Due to having no experience, here is a great tutorial that explains and instructs how to setup SSL with Cloudflare:
This tutorial covers getting SSL working with Cloudflare in various different scenarios.
This assumes you already have your website set up on Cloudflare with all your DNS records set to
, if not - please visit Step 1.
Do you want the website to use HTTPS?
YesDo you already have a valid SSL certificate installed on your server (i.e. does it already load over HTTPS with a )?
If your website already works over HTTPS, you can just set your SSL mode in Cloudflare to Full (strict)…
Furthermore, nowadays website mostly running on cPanel or not, but there is always a way to purchase an SSL certificate, or even generate some like Let’s Encrypt, etc.
To enable HTTPS on your website, you need to get a certificate (a type of file) from a Certificate Authority (CA). Let’s Encrypt is a CA. In order to get a certificate for your website’s domain from Let’s Encrypt, you have to...
In case you do not have an SSL certificate, you could use Cloudflare CA Origin Certificate and install it at your origin host / server by the provided instructions from below article:
Therefore, I also recommend you to read below helpful articles for more understanding:
SSL/TLS Configuration Video:
This tutorial covers basic settings in the SSL/TLS app of the Cloudflare Dashboard, including SSL Mode [Off/Flexible/Full/Full (Strict)], Cloudflare Origin Certificates, ‘Always Use HTTPS’ and ‘Automatic HTTPS Rewrites’.
The settings covered here can all be found by visiting
Cloudflare.com, logging in, selecting the domain and choosing the SSL/TLS app.
The connection between your visitor and Cloudflare and Clou…
This post contains info on Cloudflare Universal and Universal (shared) certificates, this covers certificates issued to sniXXXXXX.cloudflaressl.com and sni.cloudflaressl.com
There are two types of universal certificate in use at the moment. These are Universal and Universal (Shared), I will address the differences between the two and why you have the one you do.
These look like this:
Issued to: sni.cloudflaressl.com, in the Subject Alternative Name, …
This tutorial post covers the steps you should take if you have enabled Cloudflare, but HTTPS is not working on the site.
If your main domain is secure, but a subdomain is not, please see
SSL/TLS not working on subdomain.
1. Check that the DNS record is set to
In the DNS app in your Cloudflare dashboard, check that the DNS record for your domain is set to , not . If it is , Cloudflare is disabled on the site and none of the SSL settings will take effect.
Unencrypted & unverified connections
Imagine you open Paypal and suddenly get that warning
Would you continue? Probably not. For decades leaders in IT security have advocated that people upgrade their sites from unencrypted HTTP to secure HTTPS. And for a reason, everything you send via an HTTP connection is sent in plain text and can be intercepted at any point between you and the server.
Equally, you’d probably not proceed if you got such a warning, right?
That’s when th…