That should be covered in the tutorial I linked to at Deprecated - Verifying propagation and caching issues when troubleshooting
Flexible should never be used, since you have configured an origin certificate, you should use Full (strict).
That should be covered in the tutorial I linked to at Deprecated - Verifying propagation and caching issues when troubleshooting
Flexible should never be used, since you have configured an origin certificate, you should use Full (strict).