---
description: Manage SSL/TLS certificates for encrypted connections between visitors, Cloudflare, and your origin server.
title: Cloudflare SSL/TLS
image: https://developers.cloudflare.com/og-docs.png
---

[Skip to content](#main-content)

> Documentation Index  
> Fetch the complete documentation index at: https://developers.cloudflare.com/ssl/llms.txt  
> Use this file to discover all available pages before exploring further.

# Cloudflare SSL/TLS

Last updated Aug 25, 2026|Copy as Markdown|[View as Markdown](https://sm-rtk-allowlist-page.previews.developers.cloudflare.com/ssl/index.md)|[Agent setup](https://sm-rtk-allowlist-page.previews.developers.cloudflare.com/agent-setup/)

Encrypt your web traffic to prevent data theft and other tampering.

Available on all plans

SSL/TLS certificates encrypt traffic between visitors and your website, preventing eavesdropping and data tampering. Because Cloudflare sits between your visitors and your origin server, two certificates can be involved in a single request: an [edge certificate](https://sm-rtk-allowlist-page.previews.developers.cloudflare.com/ssl/concepts/#edge-certificate) (visitor to Cloudflare) and an [origin certificate](https://sm-rtk-allowlist-page.previews.developers.cloudflare.com/ssl/concepts/#origin-certificate) (Cloudflare to your server).

Cloudflare automatically issues free certificates through [Universal SSL](https://sm-rtk-allowlist-page.previews.developers.cloudflare.com/ssl/edge-certificates/universal-ssl/) and offers additional options for custom certificate management. Refer to [Get started](https://sm-rtk-allowlist-page.previews.developers.cloudflare.com/ssl/get-started/) to set up SSL/TLS for your domain.

---

## Features

[Total TLS](https://sm-rtk-allowlist-page.previews.developers.cloudflare.com/ssl/edge-certificates/additional-options/total-tls/)

Universal SSL covers your apex domain and first-level subdomains. Total TLS extends that coverage by automatically issuing certificates for proxied hostnames at any subdomain level.

Use Total TLS

[Delegated DCV](https://sm-rtk-allowlist-page.previews.developers.cloudflare.com/ssl/edge-certificates/changing-dcv-method/methods/delegated-dcv/)

Before issuing a certificate, a certificate authority (CA) must verify you control the domain. If you manage DNS outside of Cloudflare, you can delegate this verification to Cloudflare so certificate renewals happen automatically.

Use Delegated DCV

[Custom TLS settings](https://sm-rtk-allowlist-page.previews.developers.cloudflare.com/ssl/edge-certificates/additional-options/minimum-tls/)

Specify the minimum TLS version that visitors must use to connect to your website or application, and [restrict cipher suites](https://sm-rtk-allowlist-page.previews.developers.cloudflare.com/ssl/edge-certificates/additional-options/cipher-suites/customize-cipher-suites/)to meet compliance or security requirements.

Use Custom TLS settings

---

## Related products

[Cloudflare DNS](https://sm-rtk-allowlist-page.previews.developers.cloudflare.com/dns/)

When you use Cloudflare DNS, all DNS queries for your domain are answered by Cloudflare's global anycast network. This network delivers performance and global availability.

[Cloudflare for SaaS](https://sm-rtk-allowlist-page.previews.developers.cloudflare.com/cloudflare-for-platforms/cloudflare-for-saas/)

Cloudflare for SaaS allows you to extend the security and performance benefits of Cloudflare's network to your customers via their own custom or vanity domains.

Was this helpful?

YesNo

## On this page

[![](https://sm-rtk-allowlist-page.previews.developers.cloudflare.com/_astro/logo.te5VL_aD.svg)Docs](https://sm-rtk-allowlist-page.previews.developers.cloudflare.com/)

```json
{"@context":"https://schema.org","@type":"WebPage","@id":"https://developers.cloudflare.com/ssl/#page","headline":"Overview · Cloudflare SSL/TLS docs","description":"Manage SSL/TLS certificates for encrypted connections between visitors, Cloudflare, and your origin server.","url":"https://developers.cloudflare.com/ssl/","inLanguage":"en","image":"https://developers.cloudflare.com/og-docs.png","dateModified":"2026-08-25","publisher":{"@type":"Organization","name":"Cloudflare","description":"One platform for your apps, agents, and workforce. Build, secure, and scale without managing infrastructure","url":"https://www.cloudflare.com/","sameAs":["https://github.com/cloudflare","https://www.linkedin.com/company/cloudflare","https://x.com/cloudflare"],"logo":{"@type":"ImageObject","url":"https://developers.cloudflare.com/logo.svg"},"address":{"@type":"PostalAddress","streetAddress":"101 Townsend St","addressLocality":"San Francisco","addressRegion":"CA","postalCode":"94107","addressCountry":"US"},"contactPoint":[{"@type":"ContactPoint","contactType":"Customer Support","url":"https://support.cloudflare.com/","availableLanguage":["English"]},{"@type":"ContactPoint","contactType":"Sales","url":"https://www.cloudflare.com/contact/","availableLanguage":["English"]}]},"isPartOf":{"@type":"WebSite","@id":"https://developers.cloudflare.com/#website","name":"Cloudflare Docs","url":"https://developers.cloudflare.com/"}}
```