--- title: Upload Custom Origin Trust Store --- [Skip to content](#_top) [API Reference](https://developers.cloudflare.com/api/go) [ACM](https://developers.cloudflare.com/api/go/resources/acm) [Custom Trust Store](https://developers.cloudflare.com/api/go/resources/acm/subresources/custom_trust_store) Copy Markdown Open in **Claude**Open in **ChatGPT**Open in **Cursor** --- **Copy Markdown****View as Markdown** # Upload Custom Origin Trust Store client.ACM.CustomTrustStore.New(ctx, params) (\*[CustomTrustStore](), error) POST/zones/{zone\_id}/acm/custom\_trust\_store Upload a root CA certificate to the Custom Origin Trust Store for a Zone. Only root CA certificates are accepted. ##### Security
API Token The preferred authorization scheme for interacting with the Cloudflare API. Create a token. **Example:**Authorization: Bearer Sn3lZJTBX6kkg7OdcBUAxOO963GEIyGQqnFTOFYY
API Email + API Key The previous authorization scheme for interacting with the Cloudflare API, used in conjunction with a Global API key. **Example:**X-Auth-Email: user@example.com The previous authorization scheme for interacting with the Cloudflare API. When possible, use API tokens instead of Global API keys. **Example:**X-Auth-Key: 144c9defac04969c7bfad8efaa8ea194
##### Accepted Permissions (at least one required) `SSL and Certificates Write` ##### ParametersExpand Collapse
params CustomTrustStoreNewParams ZoneID param.Field\[string] Path param: Identifier. maxLength32 Link to this property Certificate param.Field\[string] Body param: The root CA certificate in PEM format. Only root CA certificates are accepted; intermediate and leaf certificates are not supported. Link to this property
[Link to this property](<#(resource)%20acm.custom_trust_store%20%3E%20(method)%20create%20%3E%20(params)%20default>) ##### ReturnsExpand Collapse
type CustomTrustStore struct{…} ID string Certificate identifier tag. maxLength36 Link to this property Certificate string The root CA certificate in PEM format. Only root CA certificates are accepted; intermediate and leaf certificates are not supported. Link to this property ExpiresOn Time When the certificate expires. formatdate-time Link to this property Issuer string The certificate authority that issued the certificate. Link to this property Signature string The type of hash used for the certificate. Link to this property
Status CustomTrustStoreStatus Status of the zone’s custom SSL. One of the following: const CustomTrustStoreStatusInitializing CustomTrustStoreStatus = "initializing" Link to this property const CustomTrustStoreStatusPendingDeployment CustomTrustStoreStatus = "pending\_deployment" Link to this property const CustomTrustStoreStatusActive CustomTrustStoreStatus = "active" Link to this property const CustomTrustStoreStatusPendingDeletion CustomTrustStoreStatus = "pending\_deletion" Link to this property const CustomTrustStoreStatusDeleted CustomTrustStoreStatus = "deleted" Link to this property const CustomTrustStoreStatusExpired CustomTrustStoreStatus = "expired" Link to this property
Link to this property UpdatedAt Time When the certificate was last modified. formatdate-time Link to this property UploadedOn Time When the certificate was uploaded to Cloudflare. formatdate-time Link to this property
[Link to this property](<#(resource)%20acm.custom_trust_store%20%3E%20(model)%20custom-trust-store%20%3E%20(schema)>) ### Upload Custom Origin Trust Store Go HTTPTypeScriptPythonGoTerraform ``` package main import ( "context" "fmt" "github.com/cloudflare/cloudflare-go" "github.com/cloudflare/cloudflare-go/acm" "github.com/cloudflare/cloudflare-go/option" ) func main() { client := cloudflare.NewClient( option.WithAPIToken("Sn3lZJTBX6kkg7OdcBUAxOO963GEIyGQqnFTOFYY"), ) customTrustStore, err := client.ACM.CustomTrustStore.New(context.TODO(), acm.CustomTrustStoreNewParams{ ZoneID: cloudflare.F("023e105f4ecef8ad9ca31a8372d0c353"), Certificate: cloudflare.F("-----BEGIN CERTIFICATE-----\nMIIDdjCCAl6gAwIBAgIJAPnMg0Fs+/B0MA0GCSqGSIb3DQEBCwUAMFsx...\n-----END CERTIFICATE-----\n"), }) if err != nil { panic(err.Error()) } fmt.Printf("%+v\n", customTrustStore.ID) } ``` 200 example ``` { "errors": [ { "code": 1000, "message": "message", "documentation_url": "documentation_url", "source": { "pointer": "pointer" } } ], "messages": [ { "code": 1000, "message": "message", "documentation_url": "documentation_url", "source": { "pointer": "pointer" } } ], "success": true, "result": { "id": "2458ce5a-0c35-4c7f-82c7-8e9487d3ff60", "certificate": "-----BEGIN CERTIFICATE-----\nMIIDdjCCAl6gAwIBAgIJAPnMg0Fs+/B0MA0GCSqGSIb3DQEBCwUAMFsx...\n-----END CERTIFICATE-----\n", "expires_on": "2122-10-29T16:59:47Z", "issuer": "GlobalSign", "signature": "SHA256WithRSA", "status": "active", "updated_at": "2014-01-01T05:20:00Z", "uploaded_on": "2014-01-01T05:20:00Z" } } ``` ##### Returns Examples 200 example ``` { "errors": [ { "code": 1000, "message": "message", "documentation_url": "documentation_url", "source": { "pointer": "pointer" } } ], "messages": [ { "code": 1000, "message": "message", "documentation_url": "documentation_url", "source": { "pointer": "pointer" } } ], "success": true, "result": { "id": "2458ce5a-0c35-4c7f-82c7-8e9487d3ff60", "certificate": "-----BEGIN CERTIFICATE-----\nMIIDdjCCAl6gAwIBAgIJAPnMg0Fs+/B0MA0GCSqGSIb3DQEBCwUAMFsx...\n-----END CERTIFICATE-----\n", "expires_on": "2122-10-29T16:59:47Z", "issuer": "GlobalSign", "signature": "SHA256WithRSA", "status": "active", "updated_at": "2014-01-01T05:20:00Z", "uploaded_on": "2014-01-01T05:20:00Z" } } ```