Certificate chain for AWS ACM using Cloudflare

[afern247]

I’m trying to Import a certificate from Cloudflare using the AWS Web UI and I’m stock in this page:

I read that the equivalent in Cloudflare to Certificate Chain is Origin Certificates (not 100% sure on this), so I created one and chose the RSA certificate and when I try to finish the import in AWS it says:

Could not validate the certificate with the certificate chain. Choose Previous button below and fix it.

Anyone knows what’s the problem?

Thanks

[sdayman]

Did you try one of these? (Root Cert)
https://support.cloudflare.com/hc/en-us/articles/115000479507-Managing-Cloudflare-Origin-CA-certificates#h_30cc332c-8f6e-42d8-9c59-6c1f06650639

[afern247]

Yep, I’ve been in that page for a little while, it suggests using the Origin CA. I tried using the Origin Certificate, not the private key and I get the error described above

[sdayman]

You keep saying “Origin” certificate, but have yet to mention the Root cert I linked to.

[afern247]

Oh I see, I thought it was the same, so do I generate that root certificate or do I copy the one provided in that Doc? The Cloudflare Origin CA — RSA Root

EDIT: Even copy/pasting that root certificate from that documentation it says:
Could not validate the certificate with the certificate chain. Choose Previous button below and fix it.

[afern247]

Ok I found the issue, I had created a Client CE and that’s what I was using, I read on the description that it was the one used to authenticate APIs in clients so it made sence. Anyway, resolution:

All 3 CE has to be ORIGIN and the root is from this page

Thanks for all the help