From aad3bc736528aa77b60f0fca488cc8df5e835a34 Mon Sep 17 00:00:00 2001 From: Rebecca Tamachiro Date: Tue, 3 Jun 2025 18:31:50 +0100 Subject: [PATCH 1/2] Remove loop ref to other methods from delegated-dcv --- .../validate-certificates/delegated-dcv.mdx | 15 --------------- 1 file changed, 15 deletions(-) diff --git a/src/content/docs/cloudflare-for-platforms/cloudflare-for-saas/security/certificate-management/issue-and-validate/validate-certificates/delegated-dcv.mdx b/src/content/docs/cloudflare-for-platforms/cloudflare-for-saas/security/certificate-management/issue-and-validate/validate-certificates/delegated-dcv.mdx index 9b1c9dfc905d13d..5f6498e04994f12 100644 --- a/src/content/docs/cloudflare-for-platforms/cloudflare-for-saas/security/certificate-management/issue-and-validate/validate-certificates/delegated-dcv.mdx +++ b/src/content/docs/cloudflare-for-platforms/cloudflare-for-saas/security/certificate-management/issue-and-validate/validate-certificates/delegated-dcv.mdx @@ -17,21 +17,6 @@ DCV Delegation requires your customers to place a one-time record at their autho *** -## When to use - -### HTTP DCV - - - -### TXT DCV - -
- -* [DCV Delegation](#setup) (generally recommended) -* [Manual](/cloudflare-for-platforms/cloudflare-for-saas/security/certificate-management/issue-and-validate/validate-certificates/txt/) - -*** - ## Setup To set up Delegated DCV: From fa49f0b1c1d87017ba198dabce81ee903f2588cf Mon Sep 17 00:00:00 2001 From: Rebecca Tamachiro Date: Tue, 3 Jun 2025 18:36:39 +0100 Subject: [PATCH 2/2] Replace proxy language by hostname status and link for details --- .../issue-and-validate/renew-certificates.mdx | 18 +++++++++++++----- 1 file changed, 13 insertions(+), 5 deletions(-) diff --git a/src/content/docs/cloudflare-for-platforms/cloudflare-for-saas/security/certificate-management/issue-and-validate/renew-certificates.mdx b/src/content/docs/cloudflare-for-platforms/cloudflare-for-saas/security/certificate-management/issue-and-validate/renew-certificates.mdx index 13ae81d8568de77..8054a6ebc890111 100644 --- a/src/content/docs/cloudflare-for-platforms/cloudflare-for-saas/security/certificate-management/issue-and-validate/renew-certificates.mdx +++ b/src/content/docs/cloudflare-for-platforms/cloudflare-for-saas/security/certificate-management/issue-and-validate/renew-certificates.mdx @@ -11,20 +11,28 @@ head: import { Render } from "~/components" -The exact method for certificate renewal depends on whether that hostname is proxying traffic through Cloudflare and whether it is a wildcard certificate. +The exact method for certificate renewal depends on whether that hostname is active[^1] and whether it is a wildcard certificate. Custom hostnames certificates have a 90-day validity period and are available for renewal 30 days before their expiration. ## Non-wildcard hostnames -If you are using a non-wildcard hostname and proxying traffic through Cloudflare, Cloudflare will try to perform DCV automatically on the hostname’s behalf by serving the [HTTP token](/cloudflare-for-platforms/cloudflare-for-saas/security/certificate-management/issue-and-validate/validate-certificates/http/). +If you are using a non-wildcard hostname and the hostname is active, Cloudflare will try to perform DCV automatically on the hostname's behalf by serving the [HTTP token](/cloudflare-for-platforms/cloudflare-for-saas/security/certificate-management/issue-and-validate/validate-certificates/http/). -If the custom hostname is not proxying traffic through Cloudflare, then the custom hostname domain owner will need to add the TXT or HTTP DCV token for the new certificate to validate and issue. As the SaaS provider, you will be responsible for sharing this token with the custom hostname domain owner. +If the custom hostname is not active, then the custom hostname domain owner will need to add the TXT or HTTP DCV token for the new certificate to validate and issue. As the SaaS provider, you will be responsible for sharing this token with the custom hostname domain owner. ## Wildcard hostnames -
+With wildcard hostnames, you cannot use HTTP. In this case, you will have to use TXT DCV tokens. -
+ + + After this step, follow the normal steps for [TXT validation](/cloudflare-for-platforms/cloudflare-for-saas/security/certificate-management/issue-and-validate/validate-certificates/txt/). + +:::note +To allow Cloudflare to auto-renew all future certificate orders, consider [DCV delegation](/cloudflare-for-platforms/cloudflare-for-saas/security/certificate-management/issue-and-validate/validate-certificates/delegated-dcv/). +::: + +[^1]: Meaning Cloudflare could verify your customer's ownership of the hostname and the [hostname status](/cloudflare-for-platforms/cloudflare-for-saas/domain-support/hostname-validation/validation-status/) is active. \ No newline at end of file