---
title: Create Custom CSR
---
[Skip to content](#_top)
[API Reference](https://developers.cloudflare.com/api)
[Custom Csrs](https://developers.cloudflare.com/api/resources/custom_csrs)
Copy Markdown
Open in **Claude**Open in **ChatGPT**Open in **Cursor**
---
**Copy Markdown****View as Markdown**
# Create Custom CSR
POST/{accounts\_or\_zones}/{account\_or\_zone\_id}/custom\_csrs
Generate a new custom Certificate Signing Request (CSR) for an account or zone. Cloudflare generates and securely stores the private key associated with the CSR.
##### Security
API Token
The preferred authorization scheme for interacting with the Cloudflare API. Create a token.
**Example:**Authorization: Bearer Sn3lZJTBX6kkg7OdcBUAxOO963GEIyGQqnFTOFYY
API Email + API Key
The previous authorization scheme for interacting with the Cloudflare API, used in conjunction with a Global API key.
**Example:**X-Auth-Email: user@example.com
The previous authorization scheme for interacting with the Cloudflare API. When possible, use API tokens instead of Global API keys.
**Example:**X-Auth-Key: 144c9defac04969c7bfad8efaa8ea194
##### Accepted Permissions (at least one required)
`Account: SSL and Certificates Write`
##### P ath ParametersExpand Collapse
account\_id: optional string
The Account ID to use for this endpoint. Mutually exclusive with the Zone ID.
[Link to this property](<#(resource)%20custom_csrs%20%3E%20(method)%20create%20%3E%20(params)%20default%20%3E%20(param)%20account_id%20%3E%20(schema)>)
zone\_id: optional string
The Zone ID to use for this endpoint. Mutually exclusive with the Account ID.
[Link to this property](<#(resource)%20custom_csrs%20%3E%20(method)%20create%20%3E%20(params)%20default%20%3E%20(param)%20zone_id%20%3E%20(schema)>)
##### Body ParametersJSONExpand Collapse
common\_name: string
The common name (domain) for the CSR. Must be at most 64 characters.
maxLength64
[Link to this property](<#(resource)%20custom_csrs%20%3E%20(method)%20create%20%3E%20(params)%200%20%3E%20(param)%20common_name%20%3E%20(schema)>)
country: string
Two-letter ISO 3166-1 alpha-2 country code.
[Link to this property](<#(resource)%20custom_csrs%20%3E%20(method)%20create%20%3E%20(params)%200%20%3E%20(param)%20country%20%3E%20(schema)>)
locality: string
City or locality name.
[Link to this property](<#(resource)%20custom_csrs%20%3E%20(method)%20create%20%3E%20(params)%200%20%3E%20(param)%20locality%20%3E%20(schema)>)
organization: string
Organization name.
[Link to this property](<#(resource)%20custom_csrs%20%3E%20(method)%20create%20%3E%20(params)%200%20%3E%20(param)%20organization%20%3E%20(schema)>)
sans: array of string
Subject Alternative Names for the CSR. At least one SAN is required.
[Link to this property](<#(resource)%20custom_csrs%20%3E%20(method)%20create%20%3E%20(params)%200%20%3E%20(param)%20sans%20%3E%20(schema)>)
state: string
State or province name.
[Link to this property](<#(resource)%20custom_csrs%20%3E%20(method)%20create%20%3E%20(params)%200%20%3E%20(param)%20state%20%3E%20(schema)>)
description: optional string
Optional description for the CSR.
[Link to this property](<#(resource)%20custom_csrs%20%3E%20(method)%20create%20%3E%20(params)%200%20%3E%20(param)%20description%20%3E%20(schema)>)
key\_type: optional "rsa2048"or "p256v1"
Key algorithm to use for the CSR. Defaults to rsa2048 if not specified.
One of the following:
"rsa2048"
Link to this property
"p256v1"
Link to this property
[Link to this property](<#(resource)%20custom_csrs%20%3E%20(method)%20create%20%3E%20(params)%200%20%3E%20(param)%20key_type%20%3E%20(schema)>)
name: optional string
Human-readable name for the CSR.
[Link to this property](<#(resource)%20custom_csrs%20%3E%20(method)%20create%20%3E%20(params)%200%20%3E%20(param)%20name%20%3E%20(schema)>)
organizational\_unit: optional string
Organizational unit name.
[Link to this property](<#(resource)%20custom_csrs%20%3E%20(method)%20create%20%3E%20(params)%200%20%3E%20(param)%20organizational_unit%20%3E%20(schema)>)
##### ReturnsExpand Collapse
errors: array of object {code, message, documentation\_url, source }
code: number
minimum1000
Link to this property
message: string
Link to this property
documentation\_url: optional string
Link to this property
source: optional object {pointer }
pointer: optional string
Link to this property
Link to this property
[Link to this property](<#(resource)%20custom_csrs%20%3E%20(method)%20create%20%3E%20(network%20schema)%20%3E%20(property)%20errors>)
messages: array of object {code, message, documentation\_url, source }
code: number
minimum1000
Link to this property
message: string
Link to this property
documentation\_url: optional string
Link to this property
source: optional object {pointer }
pointer: optional string
Link to this property
Link to this property
[Link to this property](<#(resource)%20custom_csrs%20%3E%20(method)%20create%20%3E%20(network%20schema)%20%3E%20(property)%20messages>)
success: true
Whether the API call was successful.
[Link to this property](<#(resource)%20custom_csrs%20%3E%20(method)%20create%20%3E%20(network%20schema)%20%3E%20(property)%20success>)
result: optional object {id, created\_at, key\_type, 11 more }
A custom Certificate Signing Request (CSR).
id: string
Custom CSR identifier tag.
maxLength36
Link to this property
created\_at: string
When the CSR was created.
formatdate-time
Link to this property
key\_type: "rsa2048"or "p256v1"
The key algorithm used to generate the CSR.
One of the following:
"rsa2048"
Link to this property
"p256v1"
Link to this property
Link to this property
account\_tag: optional string
Account identifier associated with this CSR.
Link to this property
common\_name: optional string
The common name (domain) for the CSR.
maxLength64
Link to this property
country: optional string
Two-letter ISO 3166-1 alpha-2 country code.
Link to this property
csr: optional string
The PEM-encoded Certificate Signing Request.
Link to this property
description: optional string
Optional description for the CSR.
Link to this property
locality: optional string
City or locality name.
Link to this property
name: optional string
Human-readable name for the CSR.
Link to this property
organization: optional string
Organization name.
Link to this property
organizational\_unit: optional string
Organizational unit name.
Link to this property
sans: optional array of string
Subject Alternative Names included in the CSR.
Link to this property
state: optional string
State or province name.
Link to this property
[Link to this property](<#(resource)%20custom_csrs%20%3E%20(method)%20create%20%3E%20(network%20schema)%20%3E%20(property)%20result>)
### Create Custom CSR
HTTP
HTTPTypeScriptPythonGoTerraform
```
curl https://api.cloudflare.com/client/v4/$ACCOUNTS_OR_ZONES/$ACCOUNT_OR_ZONE_ID/custom_csrs \
-H 'Content-Type: application/json' \
-H "Authorization: Bearer $CLOUDFLARE_API_TOKEN" \
-d '{
"common_name": "example.com",
"country": "US",
"locality": "San Francisco",
"organization": "Cloudflare, Inc.",
"sans": [
"example.com",
"www.example.com"
],
"state": "California",
"description": "CSR for example.com wildcard",
"key_type": "rsa2048",
"name": "My Custom CSR",
"organizational_unit": "Engineering"
}'
```
200 example
```
{
"errors": [
{
"code": 1000,
"message": "message",
"documentation_url": "documentation_url",
"source": {
"pointer": "pointer"
}
}
],
"messages": [
{
"code": 1000,
"message": "message",
"documentation_url": "documentation_url",
"source": {
"pointer": "pointer"
}
}
],
"success": true,
"result": {
"id": "7b163417-1d2b-4c84-a38a-2fb7a0cd7752",
"created_at": "2024-01-15T10:30:00Z",
"key_type": "rsa2048",
"account_tag": "23e087bd19bc1d40ae95b6f297263ceb",
"common_name": "example.com",
"country": "US",
"csr": "-----BEGIN CERTIFICATE REQUEST-----\nMIICYzCCAUsCAQAwHj...",
"description": "CSR for example.com wildcard",
"locality": "San Francisco",
"name": "My Custom CSR",
"organization": "Cloudflare, Inc.",
"organizational_unit": "Engineering",
"sans": [
"example.com",
"www.example.com"
],
"state": "California"
}
}
```
##### Returns Examples
200 example
```
{
"errors": [
{
"code": 1000,
"message": "message",
"documentation_url": "documentation_url",
"source": {
"pointer": "pointer"
}
}
],
"messages": [
{
"code": 1000,
"message": "message",
"documentation_url": "documentation_url",
"source": {
"pointer": "pointer"
}
}
],
"success": true,
"result": {
"id": "7b163417-1d2b-4c84-a38a-2fb7a0cd7752",
"created_at": "2024-01-15T10:30:00Z",
"key_type": "rsa2048",
"account_tag": "23e087bd19bc1d40ae95b6f297263ceb",
"common_name": "example.com",
"country": "US",
"csr": "-----BEGIN CERTIFICATE REQUEST-----\nMIICYzCCAUsCAQAwHj...",
"description": "CSR for example.com wildcard",
"locality": "San Francisco",
"name": "My Custom CSR",
"organization": "Cloudflare, Inc.",
"organizational_unit": "Engineering",
"sans": [
"example.com",
"www.example.com"
],
"state": "California"
}
}
```