[SSL] document Enterprise opt-out process for backup certificates

[ngayerie]

Adds an ## Opt out section to the backup certificates page explaining that Enterprise customers need to contact Cloudflare Support to disable backup certificates.

DEE-3827

[cloudflare-docs-bot]

Review

✅ No issues found in commit b3d572b.

Code Review

This code review is in beta and may not always be helpful — use your judgment.

_{No code review issues found.}

Conventions

_{No convention issues found.}

Style Guide Review

_{No style-guide issues found.}

Commands

Only codeowners can run commands. Post a comment with the command to trigger it.

Command	Description
/review	Runs a review now. Incremental if a prior review exists, full if not.
/full-review	Re-reviews the entire PR diff from scratch, ignoring incremental history. Useful after a rebase, when you want a fresh review, or if the bot gets out of sync and reports issues that no longer exist.
/ignore-review-limit	Permanently lifts the 2-review automatic limit for this PR. Future pushes will trigger reviews as normal.
/disable-auto-review	Stops automatic reviews from triggering on future pushes to this PR. Codeowners can still run /review or /full-review manually.
/rebase	Rebases the PR branch against production. On conflict, attempts to resolve automatically using AI. Stops with an explanation if confidence is not high enough.

[github-actions]

This pull request requires reviews from CODEOWNERS as it changes files that match the following patterns:

Pattern	Owners
/src/content/docs/ssl/	@baubuchon-cf, @lgarofalo, @cloudflare/appsec-reviewers, @cloudflare/product-owners

[github-actions]

Preview URL: https://b3d572bf.preview.developers.cloudflare.com
Preview Branch URL: https://dee-3827-backup-cert-opt-out.preview.developers.cloudflare.com

Files with changes (up to 15)

Original Link	Updated Link
https://developers.cloudflare.com/ssl/edge-certificates/backup-certificates/	https://dee-3827-backup-cert-opt-out.preview.developers.cloudflare.com/ssl/edge-certificates/backup-certificates/

[cloudflare-workers-and-pages]

🚀 Deploying Preview to Cloudflare 🚀

Preview URL: https://dee-3827-backup-cert-opt-out.previews.developers.cloudflare.com (commit 508ebd4)

This URL reflects your latest Preview deployment

Preview Deployments by commit

Status	Deployment URL	Commit	Updated (UTC)	See this deployment's details
Build: In progress 🔵 View logs ↗		b3d572b	2026-09-08T18:26:56.182Z	View logs ↗
Build: Success ✅ Deployment: Success ✅ View logs ↗	https://d79183d7.previews.developers.cloudflare.com	508ebd4	2026-09-05T04:42:08.421Z	Visit the dashboard ↗
Build: Success ✅ Deployment: Success ✅ View logs ↗	https://42e797e7.previews.developers.cloudflare.com	1fb7d8a	2026-09-04T15:55:29.417Z	Visit the dashboard ↗

[baubuchon-cf]

This addition makes sense. I do think we should tighten the wording a bit. “Contact Cloudflare Support” feels broader than what we probably mean here, especially since the linked Support page is generic and says Support cannot make configuration or account changes on a customer’s behalf. If the intended path is to open a support case to request opt-out, I’d suggest saying that directly. For example: “Enterprise customers can request backup certificate opt-out by opening a support case.” We could also add a short note that opting out removes backup-certificate redundancy.

[ngayerie]

[AI] Good point — I've tightened the wording to say "request to opt out by opening a support case" and added a note that opting out removes backup-certificate redundancy. Updated in commit 508ebd4.

[baubuchon-cf]

LGTM. Tightened wording addresses the earlier concern about the generic "Contact Support" phrasing and link. Enterprise-only opt-out and the redundancy note both check out. Approving.