From 632c831bf74055d7654f95e840f3884a293ed3b5 Mon Sep 17 00:00:00 2001 From: Nic <123965403+ngayerie@users.noreply.github.com> Date: Fri, 4 Sep 2026 13:27:10 +0200 Subject: [PATCH 1/4] docs(DEE-3829): add known issue for backup cert deleted after toggling Universal SSL --- .../edge-certificates/backup-certificates.mdx | 17 +++++++++++++++++ 1 file changed, 17 insertions(+) diff --git a/src/content/docs/ssl/edge-certificates/backup-certificates.mdx b/src/content/docs/ssl/edge-certificates/backup-certificates.mdx index 2da99e0a78d..a57e5cbf526 100644 --- a/src/content/docs/ssl/edge-certificates/backup-certificates.mdx +++ b/src/content/docs/ssl/edge-certificates/backup-certificates.mdx @@ -23,3 +23,20 @@ For additional details, refer to the [introductory blog post](https://blog.cloud | - | - | - | - | - | | Availability | Yes | Yes | Yes | Yes | | Can opt out? | No | No | No | Yes | + +## Troubleshooting + +### Backup certificate deleted after re-enabling Universal SSL + +After you disable and quickly re-enable Universal SSL, your domain may end up without a backup certificate. + +When Universal SSL is toggled off and on in quick succession, certificate processing jobs are not guaranteed to run in the order they were submitted. This race condition can cause a newly issued backup certificate to be deleted before it becomes active. + +To recover your backup certificate: + +1. Wait several minutes after disabling Universal SSL before re-enabling it. +2. Re-enable Universal SSL, then allow time for a new backup certificate to be issued. + +If you need uninterrupted certificate coverage, consider ordering an [Advanced Certificate Manager](/ssl/edge-certificates/advanced-certificate-manager/) certificate before toggling Universal SSL. + +For more troubleshooting help, refer to [Troubleshooting SSL errors](/ssl/troubleshooting/). From f06e76e974916db8ee1b5929dcab03fbfd00b05a Mon Sep 17 00:00:00 2001 From: Nic <123965403+ngayerie@users.noreply.github.com> Date: Fri, 4 Sep 2026 13:32:02 +0200 Subject: [PATCH 2/4] docs(DEE-3829): replace enable/disable with turn on/turn off per style guide --- .../docs/ssl/edge-certificates/backup-certificates.mdx | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/src/content/docs/ssl/edge-certificates/backup-certificates.mdx b/src/content/docs/ssl/edge-certificates/backup-certificates.mdx index a57e5cbf526..d965c5bc12e 100644 --- a/src/content/docs/ssl/edge-certificates/backup-certificates.mdx +++ b/src/content/docs/ssl/edge-certificates/backup-certificates.mdx @@ -26,16 +26,16 @@ For additional details, refer to the [introductory blog post](https://blog.cloud ## Troubleshooting -### Backup certificate deleted after re-enabling Universal SSL +### Backup certificate deleted after turning Universal SSL back on -After you disable and quickly re-enable Universal SSL, your domain may end up without a backup certificate. +After you turn off and quickly turn Universal SSL back on, your domain may end up without a backup certificate. When Universal SSL is toggled off and on in quick succession, certificate processing jobs are not guaranteed to run in the order they were submitted. This race condition can cause a newly issued backup certificate to be deleted before it becomes active. To recover your backup certificate: -1. Wait several minutes after disabling Universal SSL before re-enabling it. -2. Re-enable Universal SSL, then allow time for a new backup certificate to be issued. +1. Wait several minutes after turning off Universal SSL before turning it back on. +2. Turn Universal SSL back on, then allow time for a new backup certificate to be issued. If you need uninterrupted certificate coverage, consider ordering an [Advanced Certificate Manager](/ssl/edge-certificates/advanced-certificate-manager/) certificate before toggling Universal SSL. From 209901d0bda57a113982802f28084780448074fd Mon Sep 17 00:00:00 2001 From: Nic <123965403+ngayerie@users.noreply.github.com> Date: Fri, 4 Sep 2026 13:44:02 +0200 Subject: [PATCH 3/4] docs(DEE-3829): fix recovery steps and passive voice per bot review --- .../docs/ssl/edge-certificates/backup-certificates.mdx | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/src/content/docs/ssl/edge-certificates/backup-certificates.mdx b/src/content/docs/ssl/edge-certificates/backup-certificates.mdx index d965c5bc12e..045d75c9bbf 100644 --- a/src/content/docs/ssl/edge-certificates/backup-certificates.mdx +++ b/src/content/docs/ssl/edge-certificates/backup-certificates.mdx @@ -34,8 +34,9 @@ When Universal SSL is toggled off and on in quick succession, certificate proces To recover your backup certificate: -1. Wait several minutes after turning off Universal SSL before turning it back on. -2. Turn Universal SSL back on, then allow time for a new backup certificate to be issued. +1. Turn Universal SSL off again. +2. Wait several minutes. +3. Turn Universal SSL back on, then allow time for Cloudflare to issue a new backup certificate. If you need uninterrupted certificate coverage, consider ordering an [Advanced Certificate Manager](/ssl/edge-certificates/advanced-certificate-manager/) certificate before toggling Universal SSL. From da3b83c6eeb67012205c399caed7ca5438f516ce Mon Sep 17 00:00:00 2001 From: Nic <123965403+ngayerie@users.noreply.github.com> Date: Sat, 5 Sep 2026 11:55:35 +0200 Subject: [PATCH 4/4] [SSL] apply product feedback to Universal SSL recovery step and ACM wording --- .../docs/ssl/edge-certificates/backup-certificates.mdx | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/src/content/docs/ssl/edge-certificates/backup-certificates.mdx b/src/content/docs/ssl/edge-certificates/backup-certificates.mdx index 045d75c9bbf..fc2510b7d92 100644 --- a/src/content/docs/ssl/edge-certificates/backup-certificates.mdx +++ b/src/content/docs/ssl/edge-certificates/backup-certificates.mdx @@ -19,7 +19,7 @@ For additional details, refer to the [introductory blog post](https://blog.cloud ## Availability -| | Free | Pro | Business | Enterprise | +| | Free | Pro | Business | Enterprise | | - | - | - | - | - | | Availability | Yes | Yes | Yes | Yes | | Can opt out? | No | No | No | Yes | @@ -34,10 +34,10 @@ When Universal SSL is toggled off and on in quick succession, certificate proces To recover your backup certificate: -1. Turn Universal SSL off again. +1. If another valid edge certificate is already active, or if you are operating in a maintenance window, turn Universal SSL off again. 2. Wait several minutes. 3. Turn Universal SSL back on, then allow time for Cloudflare to issue a new backup certificate. -If you need uninterrupted certificate coverage, consider ordering an [Advanced Certificate Manager](/ssl/edge-certificates/advanced-certificate-manager/) certificate before toggling Universal SSL. +If you need uninterrupted certificate coverage, consider using [Advanced Certificate Manager](/ssl/edge-certificates/advanced-certificate-manager/) and ensure an advanced certificate is already issued and active before toggling Universal SSL. For more troubleshooting help, refer to [Troubleshooting SSL errors](/ssl/troubleshooting/).