I would like to know, is there any update. I have same issue with one of my sites
1 Like
We’re also experiencing this issue.
It seems our certificate now using the authority “GTS CA 2P2” which is not listed on older versions of Android like 7, 8, 9 as a trusted credential.
Has there been any change to Cloudflare’s certificate issuing lately? Our certificate has just been automatically renewed by Cloudflare and we’re facing the issue…
Is it possible to stop using the active Universal SSL to start using the backup? Or generate a new certificate?
We’ve just solved the issue by ordering an Advanced Certificate and selecting “Let’s Encrypt” as a Trusted Authority (it costs US$10).
1 Like
@joao5 @tigran515200
Well it’s weird
I have 3 sites in the same Cloudflare account from the same origin server, however, only one site has this issue.
If it was the certificate the 3 sites should be affected.
how to change ssl certificate from google trust services? Alot of devices cannot reach my site because of the SSL certificate, i know you can pay $10 a month to select your own but is there any other way?
Anything going to be sorted about this?
We have raised the issue and waiting for acknowledgement from Cloudflare. No update yet.
7 Likes
I bet your other sites dont have google trust services as ssl certificate, all my sistes eith google trust services has the issue, other issuers fine
Looks like GTS CA 2P2 cert issued by goo gle service is cause of this issue.
Sites with Cloudflare certs appear to work fine.
Some new cloudflare nameservers started using the new gts ca 2p2 cert?
I didnt change any name servers and google trust was auto added as certificate to alot of sites, hopeful they can reverse this or fix
We also didn’t change any name servers and google trust was auto added as certificate to some of our sites. Those sites are now having issues on some devices.
yup android 7 devices here all now throwing certificate errors at me, those devices were crucial to the operation of my website and are now refused access urgent help greatly appreciated.
My API domain certificate got renewed on 16th MAY 2023 .Now it is giving issues while some of the android users are using it out Mainly in android version 9 it is saying site is not secure .Please help me out how to mitage it out .My domain that is using is :api.klink.finance
Cloudflare should no longer be issuing Universal SSL certificates using this root. Existing certificates will continue to be used until they expire and are reissued. You can force Cloudflare to reissue the Universal SSL certificate by disabling Universal SSL, waiting a couple of minutes and then re-enabling Universal SSL. Do note that disabling Universal SSL will make your site inaccessible over HTTPS.
If disabling Universal SSL is not an option, please create a support ticket and post the ticket number here. We will make sure it is escalated. Cloudflare Support can then manually reissue the certificate, but it may take a few days.
7 Likes
just tried this still got google cert reissued, shall try again throughout the day
You may still get a GTS certificate, but it should be trusted on older devices now. Please check if the same devices are still having issues.
Yup still getting refused https://www.ssllabs.com/ssltest/analyze.html?d=pogostoke.co.uk&latest those gts certs just aren’t available to be trusted certs for android 7 atv’s
OK took 3 attempts but latest has successfully communicated with the devices
Thanks! It worked for me.
This topic was automatically closed 3 days after the last reply. New replies are no longer allowed.