I recently purchased a Advanced Edge Certificate for installation on my webserver.
Where can I download this cert to import it on the webserver?
Thanks
You have probably misunderstood something. Advanced Certificates aren’t for your webserver, they are deployed on Cloudflare’s Edge.
If you need a certificate for your webserver, you can get an Origin Certificate.
1 Like
The problem I have is, I cant install 2 certificates on my webserver.
I have the origin certificate installed, but I need an public externally facing certificate for my email of me webserver (mail.domain.com).
Right now, with the Origin CA installed, my emails are failing SSL. If I install the old certificate for my domain which is still valid, then cloudflare fails TLS with Strict TLS enabled.
How can I fix this?
Thanks
If the certificate was valid, then Full (strict) shouldn’t be failing. What kind of certificate is this, and which hostnames does it cover? When does it expire?
Cloudflare’s Origin Certificate cannot be used for email, so you’ll have to get a valid and publicly trusted certificate from somewhere else, for example LetsEncrypt.
Many hosting providers support LetsEncrypt, though it does require additional configuration in Cloudflare to allow ACME HTTP challenges to reach your server in most cases.
1 Like
Thanks,
So just so im on the same page with this.
If I have a Publicly signed certificate from a trusted CA on my website. Can I enabled Full / Strict SSL Encryption Mode in cloudflare with having to install a Origin CA?
Thanks
Yes, publicly trusted certificates work with Full (Strict).
Thanks,
And I cannot purchase a new public certificate when mine expires from Cloudflare correct?
Can you please rephrase the question? I don’t understand what you are asking.
Sure,
Can I purchase a publically signed cert from a trusted CA from within cloudflare for use with my server?
You do not normally ever purchase a publicly trusted certificate from Cloudflare, so your question does not make sense.
2 Likes