WebPerf Cloudflare Dedicated SSL Certificates

eva2000 · Oct 1, 2016

Cloudflare has more goodies for us including dedicated SSL certificates Dedicated SSL Certificates so you don't share the displayed SANS common name with other Cloudflare domains etc.

More control and personalization
But along the way we heard from customers who wanted more control over the certificates used for their domains. They want control of when they’re issued, whether other customers’ (or Cloudflare’s) hostnames appear on them, the breadth of subdomains they protect and which SSL/TLS versions and encryption options they support.

In short, customers want a service that provides a non-shared, customizable certificate for their domain.

Perhaps the most common request we heard was "I love your Universal SSL product, but how can I use it on my website in a way that the certificate shows my domain name instead of cloudflaressl.com? And how can I prevent the certificate from being shared with other customers (all without upgrading my plan)?".

A close second was “Why do I have to disable Cloudflare on my extra.long.name.example.com or risk my users experiencing browser errors? Your Universal SSL certificates cover only one level of wildcard but I also want my hosts at *.staging.example.com protected.”
Click to expand...

Dedicated SSL
Today we’re excited to announce two new products to meet all of these needs and many more to come: Dedicated SSL Certificates and Dedicated SSL Certificates with Custom Hostnames. These new certificate offerings are issued on-demand, with a new private key generated exclusively for your domain, and branded prominently with your domain name.
Click to expand...

eva2000 · Oct 1, 2016

And the price

Sounds great. How do I order one?
The process is incredibly easy and quick. Simply log in to the Cloudflare Dashboard, click on the Crypto tab, and then click the "Order SSL Certificate" button. You’ll be asked whether you need to add custom hostnames, given a chance to input them, and then confirm your billing information. The cost for a Dedicated Certificate is $5 per month and the cost of a Dedicated Certificate with Custom Hostnames is $10 per month.
Click to expand...

eva2000 · Oct 1, 2016

I have a Universal SSL certificate, a Dedicated Certificate, a Dedicated Certificate with Custom Hostnames, and an Uploaded Certificate all listed in the dashboard. Which one will be served to my web visitors?
Certificates are served in the following priority order (from highest to lowest):

Uploaded Certificates

Dedicated Certificates with Custom Hostnames

Dedicated Certificates

Universal Certificates

However, if the highest priority certificate doesn’t have a hostname matching the incoming request, we’ll move on to the next certificate. If none of the certificates can handle the request, e.g., you’re serving traffic at www.staging.example.com but haven’t purchased a Dedicated Certificate with Custom Hostnames (or uploaded a certificate to a Business or Enterprise plan), your users will see an error.

How do Dedicated Certificates differ from Let's Encrypt or another CA?
Cloudflare works with Let's Encrypt (and other CA certificates) in two ways: you can upload a Let's Encrypt certificate and we will serve it to your visitors, and when we make a connection to your origin server you can use a Let's Encrypt certificate to secure the connection.

Cloudflare's Dedicated Certificates totally automates the process of acquiring and distributing a certificate and has added advantages over using a third-party certificate.

We optimize the certificate chain to maximize compatibility with browsers/user agents, and deploy multiple versions of your certificate—SHA-2/ECDSA, SHA-2/RSA, and SHA-1/RSA—in a certificate pack. Based on the capabilities of the browser sending each incoming request, we’ll serve the most optimal certificate for that connection.

We support both custom names on the certificate and wildcard records (at multiple levels).

We handle renewal automatically and distributed renewed certificates without any work required by you.

How do Dedicated Certificates relate to Origin CA certificates?
Dedicated Certificates encrypt traffic between your visitors’ web browsers and Cloudflare, while Origin CA certificates encrypt traffic between Cloudflare and your (origin) server.

When a user connects to your site hosted on Cloudflare, e.g., https://www.example.com, a Dedicated Certificate will be used if it exists. When we need to fetch data from your origin server, we’ll look for an Origin CA (or other) certificate on your origin.

The two offerings are complementary and should be used together with Strict mode to create a validated, end-to-end encrypted connection.

Can I put multiple domains on my Dedicated Certificate?
No, these certificates are branded with the Common Name (CN) of the domain under which you placed the order. All custom hostnames or wildcard entries added must be subdomains of this parent zone.

If you would like a Dedicated Certificate for another domain, simply switch to that zone using the "Select Website" dropdown in the top-left corner of the Cloudflare Dashboard.
Click to expand...

SeaTea · Oct 1, 2016

So uploading your own letsencrypt certificate is only possible with Business ($200/month) or higher plan ?

eva2000 · Oct 17, 2016

yeah business or higher plans Our Plans | Cloudflare

Log in / Register

Forums

Welcome to Centmin Mod Community

WebPerf Cloudflare Dedicated SSL Certificates

eva2000 Administrator Staff Member

eva2000 Administrator Staff Member

eva2000 Administrator Staff Member

SeaTea Member

eva2000 Administrator Staff Member

.

Log in / Register

Useful Searches

Welcome to Centmin Mod Community

WebPerf Cloudflare Dedicated SSL Certificates

eva2000 Administrator Staff Member

eva2000 Administrator Staff Member

eva2000 Administrator Staff Member

SeaTea Member

eva2000 Administrator Staff Member

.