Cloudflare Edge Certificates Renewal

Require Information

• Zone ID
  In Domain Overview
• Email
• Global API_Key
  In My Profile –> api-tokens
• Certificate Authority
  • digicert  (Soon To Be Deprecated)
  • google (RSA Certificate)
  • lets_encrypt (ECC Certificate)

Zone_ID="xxxxxxxxxxxxxxxxxxxx"
Email="[email protected]"
Global_API_Key="xxxxxxxxxxxxxxxxx"
Certificate_Authority="lets_encrypt"

curl -X PATCH "https://api.cloudflare.com/client/v4/zones/${Zone_ID}/ssl/universal/settings" \
  -H "Content-Type: application/json" \
  -H "X-Auth-Email: ${Email}" \
  -H "X-Auth-Key: ${Global_API_Key}" \
  --data "{"certificate_authority":"${Certificate_Authority}"}"

Troubleshoot

• Remove Any “_acme-challenge” In DNS Records
• Disable DNSSEC In DNS Records Setting