Using Full is not a good decision as that is a legacy mode which drops encryption. Make sure to use Strict.
As for the 521, that will be because your server is not reachable. If you say this happens once a day and a restart fixes it, you may have some firewall issue. Talk to your administrator to have this fixed. You may also want to consider pausing Cloudflare while you debug the issue.