Cloudflare SSL with AWS Elastic Beanstalk - Error 521

So you are able to access the Elastic IP with port 443 as well?

Anyway, an invalid SSL certificate should actually brings you an Error 526 instead of Error 521.