Advanced certificates
Use advanced certificates when you want something more customizable than Universal SSL but still want the convenience of SSL certificate issuance and renewal.
To order advanced certificates, you must purchase the Advanced Certificate Manager add-on. This add-on also unlocks the features listed below.
Advanced Certificate Manager allows you to:
- Order advanced certificates that can:
- Include the zone apex and up to 50 hosts as covered hostnames.
- Cover more than one level of subdomain.
- Be issued by the certificate authority (CA) you choose.
- Use your preferred validation method.
- Have the validity period you choose.
- Automate domain control validation (DCV) for zones on a CNAME setup using delegated DCV.
- Enable Total TLS to automatically protect proxied hostnames.
- Select a custom trust store for origin authentication.
- Control cipher suites and per-hostname minimum TLS version.
| Free | Pro | Business | Enterprise | |
|---|---|---|---|---|
Availability | Paid add-on | Paid add-on | Paid add-on | Paid add-on |
Advanced certificates do not apply to Cloudflare Pages or R2 custom domains. Due to certificate prioritization, these products use Cloudflare for SaaS certificates instead.
Advanced certificates are Domain Validated (DV). If your organization needs Organization Validated (OV) or Extended Validation (EV) certificates, refer to Custom certificates.
Advanced certificates cover hostnames within a single domain. If you need a certificate that spans multiple domains (a multi-domain certificate), use Cloudflare for SaaS. For architecture guidance, refer to Leveraging Cloudflare for your SaaS applications.