Skip to content
Closed
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Original file line number Diff line number Diff line change
Expand Up @@ -49,10 +49,6 @@ To disable Universal SSL with the Cloudflare API, send a [`PATCH`](/api/resource

</TabItem> </Tabs>

:::note
Even with Universal SSL disabled, some features such as [AMP Real URL](/speed/optimization/other/amp-real-url/) and [Signed Exchanges](/speed/optimization/other/signed-exchanges/) will still provision certificates for your domain.
:::

## Re-enable Universal SSL

<Tabs syncKey="dashPlusAPI"> <TabItem label="Dashboard">
Expand Down
10 changes: 3 additions & 7 deletions src/content/partials/ssl/caa-records-added-by-cf.mdx
Original file line number Diff line number Diff line change
Expand Up @@ -3,14 +3,10 @@

---

Cloudflare adds CAA records automatically in two situations:
Cloudflare adds CAA records automatically in the following situations:

* When you have [Universal SSL](/ssl/edge-certificates/universal-ssl/) or [advanced certificates](/ssl/edge-certificates/advanced-certificate-manager/) and add any CAA records to your zone.
* When you have [Universal SSL](/ssl/edge-certificates/universal-ssl/) enabled and enable [AMP Real URL](/speed/optimization/other/amp-real-url/) or [Signed exchanges (SXG)](/speed/optimization/other/signed-exchanges/).

:::caution[Deprecation notice]
AMP Real URL and Signed exchanges (SXG) are being deprecated and will be removed on October 20, 2025.
:::
- When you have [Universal SSL](/ssl/edge-certificates/universal-ssl/) and add any CAA records to your zone.
- When you have [advanced certificates](/ssl/edge-certificates/advanced-certificate-manager/) and add any CAA records to your zone.

These records make sure Cloudflare can still issue Universal certificates on your behalf.

Expand Down