We want to buy a wildcard certificate and thought it’d make sense to buy from Cloudflare as we use them for our DNS.
However, it is not clear if certificates we purchase can be exported (to be used directly by our servers/products) or if they are just for use on Cloudflare systems?
I tried calling sales, but its just going to voicemail.
Cloudflare doesn’t sell SSL certificates. You also cannot export the edge certificates generated by Cloudflare.
If you use Cloudflare’s CDN (proxied DNS records), you can generate a free SSL certificate for use between Cloudflare and your origin server. This certificate will only be valid for securing traffic between Cloudflare and your origin server. Please see Origin CA certificates · Cloudflare SSL/TLS docs.
If you need a publicly trusted SSL certificate (for an unproxied DNS record), I’d recommend getting a free one from Let’s Encrypt rather than paying a company to do a bit of math.
I think Let’s encyrpt’s only last three months so add an administrative overhead for the main wildcard, we do use them for non-prod and our AWS bits use them automatically.
(I do use a powersell script called acme to make let’s encrypts as quck as possible by called abgaist the Cloudflare api for the “dns proof” part of the process)