--- title: Zone Certificates --- [Skip to content](#_top) [API Reference](https://developers.cloudflare.com/api/python) [Origin TLS Client Auth](https://developers.cloudflare.com/api/python/resources/origin_tls_client_auth) Copy Markdown Open in **Claude**Open in **ChatGPT**Open in **Cursor** --- **Copy Markdown****View as Markdown** # Zone Certificates ##### [List Certificates](https://developers.cloudflare.com/api/python/resources/origin_tls_client_auth/subresources/zone_certificates/methods/list) origin\_tls\_client\_auth.zone\_certificates.list(ZoneCertificateListParams\*\*kwargs) -> SyncSinglePage\[[ZoneCertificateListResponse]()] GET/zones/{zone\_id}/origin\_tls\_client\_auth ##### [Get Certificate Details](https://developers.cloudflare.com/api/python/resources/origin_tls_client_auth/subresources/zone_certificates/methods/get) origin\_tls\_client\_auth.zone\_certificates.get(strcertificate\_id, ZoneCertificateGetParams\*\*kwargs) -> [ZoneCertificateGetResponse]() GET/zones/{zone\_id}/origin\_tls\_client\_auth/{certificate\_id} ##### [Upload Certificate](https://developers.cloudflare.com/api/python/resources/origin_tls_client_auth/subresources/zone_certificates/methods/create) origin\_tls\_client\_auth.zone\_certificates.create(ZoneCertificateCreateParams\*\*kwargs) -> [ZoneCertificateCreateResponse]() POST/zones/{zone\_id}/origin\_tls\_client\_auth ##### [Delete Certificate](https://developers.cloudflare.com/api/python/resources/origin_tls_client_auth/subresources/zone_certificates/methods/delete) origin\_tls\_client\_auth.zone\_certificates.delete(strcertificate\_id, ZoneCertificateDeleteParams\*\*kwargs) -> [ZoneCertificateDeleteResponse]() DELETE/zones/{zone\_id}/origin\_tls\_client\_auth/{certificate\_id} ##### ModelsExpand Collapse
class ZoneAuthenticatedOriginPull: … id: Optional\[str] Certificate identifier tag. maxLength36 Link to this property certificate: Optional\[str] The zone’s leaf certificate. Link to this property expires\_on: Optional\[datetime] When the certificate from the authority expires. formatdate-time Link to this property issuer: Optional\[str] The certificate authority that issued the certificate. Link to this property signature: Optional\[str] The type of hash used for the certificate. Link to this property
status: Optional\[Literal\["initializing", "pending\_deployment", "pending\_deletion", 4 more]] Status of the certificate activation. One of the following: "initializing" Link to this property "pending\_deployment" Link to this property "pending\_deletion" Link to this property "active" Link to this property "deleted" Link to this property "deployment\_timed\_out" Link to this property "deletion\_timed\_out" Link to this property
Link to this property uploaded\_on: Optional\[datetime] This is the time the certificate was uploaded. formatdate-time Link to this property
[Link to this property](<#(resource)%20origin_tls_client_auth.zone_certificates%20%3E%20(model)%20zone_authenticated_origin_pull%20%3E%20(schema)>)
class ZoneCertificateListResponse: … id: Optional\[str] Certificate identifier tag. maxLength36 Link to this property certificate: Optional\[str] The zone’s leaf certificate. Link to this property enabled: Optional\[bool] Indicates whether zone-level authenticated origin pulls is enabled. Link to this property private\_key: Optional\[str] The zone’s private key. Link to this property
[Link to this property](<#(resource)%20origin_tls_client_auth.zone_certificates%20%3E%20(model)%20zone_certificate_list_response%20%3E%20(schema)>)
class ZoneCertificateGetResponse: … id: Optional\[str] Certificate identifier tag. maxLength36 Link to this property certificate: Optional\[str] The zone’s leaf certificate. Link to this property enabled: Optional\[bool] Indicates whether zone-level authenticated origin pulls is enabled. Link to this property private\_key: Optional\[str] The zone’s private key. Link to this property
[Link to this property](<#(resource)%20origin_tls_client_auth.zone_certificates%20%3E%20(model)%20zone_certificate_get_response%20%3E%20(schema)>)
class ZoneCertificateCreateResponse: … id: Optional\[str] Certificate identifier tag. maxLength36 Link to this property certificate: Optional\[str] The zone’s leaf certificate. Link to this property enabled: Optional\[bool] Indicates whether zone-level authenticated origin pulls is enabled. Link to this property private\_key: Optional\[str] The zone’s private key. Link to this property
[Link to this property](<#(resource)%20origin_tls_client_auth.zone_certificates%20%3E%20(model)%20zone_certificate_create_response%20%3E%20(schema)>)
class ZoneCertificateDeleteResponse: … id: Optional\[str] Certificate identifier tag. maxLength36 Link to this property certificate: Optional\[str] The zone’s leaf certificate. Link to this property enabled: Optional\[bool] Indicates whether zone-level authenticated origin pulls is enabled. Link to this property private\_key: Optional\[str] The zone’s private key. Link to this property
[Link to this property](<#(resource)%20origin_tls_client_auth.zone_certificates%20%3E%20(model)%20zone_certificate_delete_response%20%3E%20(schema)>)