How Can I Use Cloudflare SSL for my Website?

[wearemayonline]

Hi all,

I’ve checked my website if Cloudflare is enabled. When I checked i got the following message:

How Can I Fix This?

[i40west]

The tool you’re using is wrong. I had never heard of it, but I tried it on multiple sites that are definitely using Cloudflare SSL and it says the same thing. And your site looks fine to me, including SSL.

[wearemayonline]

Thanks for clarifying.

It’s weird because if I click on my website on Google Search & Google My Business it lands on my hosting page.

[i40west]

What’s the link you go to when you click from Google? I just tried searching for your site on Google and clicking through and it worked fine. It’s possible I’m getting a different link from Google though because Google knows I’m in the USA so it gives me something different?

[wearemayonline]

Well, incognito works fine. So I guess it’s a caching issue!

[anon9246926]

Checking https://selesti.com does result in the message

https://selesti.com is using Cloudflare SSL!

Looking at the certificate gives an indication why this is the case on selesti.com but not on cloudflare.com (and other sites.)

There are numerous posts about sni.cloudflaressl.com in these forums.

[epic.network]

The certificates shown in your reply appear to be AVG SSL inspection certificates and not actual Cloudflare edge certificates.

[anon9246926]

So does this mean (as @i40west mentioned earlier) that the tool is incorrectly returning a positive/negative result based on this @epic.network (or not possible to say for certain?)

The appearance of sni.cloudflaressl.com is the only difference between

% curl https://selesti.com -svo /dev/null 2>&1| grep -E '(sni|issuer)'
*  subject: C=US; ST=California; L=San Francisco; O=Cloudflare, Inc.; CN=sni.cloudflaressl.com
*  issuer: C=US; O=Cloudflare, Inc.; CN=Cloudflare Inc ECC CA-3

and

% curl https://cloudflare.com -svo /dev/null 2>&1| grep -E '(sni|issuer)'
*  issuer: C=US; O=Cloudflare, Inc.; CN=Cloudflare Inc ECC CA-3

[epic.network]

Your curl output doesn’t match the screenshots, not that it is likely to be relevant to the actual topic.

The certificates with Cloudflare as the issuer are actually from DigiCert. They were being deprecated, but I recall reading about that process being delayed.

If that tool erroneously thinks that all Cloudflare edge certificates have that d the issuer, ot would explain the inaccurate test results.

[anon9246926]

@epic.network

Your curl output doesn’t match the screenshots

Oh yeah!