Cloudflare Certificate Pack

Order an advanced edge certificate for a Cloudflare zone — a publicly-trusted TLS certificate, auto-renewed by Cloudflare, covering the hostnames you choose.

What Gets Created

  • A cloudflare_certificate_pack (type advanced) for the zone's hostnames.

Prerequisites

  • A CloudflareDnsZone (or an existing zone ID).
  • A Cloudflare API token with SSL and Certificates permission.
  • Advanced Certificate Manager enabled on the zone.

Configuration Reference

Required

  • zoneId — the zone the certificate is ordered for.
  • certificateAuthority — google, lets_encrypt, or ssl_com.
  • validationMethod — txt, http, or email.
  • validityDays — 14, 30, 90, or 365.
  • hosts — covered hostnames (must include the zone apex).

Optional

  • type — advanced (default).
  • cloudflareBranding — add Cloudflare branding to the order.

Stack Outputs

OutputDescription
certificate_pack_idThe certificate pack identifier
statusThe order/issuance status
primary_certificateThe primary certificate identifier

Related Components

  • CloudflareDnsZone

Next article

CloudflareRuleset — Technical Deep Dive

CloudflareRuleset — Technical Deep Dive What Are Cloudflare Rulesets? Rulesets are the unified rule engine powering Cloudflare's security, performance, and traffic management features. Every Cloudflare feature that evaluates rules — WAF, Cache Rules, Origin Rules, Redirect Rules, Transform Rules — uses the same underlying Ruleset API. Each ruleset executes during a specific phase of Cloudflare's HTTP request/response pipeline. A ruleset contains an ordered list of rules. Each rule has: A...
Read next article