Been trying out the new Let's Encrypt Certificate by DNS-01 (Cloudflare)

Options
PeterUK
PeterUK image  Guru Member
250 Answers 2500 Comments Friend Collector Eighth Anniversary
edited August 13 in USG FLEX H Series

and...it works really well its a bit of a head scratcher finding Cloudflare Zone ID and setup Cloudflare API Token but got there in the end.

But there is a down side to DNS-01 (Cloudflare) which if HTTP-01 was different I would not of had to of done so I had bridgemode.network by IONOS which they give you a SSL Starter Wildcard which I'm going to have to use for all my non-ACME devices problem is Cloudflare needs you to change your IONOS name server to theres but that mean the SSL Starter Wildcard will not renew. So I had to get bridgemode.co.uk which was cheap and name server for that are Cloudflare so now FLEX700H and FLEX200H now have Certificate by Let's Encrypt.

The other downside to DNS-01 (Cloudflare) is you must own the full domain so if you have like noip subdomains its not going to work.

I hope to see Let's Encrypt Certificate method on Zyxel switches and AP's and FWA510