---
title: Certificate Packs
---
[Skip to content](#_top)
[API Reference](https://developers.cloudflare.com/api)
[SSL](https://developers.cloudflare.com/api/resources/ssl)
Copy Markdown
Open in **Claude**Open in **ChatGPT**Open in **Cursor**
---
**Copy Markdown****View as Markdown**
# Certificate Packs
##### [List Certificate Packs](https://developers.cloudflare.com/api/resources/ssl/subresources/certificate_packs/methods/list)
GET/zones/{zone\_id}/ssl/certificate\_packs
##### [Get Certificate Pack](https://developers.cloudflare.com/api/resources/ssl/subresources/certificate_packs/methods/get)
GET/zones/{zone\_id}/ssl/certificate\_packs/{certificate\_pack\_id}
##### [Order Advanced Certificate Manager Certificate Pack](https://developers.cloudflare.com/api/resources/ssl/subresources/certificate_packs/methods/create)
POST/zones/{zone\_id}/ssl/certificate\_packs/order
##### [Restart Validation or Update Advanced Certificate Manager Certificate Pack](https://developers.cloudflare.com/api/resources/ssl/subresources/certificate_packs/methods/edit)
PATCH/zones/{zone\_id}/ssl/certificate\_packs/{certificate\_pack\_id}
##### [Delete Advanced Certificate Manager Certificate Pack](https://developers.cloudflare.com/api/resources/ssl/subresources/certificate_packs/methods/delete)
DELETE/zones/{zone\_id}/ssl/certificate\_packs/{certificate\_pack\_id}
##### ModelsExpand Collapse
Host = string
[Link to this property](<#(resource)%20ssl.certificate_packs%20%3E%20(model)%20host%20%3E%20(schema)>)
RequestValidity = 7or 30or 90or 4 more
The number of days for which the certificate should be valid.
One of the following:
7
Link to this property
30
Link to this property
90
Link to this property
365
Link to this property
730
Link to this property
1095
Link to this property
5475
Link to this property
[Link to this property](<#(resource)%20ssl.certificate_packs%20%3E%20(model)%20request_validity%20%3E%20(schema)>)
Status = "initializing"or "pending\_validation"or "deleted"or 18 more
Status of certificate pack.
One of the following:
"initializing"
Link to this property
"pending\_validation"
Link to this property
"deleted"
Link to this property
"pending\_issuance"
Link to this property
"pending\_deployment"
Link to this property
"pending\_deletion"
Link to this property
"pending\_expiration"
Link to this property
"expired"
Link to this property
"active"
Link to this property
"initializing\_timed\_out"
Link to this property
"validation\_timed\_out"
Link to this property
"issuance\_timed\_out"
Link to this property
"deployment\_timed\_out"
Link to this property
"deletion\_timed\_out"
Link to this property
"pending\_cleanup"
Link to this property
"staging\_deployment"
Link to this property
"staging\_active"
Link to this property
"deactivating"
Link to this property
"inactive"
Link to this property
"backup\_issued"
Link to this property
"holding\_deployment"
Link to this property
[Link to this property](<#(resource)%20ssl.certificate_packs%20%3E%20(model)%20status%20%3E%20(schema)>)
ValidationMethod = "http"or "cname"or "txt"
Validation method in use for a certificate pack order.
One of the following:
"http"
Link to this property
"cname"
Link to this property
"txt"
Link to this property
[Link to this property](<#(resource)%20ssl.certificate_packs%20%3E%20(model)%20validation_method%20%3E%20(schema)>)
CertificatePackListResponse object {id, certificates, hosts, 10 more }
A certificate pack with all its properties.
id: string
The unique identifier for a certificate\_pack.
Link to this property
certificates: array of object {id, hosts, status, 9 more }
Array of certificates in this pack.
id: string
Certificate identifier.
Link to this property
hosts: array of string
Hostnames covered by this certificate.
Link to this property
status: string
Certificate status.
Link to this property
bundle\_method: optional string
Certificate bundle method.
Link to this property
expires\_on: optional string
When the certificate from the authority expires.
formatdate-time
Link to this property
geo\_restrictions: optional object {label }
Specify the region where your private key can be held locally.
label: optional "us"or "eu"or "highest\_security"
One of the following:
"us"
Link to this property
"eu"
Link to this property
"highest\_security"
Link to this property
Link to this property
Link to this property
issuer: optional string
The certificate authority that issued the certificate.
Link to this property
modified\_on: optional string
When the certificate was last modified.
formatdate-time
Link to this property
priority: optional number
The order/priority in which the certificate will be used.
Link to this property
signature: optional string
The type of hash used for the certificate.
Link to this property
uploaded\_on: optional string
When the certificate was uploaded to Cloudflare.
formatdate-time
Link to this property
zone\_id: optional string
Identifier.
maxLength32
Link to this property
Link to this property
hosts: array of Host
Comma separated list of valid host names for the certificate packs. Must contain the zone apex, may not contain more than 50 hosts, and may not be empty.
Link to this property
status: Status
Status of certificate pack.
Link to this property
type: "mh\_custom"or "managed\_hostname"or "sni\_custom"or 5 more
Type of certificate pack.
One of the following:
"mh\_custom"
Link to this property
"managed\_hostname"
Link to this property
"sni\_custom"
Link to this property
"universal"
Link to this property
"advanced"
Link to this property
"total\_tls"
Link to this property
"keyless"
Link to this property
"legacy\_custom"
Link to this property
Link to this property
certificate\_authority: optional "google"or "lets\_encrypt"or "ssl\_com"
Certificate Authority selected for the order. For information on any certificate authority specific details or restrictions see this page for more details.
One of the following:
"google"
Link to this property
"lets\_encrypt"
Link to this property
"ssl\_com"
Link to this property
Link to this property
cloudflare\_branding: optional boolean
Whether or not to add Cloudflare Branding for the order. This will add a subdomain of sni.cloudflaressl.com as the Common Name if set to true.
Link to this property
dcv\_delegation\_records: optional array of object {cname, cname\_target, emails, 5 more }
DCV Delegation records for domain validation.
cname: optional string
The CNAME record hostname for DCV delegation.
Link to this property
cname\_target: optional string
The CNAME record target value for DCV delegation.
Link to this property
emails: optional array of string
The set of email addresses that the certificate authority (CA) will use to complete domain validation.
Link to this property
http\_body: optional string
The content that the certificate authority (CA) will expect to find at the http\_url during the domain validation.
Link to this property
http\_url: optional string
The url that will be checked during domain validation.
Link to this property
status: optional string
Status of the validation record.
Link to this property
txt\_name: optional string
The hostname that the certificate authority (CA) will check for a TXT record during domain validation .
Link to this property
txt\_value: optional string
The TXT record that the certificate authority (CA) will check during domain validation.
Link to this property
Link to this property
primary\_certificate: optional string
Identifier of the primary certificate in a pack.
Link to this property
validation\_errors: optional array of object {message }
Domain validation errors that have been received by the certificate authority (CA).
message: optional string
A domain validation error.
Link to this property
Link to this property
validation\_method: optional "txt"or "http"or "email"
Validation Method selected for the order.
One of the following:
"txt"
Link to this property
"http"
Link to this property
"email"
Link to this property
Link to this property
validation\_records: optional array of object {cname, cname\_target, emails, 5 more }
Certificates’ validation records.
cname: optional string
The CNAME record hostname for DCV delegation.
Link to this property
cname\_target: optional string
The CNAME record target value for DCV delegation.
Link to this property
emails: optional array of string
The set of email addresses that the certificate authority (CA) will use to complete domain validation.
Link to this property
http\_body: optional string
The content that the certificate authority (CA) will expect to find at the http\_url during the domain validation.
Link to this property
http\_url: optional string
The url that will be checked during domain validation.
Link to this property
status: optional string
Status of the validation record.
Link to this property
txt\_name: optional string
The hostname that the certificate authority (CA) will check for a TXT record during domain validation .
Link to this property
txt\_value: optional string
The TXT record that the certificate authority (CA) will check during domain validation.
Link to this property
Link to this property
validity\_days: optional 14or 30or 90or 365
Validity Days selected for the order.
One of the following:
14
Link to this property
30
Link to this property
90
Link to this property
365
Link to this property
Link to this property
[Link to this property](<#(resource)%20ssl.certificate_packs%20%3E%20(model)%20certificate_pack_list_response%20%3E%20(schema)>)
CertificatePackGetResponse object {id, certificates, hosts, 10 more }
A certificate pack with all its properties.
id: string
The unique identifier for a certificate\_pack.
Link to this property
certificates: array of object {id, hosts, status, 9 more }
Array of certificates in this pack.
id: string
Certificate identifier.
Link to this property
hosts: array of string
Hostnames covered by this certificate.
Link to this property
status: string
Certificate status.
Link to this property
bundle\_method: optional string
Certificate bundle method.
Link to this property
expires\_on: optional string
When the certificate from the authority expires.
formatdate-time
Link to this property
geo\_restrictions: optional object {label }
Specify the region where your private key can be held locally.
label: optional "us"or "eu"or "highest\_security"
One of the following:
"us"
Link to this property
"eu"
Link to this property
"highest\_security"
Link to this property
Link to this property
Link to this property
issuer: optional string
The certificate authority that issued the certificate.
Link to this property
modified\_on: optional string
When the certificate was last modified.
formatdate-time
Link to this property
priority: optional number
The order/priority in which the certificate will be used.
Link to this property
signature: optional string
The type of hash used for the certificate.
Link to this property
uploaded\_on: optional string
When the certificate was uploaded to Cloudflare.
formatdate-time
Link to this property
zone\_id: optional string
Identifier.
maxLength32
Link to this property
Link to this property
hosts: array of Host
Comma separated list of valid host names for the certificate packs. Must contain the zone apex, may not contain more than 50 hosts, and may not be empty.
Link to this property
status: Status
Status of certificate pack.
Link to this property
type: "mh\_custom"or "managed\_hostname"or "sni\_custom"or 5 more
Type of certificate pack.
One of the following:
"mh\_custom"
Link to this property
"managed\_hostname"
Link to this property
"sni\_custom"
Link to this property
"universal"
Link to this property
"advanced"
Link to this property
"total\_tls"
Link to this property
"keyless"
Link to this property
"legacy\_custom"
Link to this property
Link to this property
certificate\_authority: optional "google"or "lets\_encrypt"or "ssl\_com"
Certificate Authority selected for the order. For information on any certificate authority specific details or restrictions see this page for more details.
One of the following:
"google"
Link to this property
"lets\_encrypt"
Link to this property
"ssl\_com"
Link to this property
Link to this property
cloudflare\_branding: optional boolean
Whether or not to add Cloudflare Branding for the order. This will add a subdomain of sni.cloudflaressl.com as the Common Name if set to true.
Link to this property
dcv\_delegation\_records: optional array of object {cname, cname\_target, emails, 5 more }
DCV Delegation records for domain validation.
cname: optional string
The CNAME record hostname for DCV delegation.
Link to this property
cname\_target: optional string
The CNAME record target value for DCV delegation.
Link to this property
emails: optional array of string
The set of email addresses that the certificate authority (CA) will use to complete domain validation.
Link to this property
http\_body: optional string
The content that the certificate authority (CA) will expect to find at the http\_url during the domain validation.
Link to this property
http\_url: optional string
The url that will be checked during domain validation.
Link to this property
status: optional string
Status of the validation record.
Link to this property
txt\_name: optional string
The hostname that the certificate authority (CA) will check for a TXT record during domain validation .
Link to this property
txt\_value: optional string
The TXT record that the certificate authority (CA) will check during domain validation.
Link to this property
Link to this property
primary\_certificate: optional string
Identifier of the primary certificate in a pack.
Link to this property
validation\_errors: optional array of object {message }
Domain validation errors that have been received by the certificate authority (CA).
message: optional string
A domain validation error.
Link to this property
Link to this property
validation\_method: optional "txt"or "http"or "email"
Validation Method selected for the order.
One of the following:
"txt"
Link to this property
"http"
Link to this property
"email"
Link to this property
Link to this property
validation\_records: optional array of object {cname, cname\_target, emails, 5 more }
Certificates’ validation records.
cname: optional string
The CNAME record hostname for DCV delegation.
Link to this property
cname\_target: optional string
The CNAME record target value for DCV delegation.
Link to this property
emails: optional array of string
The set of email addresses that the certificate authority (CA) will use to complete domain validation.
Link to this property
http\_body: optional string
The content that the certificate authority (CA) will expect to find at the http\_url during the domain validation.
Link to this property
http\_url: optional string
The url that will be checked during domain validation.
Link to this property
status: optional string
Status of the validation record.
Link to this property
txt\_name: optional string
The hostname that the certificate authority (CA) will check for a TXT record during domain validation .
Link to this property
txt\_value: optional string
The TXT record that the certificate authority (CA) will check during domain validation.
Link to this property
Link to this property
validity\_days: optional 14or 30or 90or 365
Validity Days selected for the order.
One of the following:
14
Link to this property
30
Link to this property
90
Link to this property
365
Link to this property
Link to this property
[Link to this property](<#(resource)%20ssl.certificate_packs%20%3E%20(model)%20certificate_pack_get_response%20%3E%20(schema)>)
CertificatePackCreateResponse object {id, certificates, hosts, 10 more }
A certificate pack with all its properties.
id: string
The unique identifier for a certificate\_pack.
Link to this property
certificates: array of object {id, hosts, status, 9 more }
Array of certificates in this pack.
id: string
Certificate identifier.
Link to this property
hosts: array of string
Hostnames covered by this certificate.
Link to this property
status: string
Certificate status.
Link to this property
bundle\_method: optional string
Certificate bundle method.
Link to this property
expires\_on: optional string
When the certificate from the authority expires.
formatdate-time
Link to this property
geo\_restrictions: optional object {label }
Specify the region where your private key can be held locally.
label: optional "us"or "eu"or "highest\_security"
One of the following:
"us"
Link to this property
"eu"
Link to this property
"highest\_security"
Link to this property
Link to this property
Link to this property
issuer: optional string
The certificate authority that issued the certificate.
Link to this property
modified\_on: optional string
When the certificate was last modified.
formatdate-time
Link to this property
priority: optional number
The order/priority in which the certificate will be used.
Link to this property
signature: optional string
The type of hash used for the certificate.
Link to this property
uploaded\_on: optional string
When the certificate was uploaded to Cloudflare.
formatdate-time
Link to this property
zone\_id: optional string
Identifier.
maxLength32
Link to this property
Link to this property
hosts: array of Host
Comma separated list of valid host names for the certificate packs. Must contain the zone apex, may not contain more than 50 hosts, and may not be empty.
Link to this property
status: Status
Status of certificate pack.
Link to this property
type: "mh\_custom"or "managed\_hostname"or "sni\_custom"or 5 more
Type of certificate pack.
One of the following:
"mh\_custom"
Link to this property
"managed\_hostname"
Link to this property
"sni\_custom"
Link to this property
"universal"
Link to this property
"advanced"
Link to this property
"total\_tls"
Link to this property
"keyless"
Link to this property
"legacy\_custom"
Link to this property
Link to this property
certificate\_authority: optional "google"or "lets\_encrypt"or "ssl\_com"
Certificate Authority selected for the order. For information on any certificate authority specific details or restrictions see this page for more details.
One of the following:
"google"
Link to this property
"lets\_encrypt"
Link to this property
"ssl\_com"
Link to this property
Link to this property
cloudflare\_branding: optional boolean
Whether or not to add Cloudflare Branding for the order. This will add a subdomain of sni.cloudflaressl.com as the Common Name if set to true.
Link to this property
dcv\_delegation\_records: optional array of object {cname, cname\_target, emails, 5 more }
DCV Delegation records for domain validation.
cname: optional string
The CNAME record hostname for DCV delegation.
Link to this property
cname\_target: optional string
The CNAME record target value for DCV delegation.
Link to this property
emails: optional array of string
The set of email addresses that the certificate authority (CA) will use to complete domain validation.
Link to this property
http\_body: optional string
The content that the certificate authority (CA) will expect to find at the http\_url during the domain validation.
Link to this property
http\_url: optional string
The url that will be checked during domain validation.
Link to this property
status: optional string
Status of the validation record.
Link to this property
txt\_name: optional string
The hostname that the certificate authority (CA) will check for a TXT record during domain validation .
Link to this property
txt\_value: optional string
The TXT record that the certificate authority (CA) will check during domain validation.
Link to this property
Link to this property
primary\_certificate: optional string
Identifier of the primary certificate in a pack.
Link to this property
validation\_errors: optional array of object {message }
Domain validation errors that have been received by the certificate authority (CA).
message: optional string
A domain validation error.
Link to this property
Link to this property
validation\_method: optional "txt"or "http"or "email"
Validation Method selected for the order.
One of the following:
"txt"
Link to this property
"http"
Link to this property
"email"
Link to this property
Link to this property
validation\_records: optional array of object {cname, cname\_target, emails, 5 more }
Certificates’ validation records.
cname: optional string
The CNAME record hostname for DCV delegation.
Link to this property
cname\_target: optional string
The CNAME record target value for DCV delegation.
Link to this property
emails: optional array of string
The set of email addresses that the certificate authority (CA) will use to complete domain validation.
Link to this property
http\_body: optional string
The content that the certificate authority (CA) will expect to find at the http\_url during the domain validation.
Link to this property
http\_url: optional string
The url that will be checked during domain validation.
Link to this property
status: optional string
Status of the validation record.
Link to this property
txt\_name: optional string
The hostname that the certificate authority (CA) will check for a TXT record during domain validation .
Link to this property
txt\_value: optional string
The TXT record that the certificate authority (CA) will check during domain validation.
Link to this property
Link to this property
validity\_days: optional 14or 30or 90or 365
Validity Days selected for the order.
One of the following:
14
Link to this property
30
Link to this property
90
Link to this property
365
Link to this property
Link to this property
[Link to this property](<#(resource)%20ssl.certificate_packs%20%3E%20(model)%20certificate_pack_create_response%20%3E%20(schema)>)
CertificatePackEditResponse object {id, certificates, hosts, 10 more }
A certificate pack with all its properties.
id: string
The unique identifier for a certificate\_pack.
Link to this property
certificates: array of object {id, hosts, status, 9 more }
Array of certificates in this pack.
id: string
Certificate identifier.
Link to this property
hosts: array of string
Hostnames covered by this certificate.
Link to this property
status: string
Certificate status.
Link to this property
bundle\_method: optional string
Certificate bundle method.
Link to this property
expires\_on: optional string
When the certificate from the authority expires.
formatdate-time
Link to this property
geo\_restrictions: optional object {label }
Specify the region where your private key can be held locally.
label: optional "us"or "eu"or "highest\_security"
One of the following:
"us"
Link to this property
"eu"
Link to this property
"highest\_security"
Link to this property
Link to this property
Link to this property
issuer: optional string
The certificate authority that issued the certificate.
Link to this property
modified\_on: optional string
When the certificate was last modified.
formatdate-time
Link to this property
priority: optional number
The order/priority in which the certificate will be used.
Link to this property
signature: optional string
The type of hash used for the certificate.
Link to this property
uploaded\_on: optional string
When the certificate was uploaded to Cloudflare.
formatdate-time
Link to this property
zone\_id: optional string
Identifier.
maxLength32
Link to this property
Link to this property
hosts: array of Host
Comma separated list of valid host names for the certificate packs. Must contain the zone apex, may not contain more than 50 hosts, and may not be empty.
Link to this property
status: Status
Status of certificate pack.
Link to this property
type: "mh\_custom"or "managed\_hostname"or "sni\_custom"or 5 more
Type of certificate pack.
One of the following:
"mh\_custom"
Link to this property
"managed\_hostname"
Link to this property
"sni\_custom"
Link to this property
"universal"
Link to this property
"advanced"
Link to this property
"total\_tls"
Link to this property
"keyless"
Link to this property
"legacy\_custom"
Link to this property
Link to this property
certificate\_authority: optional "google"or "lets\_encrypt"or "ssl\_com"
Certificate Authority selected for the order. For information on any certificate authority specific details or restrictions see this page for more details.
One of the following:
"google"
Link to this property
"lets\_encrypt"
Link to this property
"ssl\_com"
Link to this property
Link to this property
cloudflare\_branding: optional boolean
Whether or not to add Cloudflare Branding for the order. This will add a subdomain of sni.cloudflaressl.com as the Common Name if set to true.
Link to this property
dcv\_delegation\_records: optional array of object {cname, cname\_target, emails, 5 more }
DCV Delegation records for domain validation.
cname: optional string
The CNAME record hostname for DCV delegation.
Link to this property
cname\_target: optional string
The CNAME record target value for DCV delegation.
Link to this property
emails: optional array of string
The set of email addresses that the certificate authority (CA) will use to complete domain validation.
Link to this property
http\_body: optional string
The content that the certificate authority (CA) will expect to find at the http\_url during the domain validation.
Link to this property
http\_url: optional string
The url that will be checked during domain validation.
Link to this property
status: optional string
Status of the validation record.
Link to this property
txt\_name: optional string
The hostname that the certificate authority (CA) will check for a TXT record during domain validation .
Link to this property
txt\_value: optional string
The TXT record that the certificate authority (CA) will check during domain validation.
Link to this property
Link to this property
primary\_certificate: optional string
Identifier of the primary certificate in a pack.
Link to this property
validation\_errors: optional array of object {message }
Domain validation errors that have been received by the certificate authority (CA).
message: optional string
A domain validation error.
Link to this property
Link to this property
validation\_method: optional "txt"or "http"or "email"
Validation Method selected for the order.
One of the following:
"txt"
Link to this property
"http"
Link to this property
"email"
Link to this property
Link to this property
validation\_records: optional array of object {cname, cname\_target, emails, 5 more }
Certificates’ validation records.
cname: optional string
The CNAME record hostname for DCV delegation.
Link to this property
cname\_target: optional string
The CNAME record target value for DCV delegation.
Link to this property
emails: optional array of string
The set of email addresses that the certificate authority (CA) will use to complete domain validation.
Link to this property
http\_body: optional string
The content that the certificate authority (CA) will expect to find at the http\_url during the domain validation.
Link to this property
http\_url: optional string
The url that will be checked during domain validation.
Link to this property
status: optional string
Status of the validation record.
Link to this property
txt\_name: optional string
The hostname that the certificate authority (CA) will check for a TXT record during domain validation .
Link to this property
txt\_value: optional string
The TXT record that the certificate authority (CA) will check during domain validation.
Link to this property
Link to this property
validity\_days: optional 14or 30or 90or 365
Validity Days selected for the order.
One of the following:
14
Link to this property
30
Link to this property
90
Link to this property
365
Link to this property
Link to this property
[Link to this property](<#(resource)%20ssl.certificate_packs%20%3E%20(model)%20certificate_pack_edit_response%20%3E%20(schema)>)
CertificatePackDeleteResponse object {id }
id: optional string
The unique identifier for a certificate\_pack.
Link to this property
[Link to this property](<#(resource)%20ssl.certificate_packs%20%3E%20(model)%20certificate_pack_delete_response%20%3E%20(schema)>)
#### Certificate PacksQuota
##### [Get Certificate Pack Quotas](https://developers.cloudflare.com/api/resources/ssl/subresources/certificate_packs/subresources/quota/methods/get)
GET/zones/{zone\_id}/ssl/certificate\_packs/quota
##### ModelsExpand Collapse
QuotaGetResponse object {advanced }
advanced: optional object {allocated, used }
allocated: optional number
Quantity Allocated.
Link to this property
used: optional number
Quantity Used.
Link to this property
Link to this property
[Link to this property](<#(resource)%20ssl.certificate_packs.quota%20%3E%20(model)%20quota_get_response%20%3E%20(schema)>)