How It Works
- Certificate Upload: DoD Root CA 6 and all intermediate CAs (70-79) are uploaded to Cloudflare as a trusted CA bundle
- mTLS Handshake: When you connect, Cloudflare requests a client certificate signed by one of these trusted CAs
- Validation: Cloudflare validates the full certificate chain against the uploaded CA bundle
- Authentication: If valid, your certificate details are passed to the Worker for processing
Supported Certificate Authorities
DoD Root CA 6
DOD ID CA-70
DOD ID CA-71
DOD ID CA-72
DOD ID CA-73
DOD ID CA-78
DOD ID CA-79