Disable Universal SSL certificates
Some customers may need to manage their own SSL certificates or rely on specific Certificate Authorities.
If you disable your domain’s Universal SSL certificate, Cloudflare removes that certificate from our network and will not order or renew any additional Universal SSL certificates.
Potential errors
To avoid errors with your domain, either upload a custom certificate or purchase Advanced Certificate Manager before disabling Universal SSL.
If you disable Universal SSL, you may experience errors with the following scenarios:
-
Enabled features:
-
Other setups:
- Page rules that redirect traffic to HTTPS
- HTTP to HTTPS redirects at your origin web server
Disable Universal SSL certificate
Before you disable Universal SSL/TLS, make sure you have uploaded a custom certificate or purchased Advanced Certificate Manager to protect your domain.
To disable Universal SSL in the dashboard:
- Log in to the Cloudflare dashboard and select your account.
- Select your domain.
- Go to SSL/TLS > Edge Certificates.
- For Disable Universal SSL, select Disable Universal SSL.
- Read the warnings in the Acknowledgement.
- Select I Understand and select Confirm.
To disable Universal SSL with the Cloudflare API, send a
PATCH request and include the "enabled": false parameter.
Re-enable Universal SSL
To re-enable Universal SSL in the dashboard:
- Log in to the Cloudflare dashboard and select your account.
- Select your domain.
- Go to SSL/TLS > Edge Certificates.
- For Disable Universal SSL, select Enable Universal SSL.
To re-enable Universal SSL with the Cloudflare API, send a
PATCH request and include the "enabled": true parameter.