Cloudflare for SaaS and Origin SSL Certificates

Hello,

Do our origin ssl certificates just need to be for our main zone as the origin certificates page doesn't let me add SaaS domains?

We have cloudflare for SaaS so people can create custom domains for their site.