--- title: Zone Certificates --- [Skip to content](#_top) [API Reference](https://developers.cloudflare.com/api) [Origin TLS Client Auth](https://developers.cloudflare.com/api/resources/origin_tls_client_auth) Copy Markdown Open in **Claude**Open in **ChatGPT**Open in **Cursor** --- **Copy Markdown****View as Markdown** # Zone Certificates ##### [List Certificates](https://developers.cloudflare.com/api/resources/origin_tls_client_auth/subresources/zone_certificates/methods/list) GET/zones/{zone\_id}/origin\_tls\_client\_auth ##### [Get Certificate Details](https://developers.cloudflare.com/api/resources/origin_tls_client_auth/subresources/zone_certificates/methods/get) GET/zones/{zone\_id}/origin\_tls\_client\_auth/{certificate\_id} ##### [Upload Certificate](https://developers.cloudflare.com/api/resources/origin_tls_client_auth/subresources/zone_certificates/methods/create) POST/zones/{zone\_id}/origin\_tls\_client\_auth ##### [Delete Certificate](https://developers.cloudflare.com/api/resources/origin_tls_client_auth/subresources/zone_certificates/methods/delete) DELETE/zones/{zone\_id}/origin\_tls\_client\_auth/{certificate\_id} ##### ModelsExpand Collapse

ZoneAuthenticatedOriginPull object {id, certificate, expires\_on, 4 more }

id: optional string Certificate identifier tag. maxLength36 Link to this property certificate: optional string The zone’s leaf certificate. Link to this property expires\_on: optional string When the certificate from the authority expires. formatdate-time Link to this property issuer: optional string The certificate authority that issued the certificate. Link to this property signature: optional string The type of hash used for the certificate. Link to this property

status: optional "initializing"or "pending\_deployment"or "pending\_deletion"or 4 more Status of the certificate activation.

One of the following: "initializing" Link to this property "pending\_deployment" Link to this property "pending\_deletion" Link to this property "active" Link to this property "deleted" Link to this property "deployment\_timed\_out" Link to this property "deletion\_timed\_out" Link to this property

Link to this property uploaded\_on: optional string This is the time the certificate was uploaded. formatdate-time Link to this property

[Link to this property](<#(resource)%20origin_tls_client_auth.zone_certificates%20%3E%20(model)%20zone_authenticated_origin_pull%20%3E%20(schema)>)

ZoneCertificateListResponse = ZoneAuthenticatedOriginPull { id, certificate, expires\_on, 4 more }

id: optional string Certificate identifier tag. maxLength36 Link to this property certificate: optional string The zone’s leaf certificate. Link to this property enabled: optional boolean Indicates whether zone-level authenticated origin pulls is enabled. Link to this property private\_key: optional string The zone’s private key. Link to this property

[Link to this property](<#(resource)%20origin_tls_client_auth.zone_certificates%20%3E%20(model)%20zone_certificate_list_response%20%3E%20(schema)>)

ZoneCertificateGetResponse = ZoneAuthenticatedOriginPull { id, certificate, expires\_on, 4 more }

[Link to this property](<#(resource)%20origin_tls_client_auth.zone_certificates%20%3E%20(model)%20zone_certificate_get_response%20%3E%20(schema)>)

ZoneCertificateCreateResponse = ZoneAuthenticatedOriginPull { id, certificate, expires\_on, 4 more }

[Link to this property](<#(resource)%20origin_tls_client_auth.zone_certificates%20%3E%20(model)%20zone_certificate_create_response%20%3E%20(schema)>)

ZoneCertificateDeleteResponse = ZoneAuthenticatedOriginPull { id, certificate, expires\_on, 4 more }

[Link to this property](<#(resource)%20origin_tls_client_auth.zone_certificates%20%3E%20(model)%20zone_certificate_delete_response%20%3E%20(schema)>)