I updated the SSL in old.xalqbank.az. I've encountered an interesting problem. When I enable the proxy in DNS it shows us the old SSL, to show the correct SSL I disable the proxy. How to fix this problem?

I updated the SSL in old.xalqbank.az. I’ve encountered an interesting problem. When I enable the proxy in DNS it shows us the old SSL, to show the correct SSL I disable the proxy. How to fix this problem?

By “old SSL”, do you mean an old SSL certificate?

Your site is currently proxied and showing a Google certificate publicly due to Cloudflare’s Universal SSL. The certificate on your origin won’t be seen publically while it is proxied, only by Cloudflare’s proxy servers.

curl -Ivv https://old.xalqbank.az
*   Trying [2606:4700:20::681a:b2a]:443...
* Connected to old.xalqbank.az (2606:4700:20::681a:b2a) port 443 (#0)
...
* SSL connection using TLSv1.3 / AEAD-AES256-GCM-SHA384
* ALPN: server accepted h2
* Server certificate:
*  subject: CN=xalqbank.az
*  start date: Oct 17 09:16:44 2023 GMT
*  expire date: Jan 15 09:16:43 2024 GMT
*  subjectAltName: host "old.xalqbank.az" matched cert's "*.xalqbank.az"
*  issuer: C=US; O=Google Trust Services LLC; CN=GTS CA 1P5
*  SSL certificate verify ok.
* using HTTP/2

Yes, I mean old ssl.

This topic was automatically closed 3 days after the last reply. New replies are no longer allowed.