Skip to content

Commit 0279c86

Browse files
Make CA distiction less wordy and use parallelism for clarity
1 parent c63428b commit 0279c86

File tree

1 file changed

+4
-5
lines changed
  • src/content/docs/ssl/client-certificates

1 file changed

+4
-5
lines changed

src/content/docs/ssl/client-certificates/index.mdx

Lines changed: 4 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -20,13 +20,12 @@ For a broader overview of mTLS at Cloudflare refer to [learning paths](/learning
2020

2121
## Scope
2222

23-
Cloudflare validates client certificates with one CA, set at account level. This means that these certificates can be used for validation across multiple zones/domains (`example.com`), as long as the zones are under the same account and mTLS has been enabled for the requested hosts (`host.example.com`).
23+
Cloudflare validates client certificates with one CA, set at account level. This means that these certificates can be used for validation across multiple zones/domains (`example.com`), as long as the zones are under the same Cloudflare account and mTLS has been enabled for the requested hosts (`host.example.com`).
2424

25-
If you use the Cloudflare-managed CA, client certificates that you create can be used with hosts in any zone/domain that belongs to your Cloudflare account. If you [bring your own CA](/ssl/client-certificates/byo-ca/), it will be set at account level and you can associate it with hosts in different zones/domains.
25+
The account-level CA can be either:
2626

27-
:::note
28-
Bring your own CA (BYOCA) is API-only and certificates or host associations will **not** show up on your dashboard.
29-
:::
27+
- The Cloudflare-managed CA: This is the default option. Certificates and hostname associations are listed on your [dashboard](https://dash.cloudflare.com/?to=/:account/:zone/ssl-tls/client-certificates/).
28+
- A [BYOCA](/ssl/client-certificates/byo-ca/) certificate: This is an API-only option, available on Enterprise accounts. Certificates and hostnames associations are **not** listed on your [dashboard](https://dash.cloudflare.com/?to=/:account/:zone/ssl-tls/client-certificates/).
3029

3130
## Use cases
3231

0 commit comments

Comments
 (0)