Google CA can now be used with Cloudflare Certificate Manager(github.com)

12 pointsby epberryvor 4 Jahren4 comments

Google CA can now be used with Cloudflare Certificate Manager

https://github.com/cloudflare/cloudflare-docs/commit/f4def3fe0bd8fa8605bf47c55a5522da482e9cd7

1 comments

I'm unfamiliar with this product/feature, but does this mean I can choose which CA mints my cert? Or is this just a pool of CAs Cloudflare can draw certs issuance from?

tomkleinvor 4 Jahren

Google now has a publicly available ACME-compatible CA. For CF’s Universal SSL (default/free) Cloudflare may use Google’s CA. But may choose other providers. For Advanced Certificate Manager (paid addon), you can choose Google or other CAs for Cloudflare.

But basically Google would be the one that is issuing an SSL cert for a website. Same as LetsEncrypt.

Disclaimer: CF employee

kc10vor 4 Jahren

If your site uses Universal SSL ($0/month), Cloudflare automatically picks a CA for you (most likely Let's Encrypt).

The Advanced Certificate Manager ($10/month) SKU allows you to pick a CA. There are few other options available. https://developers.cloudflare.com/ssl/edge-certificates/adva...

epberryvor 4 Jahren

My understanding is that you can now have TLS compatibility with all google products through https://pki.goog/

Tweet where I saw this: https://twitter.com/rmhrisk/status/1552357227301744640