Cloudflare Advanced Certificate Manager

Spec sheet

Purpose

Cloudflare Advanced Certificate Manager automates TLS certificate issuance, management, and renewal for websites.Read 9 Oct 2026 · cloudflare.com

API

Cloudflare's API supports ordering, updating, deleting, and listing Advanced Certificate Manager certificate packs.Read 9 Oct 2026 · developers.cloudflare.com

Headquarters

San Francisco, California, United StatesRead 28 Sep 2026 · cloudflare.com

Founded

2009Read 28 Sep 2026 · cloudflare.com

Automated protection

Total TLS can automatically issue individual certificates for proxied hostnames not covered by Universal certificates.Read 9 Oct 2026 · developers.cloudflare.com

Certificate coverage

An advanced certificate can cover up to 50 hosts, including the zone apex, and can cover multiple subdomain levels.Read 9 Oct 2026 · developers.cloudflare.com

Certificate customization

Customers can customize certificate hostnames and validity periods, choose a certificate authority and cipher suites, and bring their own certificates.Read 9 Oct 2026 · cloudflare.com

Default validity

The product page states that the default certificate validity period is 90 days.Read 9 Oct 2026 · cloudflare.com

Delegated validation

The add-on supports delegated domain control validation for zones using a CNAME setup.Read 9 Oct 2026 · developers.cloudflare.com

Domain validation

Advanced certificates are Domain Validated (DV); they do not provide Organization Validated (OV) or Extended Validation (EV) certificates.Read 9 Oct 2026 · developers.cloudflare.com

Enterprise allowance

Enterprise customers can purchase an Advanced Certificate Manager subscription that allows up to 100 edge certificates per zone.Read 9 Oct 2026 · developers.cloudflare.com

Limits

Advanced certificates apply to hostnames within one domain and do not apply to Cloudflare Pages or R2 custom domains.Read 9 Oct 2026 · developers.cloudflare.com

Origin authentication

The add-on allows customers to select a custom trust store for origin authentication.Read 9 Oct 2026 · developers.cloudflare.com

Per-hostname TLS control

Advanced Certificate Manager users can set minimum TLS versions per hostname through the API.Read 9 Oct 2026 · developers.cloudflare.com

Total TLS availability

Total TLS requires Advanced Certificate Manager and a full DNS setup, and does not issue certificates for hostnames used with Load Balancing, Tunnel, or Spectrum.Read 9 Oct 2026 · developers.cloudflare.com

Plans and prices

Every Cloudflare Advanced Certificate Manager plan and price →

Where Specifiction places it

• Web Security Software#6 of 297.8
• Website Security Software#6 of 277.8
• DDoS Protection Software#9 of 377.8
• LLM Security Tools#8 of 317.8
• Reverse Proxy Software#15 of 337.9