Skip to content

Update uploading.mdx #25518

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 1 commit into from
Oct 7, 2025
Merged

Update uploading.mdx #25518

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
36 changes: 19 additions & 17 deletions src/content/docs/ssl/edge-certificates/custom-certificates/uploading.mdx
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -12,6 +12,7 @@ import {
TabItem,
Tabs,
APIRequest,
DashButton,
} from "~/components";

This page lists Cloudflare requirements for custom certificates and explains how to upload and update these certificates using Cloudflare dashboard or API.
Expand Down Expand Up @@ -50,35 +51,33 @@ When using `compatible` or `modern` [bundling](/ssl/edge-certificates/custom-cer

To upload a custom SSL certificate in the dashboard:

1. Log in to the [Cloudflare dashboard](https://dash.cloudflare.com) and select your account.
1. In the Cloudflare dashboard, go to the SSL/TLS **Edge Certificates** page.

2. Select your application.
<DashButton url="/?to=/:account/:zone/ssl-tls/edge-certificates" />

3. Go to **SSL/TLS**.
2. In **Edge Certificates**, select **Upload Custom SSL Certificate**.

4. In **Edge Certificates**, select **Upload Custom SSL Certificate**.

5. Copy and paste relevant values into **SSL Certificate** and **Private key** text areas (or select **Paste from file**).
3. Copy and paste relevant values into **SSL Certificate** and **Private key** text areas (or select **Paste from file**).

:::note
If doing this manually, include the `---BEGIN CERTIFICATE---` and `---END CERTIFICATE---` like the placeholder text.
:::

6. Choose the appropriate [**Bundle Method**](/ssl/edge-certificates/custom-certificates/bundling-methodologies/).
4. Choose the appropriate [**Bundle Method**](/ssl/edge-certificates/custom-certificates/bundling-methodologies/).

7. Select a value for [**Private Key Restriction**](/ssl/edge-certificates/custom-certificates/#geo-key-manager-private-key-restriction).
5. Select a value for [**Private Key Restriction**](/ssl/edge-certificates/custom-certificates/#geo-key-manager-private-key-restriction).

8. Select a value for **Legacy Client Support**, which specifies <GlossaryTooltip term="Server Name Indication (SNI)" link="/ssl/reference/browser-compatibility/#non-sni-support">Server Name Indication (SNI)</GlossaryTooltip> support:
6. Select a value for **Legacy Client Support**, which specifies <GlossaryTooltip term="Server Name Indication (SNI)" link="/ssl/reference/browser-compatibility/#non-sni-support">Server Name Indication (SNI)</GlossaryTooltip> support:
- **Modern (recommended)**: SNI only
- **Legacy**: Supports non-SNI
:::caution

Custom certificates of the type `legacy_custom` are not compatible with [BYOIP](/byoip/).
:::

9. Select **Upload Custom Certificate**. If you see an error for `The key you provided does not match the certificate`, contact your Certificate Authority to ensure the private key matches the certificate.
7. Select **Upload Custom Certificate**. If you see an error for `The key you provided does not match the certificate`, contact your Certificate Authority to ensure the private key matches the certificate.

10. (optional) [Add a CAA DNS record](/ssl/edge-certificates/caa-records/).
8. (optional) [Add a CAA DNS record](/ssl/edge-certificates/caa-records/).

</TabItem>

Expand Down Expand Up @@ -176,12 +175,15 @@ Replacing a custom certificate following these steps does not lead to any downti

To update a certificate in the dashboard:

1. Log in to the [Cloudflare dashboard](https://dash.cloudflare.com) and select your account.
2. Select your application.
3. Go to **SSL/TLS**.
4. In **Edge Certificates**, locate a custom certificate.
5. Select the wrench icon and select **Replace SSL certificate and key**.
6. Follow the same steps as [upload a new certificate](#upload-a-custom-certificate).
1. In the Cloudflare dashboard, go to the SSL/TLS **Edge Certificates** page.

<DashButton url="/?to=/:account/:zone/ssl-tls/edge-certificates" />

2. In **Edge Certificates**, locate a custom certificate and click on it to expand.

3. Select the wrench icon and select **Replace SSL certificate and key**.

4. Follow the same steps as [upload a new certificate](#upload-a-custom-certificate).

</TabItem> <TabItem label="API">

Expand Down
Loading