4 ms·

Google CA can now be used with Cloudflare Certificate Manager

• xyzzy_plugh 4y ago
  I'm unfamiliar with this product/feature, but does this mean I can choose which CA mints my cert? Or is this just a pool of CAs Cloudflare can draw certs issuance from?
  • epberry 4y ago
    My understanding is that you can now have TLS compatibility with all google products through https://pki.goog/ https://pki.goog/ Tweet where I saw this: https://twitter.com/rmhrisk/status/1552357227301744640 https://twitter.com/rmhrisk/status/1552357227301744640
  • tomklein 4y ago
    Google now has a publicly available ACME-compatible CA. For CF’s Universal SSL (default/free) Cloudflare may use Google’s CA. But may choose other providers. For Advanced Certificate Manager (paid addon), you can choose Google or other CAs for Cloudflare. But basically Google would be the one that is issuing an SSL cert for a website. Same as LetsEncrypt. Disclaimer: CF employee
  • kc10 4y ago
    If your site uses Universal SSL ($0/month), Cloudflare automatically picks a CA for you (most likely Let's Encrypt). The Advanced Certificate Manager ($10/month) SKU allows you to pick a CA. There are few other options available. https://developers.cloudflare.com/ssl/edge-certificates/advanced-certificate-manager/ https://developers.cloudflare.com/ssl/edge-certificates/adva...