string

Date that the Client Certificate expires.

fingerprint\_sha256?: string

Unique identifier of the Client Certificate.

issued\_on?: string

Date that the Client Certificate was issued by the Certificate Authority.

location?: string

Location, provided by the CSR.

organization?: string

Organization, provided by the CSR.

organizational\_unit?: string

Organizational Unit, provided by the CSR.

serial\_number?: string

The serial number on the created Client Certificate.

signature?: string

The type of hash used for the Client Certificate..

ski?: string

Subject Key Identifier.

state?: string

State, provided by the CSR.

status?: "active" | "pending\_reactivation" | "pending\_revocation" | "revoked"

Client Certificates may be active or revoked, and the pending\_reactivation or pending\_revocation represent in-progress asynchronous transitions.

One of the following:

"active"

"pending\_reactivation"

"pending\_revocation"

"revoked"

validity\_days?: number

The number of days the Client Certificate will be valid after the issued\_on date.