--- title: Origin TLS Client Auth --- [Skip to content](#_top) [API Reference](https://developers.cloudflare.com/api/go) Copy Markdown Open in **Claude**Open in **ChatGPT**Open in **Cursor** --- **Copy Markdown****View as Markdown** # Origin TLS Client Auth ##### [List Certificates](https://developers.cloudflare.com/api/go/resources/origin_tls_client_auth/methods/list) Deprecated client.OriginTLSClientAuth.List(ctx, query) (\*SinglePage\[[OriginTLSClientAuthListResponse]()], error) GET/zones/{zone\_id}/origin\_tls\_client\_auth ##### [Get Certificate Details](https://developers.cloudflare.com/api/go/resources/origin_tls_client_auth/methods/get) Deprecated client.OriginTLSClientAuth.Get(ctx, certificateID, query) (\*[OriginTLSClientAuthGetResponse](), error) GET/zones/{zone\_id}/origin\_tls\_client\_auth/{certificate\_id} ##### [Upload Certificate](https://developers.cloudflare.com/api/go/resources/origin_tls_client_auth/methods/create) Deprecated client.OriginTLSClientAuth.New(ctx, params) (\*[OriginTLSClientAuthNewResponse](), error) POST/zones/{zone\_id}/origin\_tls\_client\_auth ##### [Delete Certificate](https://developers.cloudflare.com/api/go/resources/origin_tls_client_auth/methods/delete) Deprecated client.OriginTLSClientAuth.Delete(ctx, certificateID, body) (\*[OriginTLSClientAuthDeleteResponse](), error) DELETE/zones/{zone\_id}/origin\_tls\_client\_auth/{certificate\_id} #### Origin TLS Client AuthZone Certificates ##### [List Certificates](https://developers.cloudflare.com/api/go/resources/origin_tls_client_auth/subresources/zone_certificates/methods/list) client.OriginTLSClientAuth.ZoneCertificates.List(ctx, query) (\*SinglePage\[[ZoneCertificateListResponse]()], error) GET/zones/{zone\_id}/origin\_tls\_client\_auth ##### [Get Certificate Details](https://developers.cloudflare.com/api/go/resources/origin_tls_client_auth/subresources/zone_certificates/methods/get) client.OriginTLSClientAuth.ZoneCertificates.Get(ctx, certificateID, query) (\*[ZoneCertificateGetResponse](), error) GET/zones/{zone\_id}/origin\_tls\_client\_auth/{certificate\_id} ##### [Upload Certificate](https://developers.cloudflare.com/api/go/resources/origin_tls_client_auth/subresources/zone_certificates/methods/create) client.OriginTLSClientAuth.ZoneCertificates.New(ctx, params) (\*[ZoneCertificateNewResponse](), error) POST/zones/{zone\_id}/origin\_tls\_client\_auth ##### [Delete Certificate](https://developers.cloudflare.com/api/go/resources/origin_tls_client_auth/subresources/zone_certificates/methods/delete) client.OriginTLSClientAuth.ZoneCertificates.Delete(ctx, certificateID, body) (\*[ZoneCertificateDeleteResponse](), error) DELETE/zones/{zone\_id}/origin\_tls\_client\_auth/{certificate\_id} ##### ModelsExpand Collapse
type ZoneAuthenticatedOriginPull struct{…} ID stringOptional Certificate identifier tag. maxLength36 Link to this property Certificate stringOptional The zone’s leaf certificate. Link to this property ExpiresOn TimeOptional When the certificate from the authority expires. formatdate-time Link to this property Issuer stringOptional The certificate authority that issued the certificate. Link to this property Signature stringOptional The type of hash used for the certificate. Link to this property
Status ZoneAuthenticatedOriginPullStatusOptional Status of the certificate activation. One of the following: const ZoneAuthenticatedOriginPullStatusInitializing ZoneAuthenticatedOriginPullStatus = "initializing" Link to this property const ZoneAuthenticatedOriginPullStatusPendingDeployment ZoneAuthenticatedOriginPullStatus = "pending\_deployment" Link to this property const ZoneAuthenticatedOriginPullStatusPendingDeletion ZoneAuthenticatedOriginPullStatus = "pending\_deletion" Link to this property const ZoneAuthenticatedOriginPullStatusActive ZoneAuthenticatedOriginPullStatus = "active" Link to this property const ZoneAuthenticatedOriginPullStatusDeleted ZoneAuthenticatedOriginPullStatus = "deleted" Link to this property const ZoneAuthenticatedOriginPullStatusDeploymentTimedOut ZoneAuthenticatedOriginPullStatus = "deployment\_timed\_out" Link to this property const ZoneAuthenticatedOriginPullStatusDeletionTimedOut ZoneAuthenticatedOriginPullStatus = "deletion\_timed\_out" Link to this property
Link to this property UploadedOn TimeOptional This is the time the certificate was uploaded. formatdate-time Link to this property
[Link to this property](<#(resource)%20origin_tls_client_auth.zone_certificates%20%3E%20(model)%20zone_authenticated_origin_pull%20%3E%20(schema)>) #### Origin TLS Client AuthHostnames ##### [Get the Hostname Status for Client Authentication](https://developers.cloudflare.com/api/go/resources/origin_tls_client_auth/subresources/hostnames/methods/get) client.OriginTLSClientAuth.Hostnames.Get(ctx, hostname, query) (\*[AuthenticatedOriginPull](), error) GET/zones/{zone\_id}/origin\_tls\_client\_auth/hostnames/{hostname} ##### [Enable or Disable a Hostname for Client Authentication](https://developers.cloudflare.com/api/go/resources/origin_tls_client_auth/subresources/hostnames/methods/update) client.OriginTLSClientAuth.Hostnames.Update(ctx, params) (\*SinglePage\[[HostnameUpdateResponse]()], error) PUT/zones/{zone\_id}/origin\_tls\_client\_auth/hostnames ##### ModelsExpand Collapse
type AuthenticatedOriginPull struct{…} CERTID stringOptional Certificate identifier tag. maxLength36 Link to this property
CERTStatus AuthenticatedOriginPullCERTStatusOptional Status of the certificate or the association. One of the following: const AuthenticatedOriginPullCERTStatusInitializing AuthenticatedOriginPullCERTStatus = "initializing" Link to this property const AuthenticatedOriginPullCERTStatusPendingDeployment AuthenticatedOriginPullCERTStatus = "pending\_deployment" Link to this property const AuthenticatedOriginPullCERTStatusPendingDeletion AuthenticatedOriginPullCERTStatus = "pending\_deletion" Link to this property const AuthenticatedOriginPullCERTStatusActive AuthenticatedOriginPullCERTStatus = "active" Link to this property const AuthenticatedOriginPullCERTStatusDeleted AuthenticatedOriginPullCERTStatus = "deleted" Link to this property const AuthenticatedOriginPullCERTStatusDeploymentTimedOut AuthenticatedOriginPullCERTStatus = "deployment\_timed\_out" Link to this property const AuthenticatedOriginPullCERTStatusDeletionTimedOut AuthenticatedOriginPullCERTStatus = "deletion\_timed\_out" Link to this property
Link to this property CERTUpdatedAt TimeOptional The time when the certificate was updated. formatdate-time Link to this property CERTUploadedOn TimeOptional The time when the certificate was uploaded. formatdate-time Link to this property Certificate stringOptional The hostname certificate. Link to this property CreatedAt TimeOptional The time when the certificate was created. formatdate-time Link to this property Enabled boolOptional Indicates whether hostname-level authenticated origin pulls is enabled. A null value voids the association. Link to this property ExpiresOn TimeOptional The date when the certificate expires. formatdate-time Link to this property Hostname stringOptional The hostname on the origin for which the client certificate uploaded will be used. maxLength255 Link to this property Issuer stringOptional The certificate authority that issued the certificate. Link to this property SerialNumber stringOptional The serial number on the uploaded certificate. Link to this property Signature stringOptional The type of hash used for the certificate. Link to this property
Status AuthenticatedOriginPullStatusOptional Status of the certificate or the association. One of the following: const AuthenticatedOriginPullStatusInitializing AuthenticatedOriginPullStatus = "initializing" Link to this property const AuthenticatedOriginPullStatusPendingDeployment AuthenticatedOriginPullStatus = "pending\_deployment" Link to this property const AuthenticatedOriginPullStatusPendingDeletion AuthenticatedOriginPullStatus = "pending\_deletion" Link to this property const AuthenticatedOriginPullStatusActive AuthenticatedOriginPullStatus = "active" Link to this property const AuthenticatedOriginPullStatusDeleted AuthenticatedOriginPullStatus = "deleted" Link to this property const AuthenticatedOriginPullStatusDeploymentTimedOut AuthenticatedOriginPullStatus = "deployment\_timed\_out" Link to this property const AuthenticatedOriginPullStatusDeletionTimedOut AuthenticatedOriginPullStatus = "deletion\_timed\_out" Link to this property
Link to this property UpdatedAt TimeOptional The time when the certificate was updated. formatdate-time Link to this property
[Link to this property](<#(resource)%20origin_tls_client_auth.hostnames%20%3E%20(model)%20authenticated_origin_pull%20%3E%20(schema)>) #### Origin TLS Client AuthHostname Certificates ##### [List Certificates](https://developers.cloudflare.com/api/go/resources/origin_tls_client_auth/subresources/hostname_certificates/methods/list) client.OriginTLSClientAuth.HostnameCertificates.List(ctx, query) (\*SinglePage\[[HostnameCertificateListResponse]()], error) GET/zones/{zone\_id}/origin\_tls\_client\_auth/hostnames/certificates ##### [Get the Hostname Client Certificate](https://developers.cloudflare.com/api/go/resources/origin_tls_client_auth/subresources/hostname_certificates/methods/get) client.OriginTLSClientAuth.HostnameCertificates.Get(ctx, certificateID, query) (\*[HostnameCertificateGetResponse](), error) GET/zones/{zone\_id}/origin\_tls\_client\_auth/hostnames/certificates/{certificate\_id} ##### [Upload a Hostname Client Certificate](https://developers.cloudflare.com/api/go/resources/origin_tls_client_auth/subresources/hostname_certificates/methods/create) client.OriginTLSClientAuth.HostnameCertificates.New(ctx, params) (\*[HostnameCertificateNewResponse](), error) POST/zones/{zone\_id}/origin\_tls\_client\_auth/hostnames/certificates ##### [Delete Hostname Client Certificate](https://developers.cloudflare.com/api/go/resources/origin_tls_client_auth/subresources/hostname_certificates/methods/delete) client.OriginTLSClientAuth.HostnameCertificates.Delete(ctx, certificateID, body) (\*[HostnameCertificateDeleteResponse](), error) DELETE/zones/{zone\_id}/origin\_tls\_client\_auth/hostnames/certificates/{certificate\_id} ##### ModelsExpand Collapse
type Certificate struct{…} ID stringOptional Certificate identifier tag. maxLength36 Link to this property Certificate stringOptional The hostname certificate. Link to this property ExpiresOn TimeOptional The date when the certificate expires. formatdate-time Link to this property Issuer stringOptional The certificate authority that issued the certificate. Link to this property SerialNumber stringOptional The serial number on the uploaded certificate. Link to this property Signature stringOptional The type of hash used for the certificate. Link to this property
Status CertificateStatusOptional Status of the certificate or the association. One of the following: const CertificateStatusInitializing CertificateStatus = "initializing" Link to this property const CertificateStatusPendingDeployment CertificateStatus = "pending\_deployment" Link to this property const CertificateStatusPendingDeletion CertificateStatus = "pending\_deletion" Link to this property const CertificateStatusActive CertificateStatus = "active" Link to this property const CertificateStatusDeleted CertificateStatus = "deleted" Link to this property const CertificateStatusDeploymentTimedOut CertificateStatus = "deployment\_timed\_out" Link to this property const CertificateStatusDeletionTimedOut CertificateStatus = "deletion\_timed\_out" Link to this property
Link to this property UploadedOn TimeOptional The time when the certificate was uploaded. formatdate-time Link to this property
[Link to this property](<#(resource)%20origin_tls_client_auth.hostname_certificates%20%3E%20(model)%20certificate%20%3E%20(schema)>) #### Origin TLS Client AuthSettings ##### [Get Enablement Setting for Zone](https://developers.cloudflare.com/api/go/resources/origin_tls_client_auth/subresources/settings/methods/get) client.OriginTLSClientAuth.Settings.Get(ctx, query) (\*[SettingGetResponse](), error) GET/zones/{zone\_id}/origin\_tls\_client\_auth/settings ##### [Set Enablement for Zone](https://developers.cloudflare.com/api/go/resources/origin_tls_client_auth/subresources/settings/methods/update) client.OriginTLSClientAuth.Settings.Update(ctx, params) (\*[SettingUpdateResponse](), error) PUT/zones/{zone\_id}/origin\_tls\_client\_auth/settings