Question regarding tunnel and SSL certificates

Zero Trust Cloudflare Tunnel
1

What is the name of the domain?

example.org

What is the issue you’re encountering

Just asking for information as a new cloudflare user

What are the steps to reproduce the issue?

Hello community, new cloudflare user here. I bought a cloudflare domain and moved all my home services. I have 5 sub-domain and relative A records. Currently, all DNS records point to my home IP so that I have to open 80 and 443 ports on my firewall and then nginx reverse proxy do the rest, handling also for SSL certificate using lets encrypt (certbot). So far, everything is working great.
I’m trying now the cloudflared tunnel functionality so that I can close firewall ports, and I already moved one sub-domain, also there, everything is working great.
I was surprised I dind’t need any certificates, everything work out of the box. Is this because cloudflare already provide certificate for my domain and sub-domain? On SSL/TLS Certificate menu I can see:
Host: *.mydomain.org, mydomain.org
Type: Universal
Expiring: 2024-10-30
So that I already have SSL certificates?
The main question is, does it renew automatically? In previous environment I have a daily cronjob who checks certificate expiration, something like: certbot --renew
How the cloudflare certificate renew works? Do I have to renew them manually?
Thank you, Lucas

2

Hello,

No worries we offer a few different certificates, However I see you have specified it was a universal certificate. These are managed by us as we issued them for your zone.

" By default, Cloudflare issues — and renews — free, unshared, publicly trusted SSL certificates to all domains added to and activated on Cloudflare.

The process for activating a Universal SSL certificate depends on your domain’s DNS setup."