[shye]

For domains where they handle the certificates, Cloudflare utilizes multiple CAs, to avoid such a single point of failure: I’ve seen Cloudflare managed certificates issued by Let’s Encrypt, Google Cloud, Sectigo, and SSL.com.

Cloudflare does provide the option for customers to manage their own certificates, which would make it the customer’s responsibility to have alternatives issuers when needed.