Improving LifeSpan of SSL Certificate

I have been told the following:

‘If your are using custom domain, you can use Cloudflare instead.
Together with a self-signed cert in full SSL mode. It is good for 10 years’

I do have a custom domain, from VentraIP, and will be using InfinityFree to host my WordPress
website. What I am generally doing is setting up SSL for my website, from private key to SSL Certificate.
I have been told that there is a way to involve Cloudflare to give my certificate a life of 10 years. Is this true, and how is it possible, can it be done for free, particularly if working with InfinityFree to hold WordPress for me?

Who told you this?

Depends whether you mean a public certificate or an Origin Certificate.

Major browsers will not accept a publicly trusted certificate that is valid for more than a single year.

The suggestion of the person above recommended a self-signed cert in Full SSL mode, but that is still an insecure configuration since Cloudflare does not validate the self-signed cert.

What you would want to do if you want to avoid changing the SSL cert on your origin provider (InfinityFree I suppose) is create an Origin Certificate from within Cloudflare, install that on the host and set SSL mode to “Full (Strict)”

Alternatively, configure SSL/TLS at the origin with an auto renewing Let’s Encrypt certificate, if it supports that.

What you would want to do if you want to avoid changing the SSL cert on your origin provider (InfinityFree I suppose) is create an Origin Certificate from within Cloudflare, install that on the host and set SSL mode to “Full (Strict)”

-Does Cloudflare offer Origin Certificates for free, or to cover Australia?

-Is there anyone who can reply to my post here with a step-through as to how I could accomplish the latter suggestion here, by means of Cloudflare and InfinityFree? How can I obtain a free Origin Certificate, and then “install” that within InfinityFree, and then change the relevant setting on InfinityFree, also?

Origin certificates are certificates that are only trusted by Cloudflare, and are used for secure communication between your web host and Cloudflare’s network. You may generate as many as you need for as long as you desire for free.

Read about them here:

Unfortunately since I am not familiar with InfinityFree I can’t guide you step by step, however I do recommend you look through the following tutorials, most of the information should apply to other hosts:

1 Like

This topic was automatically closed 15 days after the last reply. New replies are no longer allowed.