--- title: Origin TLS Client Auth --- [Skip to content](#_top) [API Reference](https://developers.cloudflare.com/api) Copy Markdown Open in **Claude**Open in **ChatGPT**Open in **Cursor** --- **Copy Markdown****View as Markdown** # Origin TLS Client Auth ##### [List Certificates](https://developers.cloudflare.com/api/resources/origin_tls_client_auth/methods/list) Deprecated GET/zones/{zone\_id}/origin\_tls\_client\_auth ##### [Get Certificate Details](https://developers.cloudflare.com/api/resources/origin_tls_client_auth/methods/get) Deprecated GET/zones/{zone\_id}/origin\_tls\_client\_auth/{certificate\_id} ##### [Upload Certificate](https://developers.cloudflare.com/api/resources/origin_tls_client_auth/methods/create) Deprecated POST/zones/{zone\_id}/origin\_tls\_client\_auth ##### [Delete Certificate](https://developers.cloudflare.com/api/resources/origin_tls_client_auth/methods/delete) Deprecated DELETE/zones/{zone\_id}/origin\_tls\_client\_auth/{certificate\_id} ##### ModelsExpand Collapse

OriginTLSClientAuthListResponse = ZoneAuthenticatedOriginPull { id, certificate, expires\_on, 4 more }

id: optional string Certificate identifier tag. maxLength36 Link to this property certificate: optional string The zone’s leaf certificate. Link to this property enabled: optional boolean Indicates whether zone-level authenticated origin pulls is enabled. Link to this property private\_key: optional string The zone’s private key. Link to this property

[Link to this property](<#(resource)%20origin_tls_client_auth%20%3E%20(model)%20origin_tls_client_auth_list_response%20%3E%20(schema)>)

OriginTLSClientAuthGetResponse = ZoneAuthenticatedOriginPull { id, certificate, expires\_on, 4 more }

[Link to this property](<#(resource)%20origin_tls_client_auth%20%3E%20(model)%20origin_tls_client_auth_get_response%20%3E%20(schema)>)

OriginTLSClientAuthCreateResponse = ZoneAuthenticatedOriginPull { id, certificate, expires\_on, 4 more }

[Link to this property](<#(resource)%20origin_tls_client_auth%20%3E%20(model)%20origin_tls_client_auth_create_response%20%3E%20(schema)>)

OriginTLSClientAuthDeleteResponse = ZoneAuthenticatedOriginPull { id, certificate, expires\_on, 4 more }

[Link to this property](<#(resource)%20origin_tls_client_auth%20%3E%20(model)%20origin_tls_client_auth_delete_response%20%3E%20(schema)>) #### Origin TLS Client AuthZone Certificates ##### [List Certificates](https://developers.cloudflare.com/api/resources/origin_tls_client_auth/subresources/zone_certificates/methods/list) GET/zones/{zone\_id}/origin\_tls\_client\_auth ##### [Get Certificate Details](https://developers.cloudflare.com/api/resources/origin_tls_client_auth/subresources/zone_certificates/methods/get) GET/zones/{zone\_id}/origin\_tls\_client\_auth/{certificate\_id} ##### [Upload Certificate](https://developers.cloudflare.com/api/resources/origin_tls_client_auth/subresources/zone_certificates/methods/create) POST/zones/{zone\_id}/origin\_tls\_client\_auth ##### [Delete Certificate](https://developers.cloudflare.com/api/resources/origin_tls_client_auth/subresources/zone_certificates/methods/delete) DELETE/zones/{zone\_id}/origin\_tls\_client\_auth/{certificate\_id} ##### ModelsExpand Collapse

ZoneAuthenticatedOriginPull object {id, certificate, expires\_on, 4 more }

id: optional string Certificate identifier tag. maxLength36 Link to this property certificate: optional string The zone’s leaf certificate. Link to this property expires\_on: optional string When the certificate from the authority expires. formatdate-time Link to this property issuer: optional string The certificate authority that issued the certificate. Link to this property signature: optional string The type of hash used for the certificate. Link to this property

status: optional "initializing"or "pending\_deployment"or "pending\_deletion"or 4 more Status of the certificate activation.

One of the following: "initializing" Link to this property "pending\_deployment" Link to this property "pending\_deletion" Link to this property "active" Link to this property "deleted" Link to this property "deployment\_timed\_out" Link to this property "deletion\_timed\_out" Link to this property

Link to this property uploaded\_on: optional string This is the time the certificate was uploaded. formatdate-time Link to this property

[Link to this property](<#(resource)%20origin_tls_client_auth.zone_certificates%20%3E%20(model)%20zone_authenticated_origin_pull%20%3E%20(schema)>)

ZoneCertificateListResponse = ZoneAuthenticatedOriginPull { id, certificate, expires\_on, 4 more }

[Link to this property](<#(resource)%20origin_tls_client_auth.zone_certificates%20%3E%20(model)%20zone_certificate_list_response%20%3E%20(schema)>)

ZoneCertificateGetResponse = ZoneAuthenticatedOriginPull { id, certificate, expires\_on, 4 more }

[Link to this property](<#(resource)%20origin_tls_client_auth.zone_certificates%20%3E%20(model)%20zone_certificate_get_response%20%3E%20(schema)>)

ZoneCertificateCreateResponse = ZoneAuthenticatedOriginPull { id, certificate, expires\_on, 4 more }

[Link to this property](<#(resource)%20origin_tls_client_auth.zone_certificates%20%3E%20(model)%20zone_certificate_create_response%20%3E%20(schema)>)

ZoneCertificateDeleteResponse = ZoneAuthenticatedOriginPull { id, certificate, expires\_on, 4 more }

[Link to this property](<#(resource)%20origin_tls_client_auth.zone_certificates%20%3E%20(model)%20zone_certificate_delete_response%20%3E%20(schema)>) #### Origin TLS Client AuthHostnames ##### [Get the Hostname Status for Client Authentication](https://developers.cloudflare.com/api/resources/origin_tls_client_auth/subresources/hostnames/methods/get) GET/zones/{zone\_id}/origin\_tls\_client\_auth/hostnames/{hostname} ##### [Enable or Disable a Hostname for Client Authentication](https://developers.cloudflare.com/api/resources/origin_tls_client_auth/subresources/hostnames/methods/update) PUT/zones/{zone\_id}/origin\_tls\_client\_auth/hostnames ##### ModelsExpand Collapse

AuthenticatedOriginPull object {cert\_id, cert\_status, cert\_updated\_at, 11 more }

cert\_id: optional string Certificate identifier tag. maxLength36 Link to this property

cert\_status: optional "initializing"or "pending\_deployment"or "pending\_deletion"or 4 more Status of the certificate or the association.

Link to this property cert\_updated\_at: optional string The time when the certificate was updated. formatdate-time Link to this property cert\_uploaded\_on: optional string The time when the certificate was uploaded. formatdate-time Link to this property certificate: optional string The hostname certificate. Link to this property created\_at: optional string The time when the certificate was created. formatdate-time Link to this property enabled: optional boolean Indicates whether hostname-level authenticated origin pulls is enabled. A null value voids the association. Link to this property expires\_on: optional string The date when the certificate expires. formatdate-time Link to this property hostname: optional string The hostname on the origin for which the client certificate uploaded will be used. maxLength255 Link to this property issuer: optional string The certificate authority that issued the certificate. Link to this property serial\_number: optional string The serial number on the uploaded certificate. Link to this property signature: optional string The type of hash used for the certificate. Link to this property

status: optional "initializing"or "pending\_deployment"or "pending\_deletion"or 4 more Status of the certificate or the association.

Link to this property updated\_at: optional string The time when the certificate was updated. formatdate-time Link to this property

[Link to this property](<#(resource)%20origin_tls_client_auth.hostnames%20%3E%20(model)%20authenticated_origin_pull%20%3E%20(schema)>)

HostnameUpdateResponse = AuthenticatedOriginPull { cert\_id, cert\_status, cert\_updated\_at, 11 more }

id: optional string Certificate identifier tag. maxLength36 Link to this property cert\_id: optional string Certificate identifier tag. maxLength36 Link to this property certificate: optional string The hostname certificate. Link to this property enabled: optional boolean Indicates whether hostname-level authenticated origin pulls is enabled. A null value voids the association. Link to this property hostname: optional string The hostname on the origin for which the client certificate uploaded will be used. maxLength255 Link to this property private\_key: optional string The hostname certificate’s private key. Link to this property

[Link to this property](<#(resource)%20origin_tls_client_auth.hostnames%20%3E%20(model)%20hostname_update_response%20%3E%20(schema)>) #### Origin TLS Client AuthHostname Certificates ##### [List Certificates](https://developers.cloudflare.com/api/resources/origin_tls_client_auth/subresources/hostname_certificates/methods/list) GET/zones/{zone\_id}/origin\_tls\_client\_auth/hostnames/certificates ##### [Get the Hostname Client Certificate](https://developers.cloudflare.com/api/resources/origin_tls_client_auth/subresources/hostname_certificates/methods/get) GET/zones/{zone\_id}/origin\_tls\_client\_auth/hostnames/certificates/{certificate\_id} ##### [Upload a Hostname Client Certificate](https://developers.cloudflare.com/api/resources/origin_tls_client_auth/subresources/hostname_certificates/methods/create) POST/zones/{zone\_id}/origin\_tls\_client\_auth/hostnames/certificates ##### [Delete Hostname Client Certificate](https://developers.cloudflare.com/api/resources/origin_tls_client_auth/subresources/hostname_certificates/methods/delete) DELETE/zones/{zone\_id}/origin\_tls\_client\_auth/hostnames/certificates/{certificate\_id} ##### ModelsExpand Collapse

Certificate object {id, certificate, expires\_on, 5 more }

id: optional string Certificate identifier tag. maxLength36 Link to this property certificate: optional string The hostname certificate. Link to this property expires\_on: optional string The date when the certificate expires. formatdate-time Link to this property issuer: optional string The certificate authority that issued the certificate. Link to this property serial\_number: optional string The serial number on the uploaded certificate. Link to this property signature: optional string The type of hash used for the certificate. Link to this property

status: optional "initializing"or "pending\_deployment"or "pending\_deletion"or 4 more Status of the certificate or the association.

Link to this property uploaded\_on: optional string The time when the certificate was uploaded. formatdate-time Link to this property

[Link to this property](<#(resource)%20origin_tls_client_auth.hostname_certificates%20%3E%20(model)%20certificate%20%3E%20(schema)>)

HostnameCertificateListResponse object {id, certificate, expires\_on, 5 more }

status: optional "initializing"or "pending\_deployment"or "pending\_deletion"or 4 more Status of the certificate or the association.

Link to this property uploaded\_on: optional string The time when the certificate was uploaded. formatdate-time Link to this property

[Link to this property](<#(resource)%20origin_tls_client_auth.hostname_certificates%20%3E%20(model)%20hostname_certificate_list_response%20%3E%20(schema)>)

HostnameCertificateGetResponse object {id, certificate, expires\_on, 5 more }

status: optional "initializing"or "pending\_deployment"or "pending\_deletion"or 4 more Status of the certificate or the association.

Link to this property uploaded\_on: optional string The time when the certificate was uploaded. formatdate-time Link to this property

[Link to this property](<#(resource)%20origin_tls_client_auth.hostname_certificates%20%3E%20(model)%20hostname_certificate_get_response%20%3E%20(schema)>)

HostnameCertificateCreateResponse object {id, certificate, expires\_on, 5 more }

status: optional "initializing"or "pending\_deployment"or "pending\_deletion"or 4 more Status of the certificate or the association.

Link to this property uploaded\_on: optional string The time when the certificate was uploaded. formatdate-time Link to this property

[Link to this property](<#(resource)%20origin_tls_client_auth.hostname_certificates%20%3E%20(model)%20hostname_certificate_create_response%20%3E%20(schema)>)

HostnameCertificateDeleteResponse object {id, certificate, expires\_on, 5 more }

status: optional "initializing"or "pending\_deployment"or "pending\_deletion"or 4 more Status of the certificate or the association.

Link to this property uploaded\_on: optional string The time when the certificate was uploaded. formatdate-time Link to this property

[Link to this property](<#(resource)%20origin_tls_client_auth.hostname_certificates%20%3E%20(model)%20hostname_certificate_delete_response%20%3E%20(schema)>) #### Origin TLS Client AuthSettings ##### [Get Enablement Setting for Zone](https://developers.cloudflare.com/api/resources/origin_tls_client_auth/subresources/settings/methods/get) GET/zones/{zone\_id}/origin\_tls\_client\_auth/settings ##### [Set Enablement for Zone](https://developers.cloudflare.com/api/resources/origin_tls_client_auth/subresources/settings/methods/update) PUT/zones/{zone\_id}/origin\_tls\_client\_auth/settings ##### ModelsExpand Collapse

SettingGetResponse object {enabled }

enabled: optional boolean Indicates whether zone-level authenticated origin pulls is enabled. Link to this property

[Link to this property](<#(resource)%20origin_tls_client_auth.settings%20%3E%20(model)%20setting_get_response%20%3E%20(schema)>)

SettingUpdateResponse object {enabled }

enabled: optional boolean Indicates whether zone-level authenticated origin pulls is enabled. Link to this property

[Link to this property](<#(resource)%20origin_tls_client_auth.settings%20%3E%20(model)%20setting_update_response%20%3E%20(schema)>)