Universal SSL
By default, Cloudflare issues — and renews — free, unshared, publicly trusted SSL certificates to all Cloudflare domains.
For setup details, refer to Enable Universal SSL.
Backup certificates
For more details, refer to backup certificates.