SSL / TLS

Overview

Advanced Certificate Manager (ACM) provides enhanced SSL/TLS certificate management with customizable options for certificate management, automatic renewals, and cipher suite configurations. This is the recommended solution for managing SSL/TLS certificates on Cloudflare.

Core SSL/TLS Features

• Custom Certificates - Upload and manage your own SSL certificates
• Universal SSL - Free SSL certificates for all domains
• Minimum TLS Version - Control TLS version requirements
• Always Use HTTPS - Recommended setting for secure connections and preventing HTTP plaintext
• Total TLS - Generally recommended for enhanced security

Additional Resources

• Certificate Search - Public certificate database and monitoring
• Certificate Transparency - Open framework for monitoring certificates
• Cloudflare CT Logs - Certificate Transparency (CT) log service, built on Cloudflare Workers
• Post-Quantum Cryptography (PQC) - Future-proof encryption. Visit the site to check if your Browser supports PQC, or view adoption trends on Cloudflare Radar

Cloudflare for SaaS

If you are a SaaS provider or platform, similar to Shopify or Porsche Informatik, then we recommend using Cloudflare for SaaS , which enables you to extend Cloudflare's security and performance features to your customers through custom hostnames or vanity domains. You can review individual usage through the Analytics .

Here is a high-level migration guide to get started with Cloudflare for SaaS.