--- title: SSL --- [Skip to content](#_top) [API Reference](https://developers.cloudflare.com/api/go) Copy Markdown Open in **Claude**Open in **ChatGPT**Open in **Cursor** --- **Copy Markdown****View as Markdown** # SSL #### SSLAnalyze ##### [Analyze Certificate](https://developers.cloudflare.com/api/go/resources/ssl/subresources/analyze/methods/create) client.SSL.Analyze.New(ctx, params) (\*[AnalyzeNewResponse](), error) POST/zones/{zone\_id}/ssl/analyze #### SSLCertificate Packs ##### [List Certificate Packs](https://developers.cloudflare.com/api/go/resources/ssl/subresources/certificate_packs/methods/list) client.SSL.CertificatePacks.List(ctx, params) (\*V4PagePaginationArray\[[CertificatePackListResponse]()], error) GET/zones/{zone\_id}/ssl/certificate\_packs ##### [Get Certificate Pack](https://developers.cloudflare.com/api/go/resources/ssl/subresources/certificate_packs/methods/get) client.SSL.CertificatePacks.Get(ctx, certificatePackID, query) (\*[CertificatePackGetResponse](), error) GET/zones/{zone\_id}/ssl/certificate\_packs/{certificate\_pack\_id} ##### [Order Advanced Certificate Manager Certificate Pack](https://developers.cloudflare.com/api/go/resources/ssl/subresources/certificate_packs/methods/create) client.SSL.CertificatePacks.New(ctx, params) (\*[CertificatePackNewResponse](), error) POST/zones/{zone\_id}/ssl/certificate\_packs/order ##### [Restart Validation or Update Advanced Certificate Manager Certificate Pack](https://developers.cloudflare.com/api/go/resources/ssl/subresources/certificate_packs/methods/edit) client.SSL.CertificatePacks.Edit(ctx, certificatePackID, params) (\*[CertificatePackEditResponse](), error) PATCH/zones/{zone\_id}/ssl/certificate\_packs/{certificate\_pack\_id} ##### [Delete Advanced Certificate Manager Certificate Pack](https://developers.cloudflare.com/api/go/resources/ssl/subresources/certificate_packs/methods/delete) client.SSL.CertificatePacks.Delete(ctx, certificatePackID, body) (\*[CertificatePackDeleteResponse](), error) DELETE/zones/{zone\_id}/ssl/certificate\_packs/{certificate\_pack\_id} ##### ModelsExpand Collapse type Host string [Link to this property](<#(resource)%20ssl.certificate_packs%20%3E%20(model)%20host%20%3E%20(schema)>)
type RequestValidity float64 The number of days for which the certificate should be valid. One of the following: const RequestValidity7 RequestValidity = 7 Link to this property const RequestValidity30 RequestValidity = 30 Link to this property const RequestValidity90 RequestValidity = 90 Link to this property const RequestValidity365 RequestValidity = 365 Link to this property const RequestValidity730 RequestValidity = 730 Link to this property const RequestValidity1095 RequestValidity = 1095 Link to this property const RequestValidity5475 RequestValidity = 5475 Link to this property
[Link to this property](<#(resource)%20ssl.certificate_packs%20%3E%20(model)%20request_validity%20%3E%20(schema)>)
type Status string Status of certificate pack. One of the following: const StatusInitializing Status = "initializing" Link to this property const StatusPendingValidation Status = "pending\_validation" Link to this property const StatusDeleted Status = "deleted" Link to this property const StatusPendingIssuance Status = "pending\_issuance" Link to this property const StatusPendingDeployment Status = "pending\_deployment" Link to this property const StatusPendingDeletion Status = "pending\_deletion" Link to this property const StatusPendingExpiration Status = "pending\_expiration" Link to this property const StatusExpired Status = "expired" Link to this property const StatusActive Status = "active" Link to this property const StatusInitializingTimedOut Status = "initializing\_timed\_out" Link to this property const StatusValidationTimedOut Status = "validation\_timed\_out" Link to this property const StatusIssuanceTimedOut Status = "issuance\_timed\_out" Link to this property const StatusDeploymentTimedOut Status = "deployment\_timed\_out" Link to this property const StatusDeletionTimedOut Status = "deletion\_timed\_out" Link to this property const StatusPendingCleanup Status = "pending\_cleanup" Link to this property const StatusStagingDeployment Status = "staging\_deployment" Link to this property const StatusStagingActive Status = "staging\_active" Link to this property const StatusDeactivating Status = "deactivating" Link to this property const StatusInactive Status = "inactive" Link to this property const StatusBackupIssued Status = "backup\_issued" Link to this property const StatusHoldingDeployment Status = "holding\_deployment" Link to this property
[Link to this property](<#(resource)%20ssl.certificate_packs%20%3E%20(model)%20status%20%3E%20(schema)>)
type ValidationMethod string Validation method in use for a certificate pack order. One of the following: const ValidationMethodHTTP ValidationMethod = "http" Link to this property const ValidationMethodCNAME ValidationMethod = "cname" Link to this property const ValidationMethodTXT ValidationMethod = "txt" Link to this property
[Link to this property](<#(resource)%20ssl.certificate_packs%20%3E%20(model)%20validation_method%20%3E%20(schema)>) #### SSLCertificate PacksQuota ##### [Get Certificate Pack Quotas](https://developers.cloudflare.com/api/go/resources/ssl/subresources/certificate_packs/subresources/quota/methods/get) client.SSL.CertificatePacks.Quota.Get(ctx, query) (\*[CertificatePackQuotaGetResponse](), error) GET/zones/{zone\_id}/ssl/certificate\_packs/quota #### SSLRecommendations ##### [SSL/TLS Recommendation](https://developers.cloudflare.com/api/go/resources/ssl/subresources/recommendations/methods/get) Deprecated client.SSL.Recommendations.Get(ctx, query) (\*[RecommendationGetResponse](), error) GET/zones/{zone\_id}/ssl/recommendation #### SSLAutomatic Upgrader #### SSLAuto Origin TLS Kex ##### [Get Auto-Origin TLS KEX enrollment status for the given zone](https://developers.cloudflare.com/api/go/resources/ssl/subresources/auto_origin_tls_kex/methods/get) client.SSL.AutoOriginTLSKex.Get(ctx, query) (\*[AutoOriginTLSKexGetResponse](), error) GET/zones/{zone\_id}/settings/auto\_origin\_tls\_kex ##### [Patch Auto-Origin TLS KEX enrollment status for the given zone](https://developers.cloudflare.com/api/go/resources/ssl/subresources/auto_origin_tls_kex/methods/edit) client.SSL.AutoOriginTLSKex.Edit(ctx, params) (\*[AutoOriginTLSKexEditResponse](), error) PATCH/zones/{zone\_id}/settings/auto\_origin\_tls\_kex #### SSLUniversal #### SSLUniversalSettings ##### [Universal SSL Settings Details](https://developers.cloudflare.com/api/go/resources/ssl/subresources/universal/subresources/settings/methods/get) client.SSL.Universal.Settings.Get(ctx, query) (\*[UniversalSSLSettings](), error) GET/zones/{zone\_id}/ssl/universal/settings ##### [Edit Universal SSL Settings](https://developers.cloudflare.com/api/go/resources/ssl/subresources/universal/subresources/settings/methods/edit) client.SSL.Universal.Settings.Edit(ctx, params) (\*[UniversalSSLSettings](), error) PATCH/zones/{zone\_id}/ssl/universal/settings ##### ModelsExpand Collapse
type UniversalSSLSettings struct{…} Enabled boolOptional Disabling Universal SSL removes any currently active Universal SSL certificates for your zone from the edge and prevents any future Universal SSL certificates from being ordered. If there are no advanced certificates or custom certificates uploaded for the domain, visitors will be unable to access the domain over HTTPS. By disabling Universal SSL, you understand that the following Cloudflare settings and preferences will result in visitors being unable to visit your domain unless you have uploaded a custom certificate or purchased an advanced certificate. - HSTS - Always Use HTTPS - Opportunistic Encryption - Onion Routing - Any Page Rules redirecting traffic to HTTPS Similarly, any HTTP redirect to HTTPS at the origin while the Cloudflare proxy is enabled will result in users being unable to visit your site without a valid certificate at Cloudflare’s edge. If you do not have a valid custom or advanced certificate at Cloudflare’s edge and are unsure if any of the above Cloudflare settings are enabled, or if any HTTP redirects exist at your origin, we advise leaving Universal SSL enabled for your domain. Link to this property
[Link to this property](<#(resource)%20ssl.universal.settings%20%3E%20(model)%20universal_ssl_settings%20%3E%20(schema)>) #### SSLVerification ##### [SSL Verification Details](https://developers.cloudflare.com/api/go/resources/ssl/subresources/verification/methods/get) client.SSL.Verification.Get(ctx, params) (\*\[] [Verification](), error) GET/zones/{zone\_id}/ssl/verification ##### [Edit SSL Certificate Pack Validation Method](https://developers.cloudflare.com/api/go/resources/ssl/subresources/verification/methods/edit) client.SSL.Verification.Edit(ctx, certificatePackID, params) (\*[VerificationEditResponse](), error) PATCH/zones/{zone\_id}/ssl/verification/{certificate\_pack\_id} ##### ModelsExpand Collapse
type Verification struct{…}
CertificateStatus VerificationCertificateStatus Current status of certificate. One of the following: const VerificationCertificateStatusInitializing VerificationCertificateStatus = "initializing" Link to this property const VerificationCertificateStatusAuthorizing VerificationCertificateStatus = "authorizing" Link to this property const VerificationCertificateStatusActive VerificationCertificateStatus = "active" Link to this property const VerificationCertificateStatusExpired VerificationCertificateStatus = "expired" Link to this property const VerificationCertificateStatusIssuing VerificationCertificateStatus = "issuing" Link to this property const VerificationCertificateStatusTimingOut VerificationCertificateStatus = "timing\_out" Link to this property const VerificationCertificateStatusPendingDeployment VerificationCertificateStatus = "pending\_deployment" Link to this property
Link to this property BrandCheck boolOptional Certificate Authority is manually reviewing the order. Link to this property CERTPackUUID stringOptional Certificate Pack UUID. Link to this property
Signature VerificationSignatureOptional Certificate’s signature algorithm. One of the following: const VerificationSignatureEcdsaWithSha256 VerificationSignature = "ECDSAWithSHA256" Link to this property const VerificationSignatureSha1WithRSA VerificationSignature = "SHA1WithRSA" Link to this property const VerificationSignatureSha256WithRSA VerificationSignature = "SHA256WithRSA" Link to this property
Link to this property ValidationMethod ValidationMethodOptional Validation method in use for a certificate pack order. Link to this property
VerificationInfo VerificationVerificationInfoOptional Certificate’s required verification information.
RecordName VerificationVerificationInfoRecordNameOptional Name of CNAME record. formathostname One of the following: const VerificationVerificationInfoRecordNameRecordName VerificationVerificationInfoRecordName = "record\_name" Link to this property const VerificationVerificationInfoRecordNameHTTPURL VerificationVerificationInfoRecordName = "http\_url" Link to this property const VerificationVerificationInfoRecordNameCNAME VerificationVerificationInfoRecordName = "cname" Link to this property const VerificationVerificationInfoRecordNameTXTName VerificationVerificationInfoRecordName = "txt\_name" Link to this property
Link to this property
RecordTarget VerificationVerificationInfoRecordTargetOptional Target of CNAME record. formathostname One of the following: const VerificationVerificationInfoRecordTargetRecordValue VerificationVerificationInfoRecordTarget = "record\_value" Link to this property const VerificationVerificationInfoRecordTargetHTTPBody VerificationVerificationInfoRecordTarget = "http\_body" Link to this property const VerificationVerificationInfoRecordTargetCNAMETarget VerificationVerificationInfoRecordTarget = "cname\_target" Link to this property const VerificationVerificationInfoRecordTargetTXTValue VerificationVerificationInfoRecordTarget = "txt\_value" Link to this property
Link to this property
Link to this property VerificationStatus boolOptional Status of the required verification information, omitted if verification status is unknown. Link to this property
VerificationType VerificationVerificationTypeOptional Method of verification. One of the following: const VerificationVerificationTypeCNAME VerificationVerificationType = "cname" Link to this property const VerificationVerificationTypeMetaTag VerificationVerificationType = "meta tag" Link to this property
Link to this property
[Link to this property](<#(resource)%20ssl.verification%20%3E%20(model)%20verification%20%3E%20(schema)>)