Origin certificate is possible to generate and export, while proxy certificates are not. https://developers.cloudflare.com/ssl/origin-configuration/origin-ca/ You should really look into issuing certs via Let’s Encrypt and use the http acme challenge as verification method… Too much hassle as it is right now