1. Packages
  2. Cloudflare Provider
  3. API Docs
  4. CertificatePack
Cloudflare v6.12.0 published on Wednesday, Dec 24, 2025 by Pulumi
Schema (JSON)
pulumi/pulumi-cloudflare

cloudflare.CertificatePack

cloudflare logo
Cloudflare v6.12.0 published on Wednesday, Dec 24, 2025 by Pulumi
Schema (JSON)
pulumi/pulumi-cloudflare

    Certificate packs are not able to be updated in place. If you require a zero downtime rotation, you can create multiple resources using a 2-phase change where you have both resources live at once and you remove the old one once you’ve confirmed the certificate is available.

    Example Usage

    import * as pulumi from "@pulumi/pulumi";
import * as cloudflare from "@pulumi/cloudflare";

const exampleCertificatePack = new cloudflare.CertificatePack("example_certificate_pack", {
    zoneId: "023e105f4ecef8ad9ca31a8372d0c353",
    certificateAuthority: "lets_encrypt",
    hosts: [
        "example.com",
        "*.example.com",
        "www.example.com",
    ],
    type: "advanced",
    validationMethod: "txt",
    validityDays: 14,
    cloudflareBranding: false,
});

    import pulumi
import pulumi_cloudflare as cloudflare

example_certificate_pack = cloudflare.CertificatePack("example_certificate_pack",
    zone_id="023e105f4ecef8ad9ca31a8372d0c353",
    certificate_authority="lets_encrypt",
    hosts=[
        "example.com",
        "*.example.com",
        "www.example.com",
    ],
    type="advanced",
    validation_method="txt",
    validity_days=14,
    cloudflare_branding=False)

    package main

import (
	"github.com/pulumi/pulumi-cloudflare/sdk/v6/go/cloudflare"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := cloudflare.NewCertificatePack(ctx, "example_certificate_pack", &cloudflare.CertificatePackArgs{
			ZoneId:               pulumi.String("023e105f4ecef8ad9ca31a8372d0c353"),
			CertificateAuthority: pulumi.String("lets_encrypt"),
			Hosts: pulumi.StringArray{
				pulumi.String("example.com"),
				pulumi.String("*.example.com"),
				pulumi.String("www.example.com"),
			},
			Type:               pulumi.String("advanced"),
			ValidationMethod:   pulumi.String("txt"),
			ValidityDays:       pulumi.Int(14),
			CloudflareBranding: pulumi.Bool(false),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Cloudflare = Pulumi.Cloudflare;

return await Deployment.RunAsync(() => 
{
    var exampleCertificatePack = new Cloudflare.CertificatePack("example_certificate_pack", new()
    {
        ZoneId = "023e105f4ecef8ad9ca31a8372d0c353",
        CertificateAuthority = "lets_encrypt",
        Hosts = new[]
        {
            "example.com",
            "*.example.com",
            "www.example.com",
        },
        Type = "advanced",
        ValidationMethod = "txt",
        ValidityDays = 14,
        CloudflareBranding = false,
    });

});

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.cloudflare.CertificatePack;
import com.pulumi.cloudflare.CertificatePackArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var exampleCertificatePack = new CertificatePack("exampleCertificatePack", CertificatePackArgs.builder()
            .zoneId("023e105f4ecef8ad9ca31a8372d0c353")
            .certificateAuthority("lets_encrypt")
            .hosts(            
                "example.com",
                "*.example.com",
                "www.example.com")
            .type("advanced")
            .validationMethod("txt")
            .validityDays(14)
            .cloudflareBranding(false)
            .build());

    }
}

    resources:
  exampleCertificatePack:
    type: cloudflare:CertificatePack
    name: example_certificate_pack
    properties:
      zoneId: 023e105f4ecef8ad9ca31a8372d0c353
      certificateAuthority: lets_encrypt
      hosts:
        - example.com
        - '*.example.com'
        - www.example.com
      type: advanced
      validationMethod: txt
      validityDays: 14
      cloudflareBranding: false

    Create CertificatePack Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new CertificatePack(name: string, args: CertificatePackArgs, opts?: CustomResourceOptions);
    @overload
def CertificatePack(resource_name: str,
                    args: CertificatePackArgs,
                    opts: Optional[ResourceOptions] = None)

@overload
def CertificatePack(resource_name: str,
                    opts: Optional[ResourceOptions] = None,
                    certificate_authority: Optional[str] = None,
                    type: Optional[str] = None,
                    validation_method: Optional[str] = None,
                    validity_days: Optional[int] = None,
                    zone_id: Optional[str] = None,
                    cloudflare_branding: Optional[bool] = None,
                    hosts: Optional[Sequence[str]] = None)
    func NewCertificatePack(ctx *Context, name string, args CertificatePackArgs, opts ...ResourceOption) (*CertificatePack, error)
    public CertificatePack(string name, CertificatePackArgs args, CustomResourceOptions? opts = null)
    public CertificatePack(String name, CertificatePackArgs args)
public CertificatePack(String name, CertificatePackArgs args, CustomResourceOptions options)

    type: cloudflare:CertificatePack
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

    Parameters

    name string
    The unique name of the resource.
    args CertificatePackArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args CertificatePackArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args CertificatePackArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args CertificatePackArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args CertificatePackArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Constructor example

    The following reference example uses placeholder values for all input properties.

    var certificatePackResource = new Cloudflare.CertificatePack("certificatePackResource", new()
{
    CertificateAuthority = "string",
    Type = "string",
    ValidationMethod = "string",
    ValidityDays = 0,
    ZoneId = "string",
    CloudflareBranding = false,
    Hosts = new[]
    {
        "string",
    },
});

    example, err := cloudflare.NewCertificatePack(ctx, "certificatePackResource", &cloudflare.CertificatePackArgs{
	CertificateAuthority: pulumi.String("string"),
	Type:                 pulumi.String("string"),
	ValidationMethod:     pulumi.String("string"),
	ValidityDays:         pulumi.Int(0),
	ZoneId:               pulumi.String("string"),
	CloudflareBranding:   pulumi.Bool(false),
	Hosts: pulumi.StringArray{
		pulumi.String("string"),
	},
})

    var certificatePackResource = new CertificatePack("certificatePackResource", CertificatePackArgs.builder()
    .certificateAuthority("string")
    .type("string")
    .validationMethod("string")
    .validityDays(0)
    .zoneId("string")
    .cloudflareBranding(false)
    .hosts("string")
    .build());

    certificate_pack_resource = cloudflare.CertificatePack("certificatePackResource",
    certificate_authority="string",
    type="string",
    validation_method="string",
    validity_days=0,
    zone_id="string",
    cloudflare_branding=False,
    hosts=["string"])

    const certificatePackResource = new cloudflare.CertificatePack("certificatePackResource", {
    certificateAuthority: "string",
    type: "string",
    validationMethod: "string",
    validityDays: 0,
    zoneId: "string",
    cloudflareBranding: false,
    hosts: ["string"],
});

    type: cloudflare:CertificatePack
properties:
    certificateAuthority: string
    cloudflareBranding: false
    hosts:
        - string
    type: string
    validationMethod: string
    validityDays: 0
    zoneId: string

    CertificatePack Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The CertificatePack resource accepts the following input properties:

    CertificateAuthority string
    Certificate Authority selected for the order. For information on any certificate authority specific details or restrictions see this page for more details. Available values: "google", "letsencrypt", "sslcom".
    Type string
    Type of certificate pack. Available values: "advanced".
    ValidationMethod string
    Validation Method selected for the order. Available values: "txt", "http", "email".
    ValidityDays int
    Validity Days selected for the order. Available values: 14, 30, 90, 365.
    ZoneId string
    Identifier.
    CloudflareBranding bool
    Whether or not to add Cloudflare Branding for the order. This will add a subdomain of sni.cloudflaressl.com as the Common Name if set to true.
    Hosts List<string>
    Comma separated list of valid host names for the certificate packs. Must contain the zone apex, may not contain more than 50 hosts, and may not be empty.
    CertificateAuthority string
    Certificate Authority selected for the order. For information on any certificate authority specific details or restrictions see this page for more details. Available values: "google", "letsencrypt", "sslcom".
    Type string
    Type of certificate pack. Available values: "advanced".
    ValidationMethod string
    Validation Method selected for the order. Available values: "txt", "http", "email".
    ValidityDays int
    Validity Days selected for the order. Available values: 14, 30, 90, 365.
    ZoneId string
    Identifier.
    CloudflareBranding bool
    Whether or not to add Cloudflare Branding for the order. This will add a subdomain of sni.cloudflaressl.com as the Common Name if set to true.
    Hosts []string
    Comma separated list of valid host names for the certificate packs. Must contain the zone apex, may not contain more than 50 hosts, and may not be empty.
    certificateAuthority String
    Certificate Authority selected for the order. For information on any certificate authority specific details or restrictions see this page for more details. Available values: "google", "letsencrypt", "sslcom".
    type String
    Type of certificate pack. Available values: "advanced".
    validationMethod String
    Validation Method selected for the order. Available values: "txt", "http", "email".
    validityDays Integer
    Validity Days selected for the order. Available values: 14, 30, 90, 365.
    zoneId String
    Identifier.
    cloudflareBranding Boolean
    Whether or not to add Cloudflare Branding for the order. This will add a subdomain of sni.cloudflaressl.com as the Common Name if set to true.
    hosts List<String>
    Comma separated list of valid host names for the certificate packs. Must contain the zone apex, may not contain more than 50 hosts, and may not be empty.
    certificateAuthority string
    Certificate Authority selected for the order. For information on any certificate authority specific details or restrictions see this page for more details. Available values: "google", "letsencrypt", "sslcom".
    type string
    Type of certificate pack. Available values: "advanced".
    validationMethod string
    Validation Method selected for the order. Available values: "txt", "http", "email".
    validityDays number
    Validity Days selected for the order. Available values: 14, 30, 90, 365.
    zoneId string
    Identifier.
    cloudflareBranding boolean
    Whether or not to add Cloudflare Branding for the order. This will add a subdomain of sni.cloudflaressl.com as the Common Name if set to true.
    hosts string[]
    Comma separated list of valid host names for the certificate packs. Must contain the zone apex, may not contain more than 50 hosts, and may not be empty.
    certificate_authority str
    Certificate Authority selected for the order. For information on any certificate authority specific details or restrictions see this page for more details. Available values: "google", "letsencrypt", "sslcom".
    type str
    Type of certificate pack. Available values: "advanced".
    validation_method str
    Validation Method selected for the order. Available values: "txt", "http", "email".
    validity_days int
    Validity Days selected for the order. Available values: 14, 30, 90, 365.
    zone_id str
    Identifier.
    cloudflare_branding bool
    Whether or not to add Cloudflare Branding for the order. This will add a subdomain of sni.cloudflaressl.com as the Common Name if set to true.
    hosts Sequence[str]
    Comma separated list of valid host names for the certificate packs. Must contain the zone apex, may not contain more than 50 hosts, and may not be empty.
    certificateAuthority String
    Certificate Authority selected for the order. For information on any certificate authority specific details or restrictions see this page for more details. Available values: "google", "letsencrypt", "sslcom".
    type String
    Type of certificate pack. Available values: "advanced".
    validationMethod String
    Validation Method selected for the order. Available values: "txt", "http", "email".
    validityDays Number
    Validity Days selected for the order. Available values: 14, 30, 90, 365.
    zoneId String
    Identifier.
    cloudflareBranding Boolean
    Whether or not to add Cloudflare Branding for the order. This will add a subdomain of sni.cloudflaressl.com as the Common Name if set to true.
    hosts List<String>
    Comma separated list of valid host names for the certificate packs. Must contain the zone apex, may not contain more than 50 hosts, and may not be empty.

    Outputs

    All input properties are implicitly available as output properties. Additionally, the CertificatePack resource produces the following output properties:

    Certificates List<CertificatePackCertificate>
    Array of certificates in this pack.
    Id string
    The provider-assigned unique ID for this managed resource.
    PrimaryCertificate string
    Identifier of the primary certificate in a pack.
    Status string
    Status of certificate pack. Available values: "initializing", "pendingvalidation", "deleted", "pendingissuance", "pendingdeployment", "pendingdeletion", "pendingexpiration", "expired", "active", "initializingtimedout", "validationtimedout", "issuancetimedout", "deploymenttimedout", "deletiontimedout", "pendingcleanup", "stagingdeployment", "stagingactive", "deactivating", "inactive", "backupissued", "holdingdeployment".
    ValidationErrors List<CertificatePackValidationError>
    Domain validation errors that have been received by the certificate authority (CA).
    ValidationRecords List<CertificatePackValidationRecord>
    Certificates' validation records.
    Certificates []CertificatePackCertificate
    Array of certificates in this pack.
    Id string
    The provider-assigned unique ID for this managed resource.
    PrimaryCertificate string
    Identifier of the primary certificate in a pack.
    Status string
    Status of certificate pack. Available values: "initializing", "pendingvalidation", "deleted", "pendingissuance", "pendingdeployment", "pendingdeletion", "pendingexpiration", "expired", "active", "initializingtimedout", "validationtimedout", "issuancetimedout", "deploymenttimedout", "deletiontimedout", "pendingcleanup", "stagingdeployment", "stagingactive", "deactivating", "inactive", "backupissued", "holdingdeployment".
    ValidationErrors []CertificatePackValidationError
    Domain validation errors that have been received by the certificate authority (CA).
    ValidationRecords []CertificatePackValidationRecord
    Certificates' validation records.
    certificates List<CertificatePackCertificate>
    Array of certificates in this pack.
    id String
    The provider-assigned unique ID for this managed resource.
    primaryCertificate String
    Identifier of the primary certificate in a pack.
    status String
    Status of certificate pack. Available values: "initializing", "pendingvalidation", "deleted", "pendingissuance", "pendingdeployment", "pendingdeletion", "pendingexpiration", "expired", "active", "initializingtimedout", "validationtimedout", "issuancetimedout", "deploymenttimedout", "deletiontimedout", "pendingcleanup", "stagingdeployment", "stagingactive", "deactivating", "inactive", "backupissued", "holdingdeployment".
    validationErrors List<CertificatePackValidationError>
    Domain validation errors that have been received by the certificate authority (CA).
    validationRecords List<CertificatePackValidationRecord>
    Certificates' validation records.
    certificates CertificatePackCertificate[]
    Array of certificates in this pack.
    id string
    The provider-assigned unique ID for this managed resource.
    primaryCertificate string
    Identifier of the primary certificate in a pack.
    status string
    Status of certificate pack. Available values: "initializing", "pendingvalidation", "deleted", "pendingissuance", "pendingdeployment", "pendingdeletion", "pendingexpiration", "expired", "active", "initializingtimedout", "validationtimedout", "issuancetimedout", "deploymenttimedout", "deletiontimedout", "pendingcleanup", "stagingdeployment", "stagingactive", "deactivating", "inactive", "backupissued", "holdingdeployment".
    validationErrors CertificatePackValidationError[]
    Domain validation errors that have been received by the certificate authority (CA).
    validationRecords CertificatePackValidationRecord[]
    Certificates' validation records.
    certificates Sequence[CertificatePackCertificate]
    Array of certificates in this pack.
    id str
    The provider-assigned unique ID for this managed resource.
    primary_certificate str
    Identifier of the primary certificate in a pack.
    status str
    Status of certificate pack. Available values: "initializing", "pendingvalidation", "deleted", "pendingissuance", "pendingdeployment", "pendingdeletion", "pendingexpiration", "expired", "active", "initializingtimedout", "validationtimedout", "issuancetimedout", "deploymenttimedout", "deletiontimedout", "pendingcleanup", "stagingdeployment", "stagingactive", "deactivating", "inactive", "backupissued", "holdingdeployment".
    validation_errors Sequence[CertificatePackValidationError]
    Domain validation errors that have been received by the certificate authority (CA).
    validation_records Sequence[CertificatePackValidationRecord]
    Certificates' validation records.
    certificates List<Property Map>
    Array of certificates in this pack.
    id String
    The provider-assigned unique ID for this managed resource.
    primaryCertificate String
    Identifier of the primary certificate in a pack.
    status String
    Status of certificate pack. Available values: "initializing", "pendingvalidation", "deleted", "pendingissuance", "pendingdeployment", "pendingdeletion", "pendingexpiration", "expired", "active", "initializingtimedout", "validationtimedout", "issuancetimedout", "deploymenttimedout", "deletiontimedout", "pendingcleanup", "stagingdeployment", "stagingactive", "deactivating", "inactive", "backupissued", "holdingdeployment".
    validationErrors List<Property Map>
    Domain validation errors that have been received by the certificate authority (CA).
    validationRecords List<Property Map>
    Certificates' validation records.

    Look up Existing CertificatePack Resource

    Get an existing CertificatePack resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

    public static get(name: string, id: Input<ID>, state?: CertificatePackState, opts?: CustomResourceOptions): CertificatePack
    @staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        certificate_authority: Optional[str] = None,
        certificates: Optional[Sequence[CertificatePackCertificateArgs]] = None,
        cloudflare_branding: Optional[bool] = None,
        hosts: Optional[Sequence[str]] = None,
        primary_certificate: Optional[str] = None,
        status: Optional[str] = None,
        type: Optional[str] = None,
        validation_errors: Optional[Sequence[CertificatePackValidationErrorArgs]] = None,
        validation_method: Optional[str] = None,
        validation_records: Optional[Sequence[CertificatePackValidationRecordArgs]] = None,
        validity_days: Optional[int] = None,
        zone_id: Optional[str] = None) -> CertificatePack
    func GetCertificatePack(ctx *Context, name string, id IDInput, state *CertificatePackState, opts ...ResourceOption) (*CertificatePack, error)
    public static CertificatePack Get(string name, Input<string> id, CertificatePackState? state, CustomResourceOptions? opts = null)
    public static CertificatePack get(String name, Output<String> id, CertificatePackState state, CustomResourceOptions options)
    resources:  _:    type: cloudflare:CertificatePack    get:      id: ${id}
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    resource_name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    The following state arguments are supported:
    CertificateAuthority string
    Certificate Authority selected for the order. For information on any certificate authority specific details or restrictions see this page for more details. Available values: "google", "letsencrypt", "sslcom".
    Certificates List<CertificatePackCertificate>
    Array of certificates in this pack.
    CloudflareBranding bool
    Whether or not to add Cloudflare Branding for the order. This will add a subdomain of sni.cloudflaressl.com as the Common Name if set to true.
    Hosts List<string>
    Comma separated list of valid host names for the certificate packs. Must contain the zone apex, may not contain more than 50 hosts, and may not be empty.
    PrimaryCertificate string
    Identifier of the primary certificate in a pack.
    Status string
    Status of certificate pack. Available values: "initializing", "pendingvalidation", "deleted", "pendingissuance", "pendingdeployment", "pendingdeletion", "pendingexpiration", "expired", "active", "initializingtimedout", "validationtimedout", "issuancetimedout", "deploymenttimedout", "deletiontimedout", "pendingcleanup", "stagingdeployment", "stagingactive", "deactivating", "inactive", "backupissued", "holdingdeployment".
    Type string
    Type of certificate pack. Available values: "advanced".
    ValidationErrors List<CertificatePackValidationError>
    Domain validation errors that have been received by the certificate authority (CA).
    ValidationMethod string
    Validation Method selected for the order. Available values: "txt", "http", "email".
    ValidationRecords List<CertificatePackValidationRecord>
    Certificates' validation records.
    ValidityDays int
    Validity Days selected for the order. Available values: 14, 30, 90, 365.
    ZoneId string
    Identifier.
    CertificateAuthority string
    Certificate Authority selected for the order. For information on any certificate authority specific details or restrictions see this page for more details. Available values: "google", "letsencrypt", "sslcom".
    Certificates []CertificatePackCertificateArgs
    Array of certificates in this pack.
    CloudflareBranding bool
    Whether or not to add Cloudflare Branding for the order. This will add a subdomain of sni.cloudflaressl.com as the Common Name if set to true.
    Hosts []string
    Comma separated list of valid host names for the certificate packs. Must contain the zone apex, may not contain more than 50 hosts, and may not be empty.
    PrimaryCertificate string
    Identifier of the primary certificate in a pack.
    Status string
    Status of certificate pack. Available values: "initializing", "pendingvalidation", "deleted", "pendingissuance", "pendingdeployment", "pendingdeletion", "pendingexpiration", "expired", "active", "initializingtimedout", "validationtimedout", "issuancetimedout", "deploymenttimedout", "deletiontimedout", "pendingcleanup", "stagingdeployment", "stagingactive", "deactivating", "inactive", "backupissued", "holdingdeployment".
    Type string
    Type of certificate pack. Available values: "advanced".
    ValidationErrors []CertificatePackValidationErrorArgs
    Domain validation errors that have been received by the certificate authority (CA).
    ValidationMethod string
    Validation Method selected for the order. Available values: "txt", "http", "email".
    ValidationRecords []CertificatePackValidationRecordArgs
    Certificates' validation records.
    ValidityDays int
    Validity Days selected for the order. Available values: 14, 30, 90, 365.
    ZoneId string
    Identifier.
    certificateAuthority String
    Certificate Authority selected for the order. For information on any certificate authority specific details or restrictions see this page for more details. Available values: "google", "letsencrypt", "sslcom".
    certificates List<CertificatePackCertificate>
    Array of certificates in this pack.
    cloudflareBranding Boolean
    Whether or not to add Cloudflare Branding for the order. This will add a subdomain of sni.cloudflaressl.com as the Common Name if set to true.
    hosts List<String>
    Comma separated list of valid host names for the certificate packs. Must contain the zone apex, may not contain more than 50 hosts, and may not be empty.
    primaryCertificate String
    Identifier of the primary certificate in a pack.
    status String
    Status of certificate pack. Available values: "initializing", "pendingvalidation", "deleted", "pendingissuance", "pendingdeployment", "pendingdeletion", "pendingexpiration", "expired", "active", "initializingtimedout", "validationtimedout", "issuancetimedout", "deploymenttimedout", "deletiontimedout", "pendingcleanup", "stagingdeployment", "stagingactive", "deactivating", "inactive", "backupissued", "holdingdeployment".
    type String
    Type of certificate pack. Available values: "advanced".
    validationErrors List<CertificatePackValidationError>
    Domain validation errors that have been received by the certificate authority (CA).
    validationMethod String
    Validation Method selected for the order. Available values: "txt", "http", "email".
    validationRecords List<CertificatePackValidationRecord>
    Certificates' validation records.
    validityDays Integer
    Validity Days selected for the order. Available values: 14, 30, 90, 365.
    zoneId String
    Identifier.
    certificateAuthority string
    Certificate Authority selected for the order. For information on any certificate authority specific details or restrictions see this page for more details. Available values: "google", "letsencrypt", "sslcom".
    certificates CertificatePackCertificate[]
    Array of certificates in this pack.
    cloudflareBranding boolean
    Whether or not to add Cloudflare Branding for the order. This will add a subdomain of sni.cloudflaressl.com as the Common Name if set to true.
    hosts string[]
    Comma separated list of valid host names for the certificate packs. Must contain the zone apex, may not contain more than 50 hosts, and may not be empty.
    primaryCertificate string
    Identifier of the primary certificate in a pack.
    status string
    Status of certificate pack. Available values: "initializing", "pendingvalidation", "deleted", "pendingissuance", "pendingdeployment", "pendingdeletion", "pendingexpiration", "expired", "active", "initializingtimedout", "validationtimedout", "issuancetimedout", "deploymenttimedout", "deletiontimedout", "pendingcleanup", "stagingdeployment", "stagingactive", "deactivating", "inactive", "backupissued", "holdingdeployment".
    type string
    Type of certificate pack. Available values: "advanced".
    validationErrors CertificatePackValidationError[]
    Domain validation errors that have been received by the certificate authority (CA).
    validationMethod string
    Validation Method selected for the order. Available values: "txt", "http", "email".
    validationRecords CertificatePackValidationRecord[]
    Certificates' validation records.
    validityDays number
    Validity Days selected for the order. Available values: 14, 30, 90, 365.
    zoneId string
    Identifier.
    certificate_authority str
    Certificate Authority selected for the order. For information on any certificate authority specific details or restrictions see this page for more details. Available values: "google", "letsencrypt", "sslcom".
    certificates Sequence[CertificatePackCertificateArgs]
    Array of certificates in this pack.
    cloudflare_branding bool
    Whether or not to add Cloudflare Branding for the order. This will add a subdomain of sni.cloudflaressl.com as the Common Name if set to true.
    hosts Sequence[str]
    Comma separated list of valid host names for the certificate packs. Must contain the zone apex, may not contain more than 50 hosts, and may not be empty.
    primary_certificate str
    Identifier of the primary certificate in a pack.
    status str
    Status of certificate pack. Available values: "initializing", "pendingvalidation", "deleted", "pendingissuance", "pendingdeployment", "pendingdeletion", "pendingexpiration", "expired", "active", "initializingtimedout", "validationtimedout", "issuancetimedout", "deploymenttimedout", "deletiontimedout", "pendingcleanup", "stagingdeployment", "stagingactive", "deactivating", "inactive", "backupissued", "holdingdeployment".
    type str
    Type of certificate pack. Available values: "advanced".
    validation_errors Sequence[CertificatePackValidationErrorArgs]
    Domain validation errors that have been received by the certificate authority (CA).
    validation_method str
    Validation Method selected for the order. Available values: "txt", "http", "email".
    validation_records Sequence[CertificatePackValidationRecordArgs]
    Certificates' validation records.
    validity_days int
    Validity Days selected for the order. Available values: 14, 30, 90, 365.
    zone_id str
    Identifier.
    certificateAuthority String
    Certificate Authority selected for the order. For information on any certificate authority specific details or restrictions see this page for more details. Available values: "google", "letsencrypt", "sslcom".
    certificates List<Property Map>
    Array of certificates in this pack.
    cloudflareBranding Boolean
    Whether or not to add Cloudflare Branding for the order. This will add a subdomain of sni.cloudflaressl.com as the Common Name if set to true.
    hosts List<String>
    Comma separated list of valid host names for the certificate packs. Must contain the zone apex, may not contain more than 50 hosts, and may not be empty.
    primaryCertificate String
    Identifier of the primary certificate in a pack.
    status String
    Status of certificate pack. Available values: "initializing", "pendingvalidation", "deleted", "pendingissuance", "pendingdeployment", "pendingdeletion", "pendingexpiration", "expired", "active", "initializingtimedout", "validationtimedout", "issuancetimedout", "deploymenttimedout", "deletiontimedout", "pendingcleanup", "stagingdeployment", "stagingactive", "deactivating", "inactive", "backupissued", "holdingdeployment".
    type String
    Type of certificate pack. Available values: "advanced".
    validationErrors List<Property Map>
    Domain validation errors that have been received by the certificate authority (CA).
    validationMethod String
    Validation Method selected for the order. Available values: "txt", "http", "email".
    validationRecords List<Property Map>
    Certificates' validation records.
    validityDays Number
    Validity Days selected for the order. Available values: 14, 30, 90, 365.
    zoneId String
    Identifier.

    Supporting Types

    CertificatePackCertificate, CertificatePackCertificateArgs

    BundleMethod string
    Certificate bundle method.
    ExpiresOn string
    When the certificate from the authority expires.
    GeoRestrictions CertificatePackCertificateGeoRestrictions
    Specify the region where your private key can be held locally.
    Hosts List<string>
    Hostnames covered by this certificate.
    Id string
    Certificate identifier.
    Issuer string
    The certificate authority that issued the certificate.
    ModifiedOn string
    When the certificate was last modified.
    Priority double
    The order/priority in which the certificate will be used.
    Signature string
    The type of hash used for the certificate.
    Status string
    Certificate status.
    UploadedOn string
    When the certificate was uploaded to Cloudflare.
    ZoneId string
    Identifier.
    BundleMethod string
    Certificate bundle method.
    ExpiresOn string
    When the certificate from the authority expires.
    GeoRestrictions CertificatePackCertificateGeoRestrictions
    Specify the region where your private key can be held locally.
    Hosts []string
    Hostnames covered by this certificate.
    Id string
    Certificate identifier.
    Issuer string
    The certificate authority that issued the certificate.
    ModifiedOn string
    When the certificate was last modified.
    Priority float64
    The order/priority in which the certificate will be used.
    Signature string
    The type of hash used for the certificate.
    Status string
    Certificate status.
    UploadedOn string
    When the certificate was uploaded to Cloudflare.
    ZoneId string
    Identifier.
    bundleMethod String
    Certificate bundle method.
    expiresOn String
    When the certificate from the authority expires.
    geoRestrictions CertificatePackCertificateGeoRestrictions
    Specify the region where your private key can be held locally.
    hosts List<String>
    Hostnames covered by this certificate.
    id String
    Certificate identifier.
    issuer String
    The certificate authority that issued the certificate.
    modifiedOn String
    When the certificate was last modified.
    priority Double
    The order/priority in which the certificate will be used.
    signature String
    The type of hash used for the certificate.
    status String
    Certificate status.
    uploadedOn String
    When the certificate was uploaded to Cloudflare.
    zoneId String
    Identifier.
    bundleMethod string
    Certificate bundle method.
    expiresOn string
    When the certificate from the authority expires.
    geoRestrictions CertificatePackCertificateGeoRestrictions
    Specify the region where your private key can be held locally.
    hosts string[]
    Hostnames covered by this certificate.
    id string
    Certificate identifier.
    issuer string
    The certificate authority that issued the certificate.
    modifiedOn string
    When the certificate was last modified.
    priority number
    The order/priority in which the certificate will be used.
    signature string
    The type of hash used for the certificate.
    status string
    Certificate status.
    uploadedOn string
    When the certificate was uploaded to Cloudflare.
    zoneId string
    Identifier.
    bundle_method str
    Certificate bundle method.
    expires_on str
    When the certificate from the authority expires.
    geo_restrictions CertificatePackCertificateGeoRestrictions
    Specify the region where your private key can be held locally.
    hosts Sequence[str]
    Hostnames covered by this certificate.
    id str
    Certificate identifier.
    issuer str
    The certificate authority that issued the certificate.
    modified_on str
    When the certificate was last modified.
    priority float
    The order/priority in which the certificate will be used.
    signature str
    The type of hash used for the certificate.
    status str
    Certificate status.
    uploaded_on str
    When the certificate was uploaded to Cloudflare.
    zone_id str
    Identifier.
    bundleMethod String
    Certificate bundle method.
    expiresOn String
    When the certificate from the authority expires.
    geoRestrictions Property Map
    Specify the region where your private key can be held locally.
    hosts List<String>
    Hostnames covered by this certificate.
    id String
    Certificate identifier.
    issuer String
    The certificate authority that issued the certificate.
    modifiedOn String
    When the certificate was last modified.
    priority Number
    The order/priority in which the certificate will be used.
    signature String
    The type of hash used for the certificate.
    status String
    Certificate status.
    uploadedOn String
    When the certificate was uploaded to Cloudflare.
    zoneId String
    Identifier.

    CertificatePackCertificateGeoRestrictions, CertificatePackCertificateGeoRestrictionsArgs

    Label string
    Available values: "us", "eu", <span pulumi-lang-nodejs=""highestSecurity"" pulumi-lang-dotnet=""HighestSecurity"" pulumi-lang-go=""highestSecurity"" pulumi-lang-python=""highest_security"" pulumi-lang-yaml=""highestSecurity"" pulumi-lang-java=""highestSecurity"">"highest_security".
    Label string
    Available values: "us", "eu", <span pulumi-lang-nodejs=""highestSecurity"" pulumi-lang-dotnet=""HighestSecurity"" pulumi-lang-go=""highestSecurity"" pulumi-lang-python=""highest_security"" pulumi-lang-yaml=""highestSecurity"" pulumi-lang-java=""highestSecurity"">"highest_security".
    label String
    Available values: "us", "eu", <span pulumi-lang-nodejs=""highestSecurity"" pulumi-lang-dotnet=""HighestSecurity"" pulumi-lang-go=""highestSecurity"" pulumi-lang-python=""highest_security"" pulumi-lang-yaml=""highestSecurity"" pulumi-lang-java=""highestSecurity"">"highest_security".
    label string
    Available values: "us", "eu", <span pulumi-lang-nodejs=""highestSecurity"" pulumi-lang-dotnet=""HighestSecurity"" pulumi-lang-go=""highestSecurity"" pulumi-lang-python=""highest_security"" pulumi-lang-yaml=""highestSecurity"" pulumi-lang-java=""highestSecurity"">"highest_security".
    label str
    Available values: "us", "eu", <span pulumi-lang-nodejs=""highestSecurity"" pulumi-lang-dotnet=""HighestSecurity"" pulumi-lang-go=""highestSecurity"" pulumi-lang-python=""highest_security"" pulumi-lang-yaml=""highestSecurity"" pulumi-lang-java=""highestSecurity"">"highest_security".
    label String
    Available values: "us", "eu", <span pulumi-lang-nodejs=""highestSecurity"" pulumi-lang-dotnet=""HighestSecurity"" pulumi-lang-go=""highestSecurity"" pulumi-lang-python=""highest_security"" pulumi-lang-yaml=""highestSecurity"" pulumi-lang-java=""highestSecurity"">"highest_security".

    CertificatePackValidationError, CertificatePackValidationErrorArgs

    Message string
    A domain validation error.
    Message string
    A domain validation error.
    message String
    A domain validation error.
    message string
    A domain validation error.
    message str
    A domain validation error.
    message String
    A domain validation error.

    CertificatePackValidationRecord, CertificatePackValidationRecordArgs

    Emails List<string>
    The set of email addresses that the certificate authority (CA) will use to complete domain validation.
    HttpBody string
    The content that the certificate authority (CA) will expect to find at the http_url during the domain validation.
    HttpUrl string
    The url that will be checked during domain validation.
    TxtName string
    The hostname that the certificate authority (CA) will check for a TXT record during domain validation .
    TxtValue string
    The TXT record that the certificate authority (CA) will check during domain validation.
    Emails []string
    The set of email addresses that the certificate authority (CA) will use to complete domain validation.
    HttpBody string
    The content that the certificate authority (CA) will expect to find at the http_url during the domain validation.
    HttpUrl string
    The url that will be checked during domain validation.
    TxtName string
    The hostname that the certificate authority (CA) will check for a TXT record during domain validation .
    TxtValue string
    The TXT record that the certificate authority (CA) will check during domain validation.
    emails List<String>
    The set of email addresses that the certificate authority (CA) will use to complete domain validation.
    httpBody String
    The content that the certificate authority (CA) will expect to find at the http_url during the domain validation.
    httpUrl String
    The url that will be checked during domain validation.
    txtName String
    The hostname that the certificate authority (CA) will check for a TXT record during domain validation .
    txtValue String
    The TXT record that the certificate authority (CA) will check during domain validation.
    emails string[]
    The set of email addresses that the certificate authority (CA) will use to complete domain validation.
    httpBody string
    The content that the certificate authority (CA) will expect to find at the http_url during the domain validation.
    httpUrl string
    The url that will be checked during domain validation.
    txtName string
    The hostname that the certificate authority (CA) will check for a TXT record during domain validation .
    txtValue string
    The TXT record that the certificate authority (CA) will check during domain validation.
    emails Sequence[str]
    The set of email addresses that the certificate authority (CA) will use to complete domain validation.
    http_body str
    The content that the certificate authority (CA) will expect to find at the http_url during the domain validation.
    http_url str
    The url that will be checked during domain validation.
    txt_name str
    The hostname that the certificate authority (CA) will check for a TXT record during domain validation .
    txt_value str
    The TXT record that the certificate authority (CA) will check during domain validation.
    emails List<String>
    The set of email addresses that the certificate authority (CA) will use to complete domain validation.
    httpBody String
    The content that the certificate authority (CA) will expect to find at the http_url during the domain validation.
    httpUrl String
    The url that will be checked during domain validation.
    txtName String
    The hostname that the certificate authority (CA) will check for a TXT record during domain validation .
    txtValue String
    The TXT record that the certificate authority (CA) will check during domain validation.

    Import

    $ pulumi import cloudflare:index/certificatePack:CertificatePack example '<zone_id>/<certificate_pack_id>'

    While supported, importing isn’t recommended and it is advised to replace the

    certificate entirely instead.

    To learn more about importing existing cloud resources, see Importing resources.

    Package Details

    Repository
    Cloudflare pulumi/pulumi-cloudflare
    License
    Apache-2.0
    Notes
    This Pulumi package is based on the cloudflare Terraform Provider.
    cloudflare logo
    Cloudflare v6.12.0 published on Wednesday, Dec 24, 2025 by Pulumi
    Schema (JSON)
    pulumi/pulumi-cloudflare
      Meet Neo: Your AI Platform Teammate