--- title: Order Advanced Certificate Manager Certificate Pack --- [Skip to content](#_top) [API Reference](https://developers.cloudflare.com/api/python) [SSL](https://developers.cloudflare.com/api/python/resources/ssl) [Certificate Packs](https://developers.cloudflare.com/api/python/resources/ssl/subresources/certificate_packs) Copy Markdown Open in **Claude**Open in **ChatGPT**Open in **Cursor** --- **Copy Markdown****View as Markdown** # Order Advanced Certificate Manager Certificate Pack ssl.certificate\_packs.create(CertificatePackCreateParams\*\*kwargs) -> [CertificatePackCreateResponse]() POST/zones/{zone\_id}/ssl/certificate\_packs/order For a given zone, order an advanced certificate pack. ##### Security
API Token The preferred authorization scheme for interacting with the Cloudflare API. Create a token. **Example:**Authorization: Bearer Sn3lZJTBX6kkg7OdcBUAxOO963GEIyGQqnFTOFYY
API Email + API Key The previous authorization scheme for interacting with the Cloudflare API, used in conjunction with a Global API key. **Example:**X-Auth-Email: user@example.com The previous authorization scheme for interacting with the Cloudflare API. When possible, use API tokens instead of Global API keys. **Example:**X-Auth-Key: 144c9defac04969c7bfad8efaa8ea194
##### Accepted Permissions (at least one required) `SSL and Certificates Write` ##### ParametersExpand Collapse zone\_id: str Identifier. maxLength32 [Link to this property](<#(resource)%20ssl.certificate_packs%20%3E%20(method)%20create%20%3E%20(params)%20default%20%3E%20(param)%20zone_id%20%3E%20(schema)>)
certificate\_authority: Literal\["google", "lets\_encrypt", "ssl\_com"] Certificate Authority selected for the order. For information on any certificate authority specific details or restrictions see this page for more details. One of the following: "google" Link to this property "lets\_encrypt" Link to this property "ssl\_com" Link to this property
[Link to this property](<#(resource)%20ssl.certificate_packs%20%3E%20(method)%20create%20%3E%20(params)%20default%20%3E%20(param)%20certificate_authority%20%3E%20(schema)>) hosts: Sequence\[[Host]()] Comma separated list of valid host names for the certificate packs. Must contain the zone apex, may not contain more than 50 hosts, and may not be empty. [Link to this property](<#(resource)%20ssl.certificate_packs%20%3E%20(method)%20create%20%3E%20(params)%20default%20%3E%20(param)%20hosts%20%3E%20(schema)>) type: Literal\["advanced"] Type of certificate pack. [Link to this property](<#(resource)%20ssl.certificate_packs%20%3E%20(method)%20create%20%3E%20(params)%20default%20%3E%20(param)%20type%20%3E%20(schema)>)
validation\_method: Literal\["txt", "http", "email"] Validation Method selected for the order. One of the following: "txt" Link to this property "http" Link to this property "email" Link to this property
[Link to this property](<#(resource)%20ssl.certificate_packs%20%3E%20(method)%20create%20%3E%20(params)%20default%20%3E%20(param)%20validation_method%20%3E%20(schema)>)
validity\_days: Literal\[14, 30, 90, 365] Validity Days selected for the order. One of the following: 14 Link to this property 30 Link to this property 90 Link to this property 365 Link to this property
[Link to this property](<#(resource)%20ssl.certificate_packs%20%3E%20(method)%20create%20%3E%20(params)%20default%20%3E%20(param)%20validity_days%20%3E%20(schema)>) cloudflare\_branding: Optional\[[bool]()] Whether or not to add Cloudflare Branding for the order. This will add a subdomain of sni.cloudflaressl.com as the Common Name if set to true. [Link to this property](<#(resource)%20ssl.certificate_packs%20%3E%20(method)%20create%20%3E%20(params)%20default%20%3E%20(param)%20cloudflare_branding%20%3E%20(schema)>) ##### ReturnsExpand Collapse
class CertificatePackCreateResponse: … A certificate pack with all its properties. id: str The unique identifier for a certificate\_pack. Link to this property
certificates: List\[Certificate] Array of certificates in this pack. id: str Certificate identifier. Link to this property hosts: List\[str] Hostnames covered by this certificate. Link to this property status: str Certificate status. Link to this property bundle\_method: Optional\[str] Certificate bundle method. Link to this property expires\_on: Optional\[datetime] When the certificate from the authority expires. formatdate-time Link to this property
geo\_restrictions: Optional\[CertificateGeoRestrictions] Specify the region where your private key can be held locally.
label: Optional\[Literal\["us", "eu", "highest\_security"]] One of the following: "us" Link to this property "eu" Link to this property "highest\_security" Link to this property
Link to this property
Link to this property issuer: Optional\[str] The certificate authority that issued the certificate. Link to this property modified\_on: Optional\[datetime] When the certificate was last modified. formatdate-time Link to this property priority: Optional\[float] The order/priority in which the certificate will be used. Link to this property signature: Optional\[str] The type of hash used for the certificate. Link to this property uploaded\_on: Optional\[datetime] When the certificate was uploaded to Cloudflare. formatdate-time Link to this property zone\_id: Optional\[str] Identifier. maxLength32 Link to this property
Link to this property hosts: List\[Host] Comma separated list of valid host names for the certificate packs. Must contain the zone apex, may not contain more than 50 hosts, and may not be empty. Link to this property
status: Status Status of certificate pack. One of the following: "initializing" Link to this property "pending\_validation" Link to this property "deleted" Link to this property "pending\_issuance" Link to this property "pending\_deployment" Link to this property "pending\_deletion" Link to this property "pending\_expiration" Link to this property "expired" Link to this property "active" Link to this property "initializing\_timed\_out" Link to this property "validation\_timed\_out" Link to this property "issuance\_timed\_out" Link to this property "deployment\_timed\_out" Link to this property "deletion\_timed\_out" Link to this property "pending\_cleanup" Link to this property "staging\_deployment" Link to this property "staging\_active" Link to this property "deactivating" Link to this property "inactive" Link to this property "backup\_issued" Link to this property "holding\_deployment" Link to this property
Link to this property
type: Literal\["mh\_custom", "managed\_hostname", "sni\_custom", 5 more] Type of certificate pack. One of the following: "mh\_custom" Link to this property "managed\_hostname" Link to this property "sni\_custom" Link to this property "universal" Link to this property "advanced" Link to this property "total\_tls" Link to this property "keyless" Link to this property "legacy\_custom" Link to this property
Link to this property
certificate\_authority: Optional\[Literal\["google", "lets\_encrypt", "ssl\_com"]] Certificate Authority selected for the order. For information on any certificate authority specific details or restrictions see this page for more details. One of the following: "google" Link to this property "lets\_encrypt" Link to this property "ssl\_com" Link to this property
Link to this property cloudflare\_branding: Optional\[bool] Whether or not to add Cloudflare Branding for the order. This will add a subdomain of sni.cloudflaressl.com as the Common Name if set to true. Link to this property
dcv\_delegation\_records: Optional\[List\[DCVDelegationRecord]] DCV Delegation records for domain validation. cname: Optional\[str] The CNAME record hostname for DCV delegation. Link to this property cname\_target: Optional\[str] The CNAME record target value for DCV delegation. Link to this property emails: Optional\[List\[str]] The set of email addresses that the certificate authority (CA) will use to complete domain validation. Link to this property http\_body: Optional\[str] The content that the certificate authority (CA) will expect to find at the http\_url during the domain validation. Link to this property http\_url: Optional\[str] The url that will be checked during domain validation. Link to this property status: Optional\[str] Status of the validation record. Link to this property txt\_name: Optional\[str] The hostname that the certificate authority (CA) will check for a TXT record during domain validation . Link to this property txt\_value: Optional\[str] The TXT record that the certificate authority (CA) will check during domain validation. Link to this property
Link to this property primary\_certificate: Optional\[str] Identifier of the primary certificate in a pack. Link to this property
validation\_errors: Optional\[List\[ValidationError]] Domain validation errors that have been received by the certificate authority (CA). message: Optional\[str] A domain validation error. Link to this property
Link to this property
validation\_method: Optional\[Literal\["txt", "http", "email"]] Validation Method selected for the order. One of the following: "txt" Link to this property "http" Link to this property "email" Link to this property
Link to this property
validation\_records: Optional\[List\[ValidationRecord]] Certificates’ validation records. cname: Optional\[str] The CNAME record hostname for DCV delegation. Link to this property cname\_target: Optional\[str] The CNAME record target value for DCV delegation. Link to this property emails: Optional\[List\[str]] The set of email addresses that the certificate authority (CA) will use to complete domain validation. Link to this property http\_body: Optional\[str] The content that the certificate authority (CA) will expect to find at the http\_url during the domain validation. Link to this property http\_url: Optional\[str] The url that will be checked during domain validation. Link to this property status: Optional\[str] Status of the validation record. Link to this property txt\_name: Optional\[str] The hostname that the certificate authority (CA) will check for a TXT record during domain validation . Link to this property txt\_value: Optional\[str] The TXT record that the certificate authority (CA) will check during domain validation. Link to this property
Link to this property
validity\_days: Optional\[Literal\[14, 30, 90, 365]] Validity Days selected for the order. One of the following: 14 Link to this property 30 Link to this property 90 Link to this property 365 Link to this property
Link to this property
[Link to this property](<#(resource)%20ssl.certificate_packs%20%3E%20(model)%20certificate_pack_create_response%20%3E%20(schema)>) ### Order Advanced Certificate Manager Certificate Pack Python HTTPTypeScriptPythonGoTerraform ``` import os from cloudflare import Cloudflare client = Cloudflare( api_token=os.environ.get("CLOUDFLARE_API_TOKEN"), # This is the default and can be omitted ) certificate_pack = client.ssl.certificate_packs.create( zone_id="023e105f4ecef8ad9ca31a8372d0c353", certificate_authority="lets_encrypt", hosts=["example.com", "*.example.com", "www.example.com"], type="advanced", validation_method="txt", validity_days=14, ) print(certificate_pack.id) ``` 200 example ``` { "errors": [ { "code": 1000, "message": "message", "documentation_url": "documentation_url", "source": { "pointer": "pointer" } } ], "messages": [ { "code": 1000, "message": "message", "documentation_url": "documentation_url", "source": { "pointer": "pointer" } } ], "success": true, "result": { "id": "3822ff90-ea29-44df-9e55-21300bb9419b", "certificates": [ { "id": "7e7b8deba8538af625850b7b2530034c", "hosts": [ "example.com", "*.example.com" ], "status": "active", "bundle_method": "ubiquitous", "expires_on": "2024-01-01T00:00:00Z", "geo_restrictions": { "label": "us" }, "issuer": "Let's Encrypt", "modified_on": "2014-01-01T05:20:00Z", "priority": 0, "signature": "ECDSAWithSHA256", "uploaded_on": "2014-01-01T05:20:00Z", "zone_id": "023e105f4ecef8ad9ca31a8372d0c353" } ], "hosts": [ "example.com", "*.example.com", "www.example.com" ], "status": "initializing", "type": "universal", "certificate_authority": "lets_encrypt", "cloudflare_branding": false, "dcv_delegation_records": [ { "cname": "_acme-challenge.example.com", "cname_target": "dcv.cloudflare.com", "emails": [ "administrator@example.com", "webmaster@example.com" ], "http_body": "ca3-574923932a82475cb8592200f1a2a23d", "http_url": "http://app.example.com/.well-known/pki-validation/ca3-da12a1c25e7b48cf80408c6c1763b8a2.txt", "status": "pending", "txt_name": "_acme-challenge.app.example.com", "txt_value": "810b7d5f01154524b961ba0cd578acc2" } ], "primary_certificate": "7e7b8deba8538af625850b7b2530034c", "validation_errors": [ { "message": "SERVFAIL looking up CAA for app.example.com" } ], "validation_method": "txt", "validation_records": [ { "cname": "_acme-challenge.example.com", "cname_target": "dcv.cloudflare.com", "emails": [ "administrator@example.com", "webmaster@example.com" ], "http_body": "ca3-574923932a82475cb8592200f1a2a23d", "http_url": "http://app.example.com/.well-known/pki-validation/ca3-da12a1c25e7b48cf80408c6c1763b8a2.txt", "status": "pending", "txt_name": "_acme-challenge.app.example.com", "txt_value": "810b7d5f01154524b961ba0cd578acc2" } ], "validity_days": 14 } } ``` ##### Returns Examples 200 example ``` { "errors": [ { "code": 1000, "message": "message", "documentation_url": "documentation_url", "source": { "pointer": "pointer" } } ], "messages": [ { "code": 1000, "message": "message", "documentation_url": "documentation_url", "source": { "pointer": "pointer" } } ], "success": true, "result": { "id": "3822ff90-ea29-44df-9e55-21300bb9419b", "certificates": [ { "id": "7e7b8deba8538af625850b7b2530034c", "hosts": [ "example.com", "*.example.com" ], "status": "active", "bundle_method": "ubiquitous", "expires_on": "2024-01-01T00:00:00Z", "geo_restrictions": { "label": "us" }, "issuer": "Let's Encrypt", "modified_on": "2014-01-01T05:20:00Z", "priority": 0, "signature": "ECDSAWithSHA256", "uploaded_on": "2014-01-01T05:20:00Z", "zone_id": "023e105f4ecef8ad9ca31a8372d0c353" } ], "hosts": [ "example.com", "*.example.com", "www.example.com" ], "status": "initializing", "type": "universal", "certificate_authority": "lets_encrypt", "cloudflare_branding": false, "dcv_delegation_records": [ { "cname": "_acme-challenge.example.com", "cname_target": "dcv.cloudflare.com", "emails": [ "administrator@example.com", "webmaster@example.com" ], "http_body": "ca3-574923932a82475cb8592200f1a2a23d", "http_url": "http://app.example.com/.well-known/pki-validation/ca3-da12a1c25e7b48cf80408c6c1763b8a2.txt", "status": "pending", "txt_name": "_acme-challenge.app.example.com", "txt_value": "810b7d5f01154524b961ba0cd578acc2" } ], "primary_certificate": "7e7b8deba8538af625850b7b2530034c", "validation_errors": [ { "message": "SERVFAIL looking up CAA for app.example.com" } ], "validation_method": "txt", "validation_records": [ { "cname": "_acme-challenge.example.com", "cname_target": "dcv.cloudflare.com", "emails": [ "administrator@example.com", "webmaster@example.com" ], "http_body": "ca3-574923932a82475cb8592200f1a2a23d", "http_url": "http://app.example.com/.well-known/pki-validation/ca3-da12a1c25e7b48cf80408c6c1763b8a2.txt", "status": "pending", "txt_name": "_acme-challenge.app.example.com", "txt_value": "810b7d5f01154524b961ba0cd578acc2" } ], "validity_days": 14 } } ```