--- title: Origin CA Certificates --- [Skip to content](#_top) [API Reference](https://developers.cloudflare.com/api/go) Copy Markdown Open in **Claude**Open in **ChatGPT**Open in **Cursor** --- **Copy Markdown****View as Markdown** # Origin CA Certificates ##### [List Certificates](https://developers.cloudflare.com/api/go/resources/origin_ca_certificates/methods/list) client.OriginCACertificates.List(ctx, query) (\*V4PagePaginationArray\[[OriginCACertificate]()], error) GET/certificates ##### [Get Certificate](https://developers.cloudflare.com/api/go/resources/origin_ca_certificates/methods/get) client.OriginCACertificates.Get(ctx, certificateID) (\*[OriginCACertificate](), error) GET/certificates/{certificate\_id} ##### [Create Certificate](https://developers.cloudflare.com/api/go/resources/origin_ca_certificates/methods/create) client.OriginCACertificates.New(ctx, body) (\*[OriginCACertificate](), error) POST/certificates ##### [Revoke Certificate](https://developers.cloudflare.com/api/go/resources/origin_ca_certificates/methods/delete) client.OriginCACertificates.Delete(ctx, certificateID) (\*[OriginCACertificateDeleteResponse](), error) DELETE/certificates/{certificate\_id} ##### ModelsExpand Collapse
type OriginCACertificate struct{…} Csr string The Certificate Signing Request (CSR). Must be newline-encoded. Link to this property Hostnames \[]string Array of hostnames or wildcard names bound to the certificate. Hostnames must be fully qualified domain names (FQDNs) belonging to zones on your account (e.g., example.com or sub.example.com). Wildcards are supported only as a *. prefix for a single level (e.g., *.example.com). Double wildcards (*.*.example.com) and interior wildcards (foo.*.example.com) are not allowed. The wildcard suffix must be a multi-label domain (*.example.com is valid, but *.com is not). Unicode/IDN hostnames are accepted and automatically converted to punycode. Link to this property RequestType CertificateRequestType Signature type desired on certificate (“origin-rsa” (rsa), “origin-ecc” (ecdsa), or “keyless-certificate” (for Keyless SSL servers). Link to this property RequestedValidity RequestValidity The number of days for which the certificate should be valid. Link to this property ID stringOptional The x509 serial number of the Origin CA certificate. Link to this property Certificate stringOptional The Origin CA certificate. Will be newline-encoded. Link to this property ExpiresOn stringOptional When the certificate will expire. Link to this property
[Link to this property](<#(resource)%20origin_ca_certificates%20%3E%20(model)%20origin_ca_certificate%20%3E%20(schema)>)