Hi,
I have spend some hours on this reading stuff, and so far I can not see why I am still getting this error 
I have a domain “good-health.ml” and I want to have sub-domains on it.
I have a dedicated server running ubuntu 20.04
and I’m using apache server
with Public IP address: 5.101.140.50
I have created an origin certificate and Private key on CF
Then I copied them into files on the etc/cf_keys directory
/etc/cf_keys/good-health-ml/cf_origin_cert.pem
/etc/cf_keys/good-health-ml/cf_priv_key.pem
I did this with root - do I need to chown or chmod these files ?
Then I created the VirtualHost
<VirtualHost *:443>
ServerName good-health.ml
ServerAlias *.good-health.ml
DocumentRoot /var/www/good-health.ml
<Directory "/var/www/good-health.ml">
AllowOverride All
</Directory>
SSLEngine on
SSLCertificateFile "/etc/cf_keys/good-health-ml/cf_origin_cert.pem"
SSLCertificateKeyFile "/etc/cf_keys/good-health-ml/cf_priv_key.pem"
ErrorLog ${APACHE_LOG_DIR}/error.log
CustomLog ${APACHE_LOG_DIR}/access.log combined
Header always set Strict-Transport-Security "max-age=31536000"
SSLUseStapling on
Header always set Content-Security-Policy upgrade-insecure-requestscd
</VirtualHost>
and I ran systemctl restart apache2
From my windows pc this is the Tracer route with Cloudflare “PAUSED”
Tracing route to good-health.ml [5.101.140.50]
over a maximum of 30 hops:
1 1 ms <1 ms <1 ms routerlogin.net [192.168.0.1]
2 * * * Request timed out.
3 13 ms 8 ms 8 ms hari-core-2b-ae47-0.network.virginmedia.net [81.97.255.29]
4 * * * Request timed out.
5 * * * Request timed out.
6 * * * Request timed out.
7 18 ms 18 ms 17 ms telw-ic-4-ae0-0.network.virginmedia.net [62.254.84.70]
8 18 ms 19 ms 18 ms m498-mp2.cvx3-a.ltn.dial.ntli.net [213.104.85.242]
9 20 ms 20 ms 18 ms xe-0-0-1-to-THE.bsd.as42831.net [78.157.212.186]
10 21 ms 19 ms 18 ms no.rdns.ukservers.com [5.101.140.50]
Trace complete.
From my windows pc this is the Tracer route with Cloudflare “ON”
Tracing route to good-health.ml [172.67.193.33] <<— Notice it has a CF address now
over a maximum of 30 hops:
1 <1 ms <1 ms <1 ms routerlogin.net [192.168.0.1]
2 * * * Request timed out.
3 8 ms 11 ms 8 ms hari-core-2b-ae47-0.network.virginmedia.net [81.97.255.29]
4 * * * Request timed out.
5 * * * Request timed out.
6 * * * Request timed out.
7 * * * Request timed out.
8 16 ms 19 ms 16 ms tcma-ic-2-ae9-0.network.virginmedia.net [62.253.174.178]
9 17 ms 16 ms 15 ms 162.158.32.254
10 21 ms 24 ms 16 ms 162.158.32.11
11 16 ms 15 ms 15 ms 172.67.193.33
Trace complete.
See these images:
Why does the address resolve to a Cloudflare address and not mine ( 5.101.140.50 ) ?
Hope someone can help
