Cloudflare API: API Changes (2026-02-13)

TL;DR

The /zones/{zone_id}/origin_tls_client_auth/hostnames/certificates endpoint has undergone significant changes, including the removal of several optional properties from its response.

Multiple new optional properties have been added to the response of the /zones/{zone_id}/origin_tls_client_auth/hostnames/certificates endpoint.

The #/components/schemas/tls-certificates-and-hostnames_hostname_certid_object schema has been removed from the /allOf[#/components/schemas/tls-certificates-and-hostnames_hostname-authenticated-origin-pull_components-schemas-certificate_response_collection] schema.

Changes to the response format of the /zones/{zone_id}/origin_tls_client_auth/hostnames/certificates endpoint may require updates to client code.

Developers should review the updated API documentation to ensure compatibility with the latest changes.

What Changed

#### Breaking

The /zones/{zone_id}/origin_tls_client_auth/hostnames/certificates endpoint no longer includes the optional properties cert_id, enabled, hostname, and private_key in its response.

The property type/format of the /allOf[#/components/schemas/tls-certificates-and-hostnames_hostname-authenticated-origin-pull_components-schemas-certificate_response_collection]/allOf[subschema #2]/result/items/ response has changed.

The removal of several optional properties from the response may require client code updates.

#### Feature

New optional properties have been added to the response of the /zones/{zone_id}/origin_tls_client_auth/hostnames/certificates endpoint, including expires_on, issuer, serial_number, signature, status, updated_at, and uploaded_on.

#### Behavior

The #/components/schemas/tls-certificates-and-hostnames_hostname_certid_object schema has been removed from the /allOf[#/components/schemas/tls-certificates-and-hostnames_hostname-authenticated-origin-pull_components-schemas-certificate_response_collection] schema.

Who's Impacted

If you are currently using the /zones/{zone_id}/origin_tls_client_auth/hostnames/certificates endpoint, you will need to update your client code to accommodate the changes to the response format. If you are relying on the removed optional properties, you will need to modify your code to handle their absence. If you are using the #/components/schemas/tls-certificates-and-hostnames_hostname_certid_object schema, you will need to update your code to use an alternative schema.

Action Checklist

☐ Review the updated API documentation for the /zones/{zone_id}/origin_tls_client_auth/hostnames/certificates endpoint.

☐ Update client code to handle the removal of optional properties from the response.

☐ Modify code to accommodate the new optional properties added to the response.

☐ Test client code with the updated API endpoint.

☐ Verify that client code is compatible with the latest changes.

☐ Update dependencies to ensure compatibility with the latest API version.

☐ Review the #/components/schemas/tls-certificates-and-hostnames_hostname-authenticated-origin-pull_components-schemas-certificate_response_collection schema for changes.

☐ Update code to use alternative schemas if necessary.

☐ Test client code with the updated schemas.

☐ Verify that client code is handling errors correctly.

☐ Review the API documentation for any additional changes or updates.

☐ Update client code to handle any additional changes or updates.

☐ Test client code thoroughly to ensure compatibility with the latest API version.

Verification

The information in this update brief is based on the following sources:

[Commit 5128c18914e9](https://github.com/cloudflare/api-schemas/commit/5128c18914e9313aaee981414fdc288a658a5cd9)

[Cloudflare API Spec Diff](https://github.com/cloudflare/api-schemas/compare/d6be51fd51ff5f895c3fef999303c576120bd390...5128c18914e9313aaee981414fdc288a658a5cd9)

Last verified at: 2026-02-17T13:05:39.043442+00:00