Cloudflare Origin Certificates lifespan best practices

Hello everyone, I want to use Cloudflare Origin Certificates to further secure the connection between CF and my AWS server, what is the best lifespan to follow? I saw that client side SSL/TLS certificates lifespans are going to get reduced gradually soon, do the Origin Certificates follow the same process?
2 Replies
SuperHelpflare
SuperHelpflare3mo ago
Feedback
Feedback has been submitted! Thank you :)
andrew_nyr
andrew_nyr3mo ago
as a matter of principle, you can have a short lifespan but I don't see it helping here fully as end users won't ever see the origin cert. I do long lifespans for mine, but up to you.

Did you find this page helpful?