Skip to content

Commit fa49f0b

Browse files
Replace proxy language by hostname status and link for details
1 parent aad3bc7 commit fa49f0b

File tree

1 file changed

+13
-5
lines changed
  • src/content/docs/cloudflare-for-platforms/cloudflare-for-saas/security/certificate-management/issue-and-validate

1 file changed

+13
-5
lines changed

src/content/docs/cloudflare-for-platforms/cloudflare-for-saas/security/certificate-management/issue-and-validate/renew-certificates.mdx

Lines changed: 13 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -11,20 +11,28 @@ head:
1111

1212
import { Render } from "~/components"
1313

14-
The exact method for certificate renewal depends on whether that hostname is proxying traffic through Cloudflare and whether it is a wildcard certificate.
14+
The exact method for certificate renewal depends on whether that hostname is active[^1] and whether it is a wildcard certificate.
1515

1616
Custom hostnames certificates have a 90-day validity period and are available for renewal 30 days before their expiration.
1717

1818
## Non-wildcard hostnames
1919

20-
If you are using a non-wildcard hostname and proxying traffic through Cloudflare, Cloudflare will try to perform DCV automatically on the hostnames behalf by serving the [HTTP token](/cloudflare-for-platforms/cloudflare-for-saas/security/certificate-management/issue-and-validate/validate-certificates/http/).
20+
If you are using a non-wildcard hostname and the hostname is active, Cloudflare will try to perform DCV automatically on the hostname's behalf by serving the [HTTP token](/cloudflare-for-platforms/cloudflare-for-saas/security/certificate-management/issue-and-validate/validate-certificates/http/).
2121

22-
If the custom hostname is not proxying traffic through Cloudflare, then the custom hostname domain owner will need to add the TXT or HTTP DCV token for the new certificate to validate and issue. As the SaaS provider, you will be responsible for sharing this token with the custom hostname domain owner.
22+
If the custom hostname is not active, then the custom hostname domain owner will need to add the TXT or HTTP DCV token for the new certificate to validate and issue. As the SaaS provider, you will be responsible for sharing this token with the custom hostname domain owner.
2323

2424
## Wildcard hostnames
2525

26-
<Render file="txt-validation_preamble" /> <br/>
26+
With wildcard hostnames, you cannot use HTTP. In this case, you will have to use TXT DCV tokens.
2727

28-
<Render file="update-dcv-method" /> <br/>
28+
<Render file="txt-validation_preamble" />
29+
30+
<Render file="update-dcv-method" />
2931

3032
After this step, follow the normal steps for [TXT validation](/cloudflare-for-platforms/cloudflare-for-saas/security/certificate-management/issue-and-validate/validate-certificates/txt/).
33+
34+
:::note
35+
To allow Cloudflare to auto-renew all future certificate orders, consider [DCV delegation](/cloudflare-for-platforms/cloudflare-for-saas/security/certificate-management/issue-and-validate/validate-certificates/delegated-dcv/).
36+
:::
37+
38+
[^1]: Meaning Cloudflare could verify your customer's ownership of the hostname and the [hostname status](/cloudflare-for-platforms/cloudflare-for-saas/domain-support/hostname-validation/validation-status/) is active.

0 commit comments

Comments
 (0)