A TLS certificate is a digitally signed credential that binds an identity to a public key. For a web API served through a CDN, certificates help secure two different connections: the visitor-to-CDN connection and the CDN-to-origin-server connection. section 12.1.3
Cloudflare provides a certificate for each side of that arrangement:
- The edge certificate is generated automatically and used by Cloudflare when serving visitors, providing HTTPS support for the API. section 12.1.3
- The origin certificate can be generated manually and installed on the web server hosting the API, encrypting the connection between Cloudflare and that server. section 12.1.3
A certificate does not start the web server
Suppose win-01.mybglist.com resolves through Cloudflare, but the Windows VM has no web server listening on HTTP port 80 or HTTPS port 443. A browser request receives Cloudflare’s 522 Connection timed out error. The problem is the CDN-to-host connection, not something an origin certificate alone can fix. Configure a web server to handle incoming requests, then create the SSL/TLS certificate for the origin server. section 12.2.3














