Let's Encrypt certificates for the 3 level domains

[ivangorshkov]

https://www.cloudflare.com/diagnostic-center/?url=artsgallery.paintinggallery.pro

I can not receive the Let’s Encrypt certificate with the error that the A record does not exist for the www.artsgallery.paintinggallery.pro: Screenshot by Lightshot

I have this records in DNS for this domain (I have free Cloudflare plan): Screenshot by Lightshot

Is this because my settings are wrong or because the limitations of the free plan? Please, give advices in order to change the settings or just remove the Cloudflare free account.

[fritex]

@ivangorshkov

www.artsgallery.paintinggallery.pro

That’s a long sub-domain with the www prefix.

If the record www.artsgallery is cloud at Cloudflare dashboard at DNS tab, kindly try switching it temporarly to cloud, wait for few minutes, and try again to generate a LE certificate.

Also to note here, if you have artsgallery or any other cloud sub-domain, which are included in your Let’s Encrypt SSL certificate, switch them too (temporarly) to to make sure the renewing process could succeed.

After success, switch them back again to cloud (proxied)

[ivangorshkov]

Sr, thank you for your reply! I did not have www.artsgallery A record. I added it now. Please, check Screenshot by Lightshot
Is it enough now?

[fritex]

I believe yes, that’s correct from the provided screenshot from above.

Just for a reminder, if the process fails, regarding the domain names listed on your SSL certificate, you may temporarly need to switch one or more A type clouds to , run the renew process, after complete, switch back to .

[ivangorshkov]

Sr, it is telling tls handshake error with cloud: Screenshot by Lightshot
I am following your advice and switching to Screenshot by Lightshot
Now I am trying to renew the ssl. And… it has worked for me! Screenshot by Lightshot
Thank you!!!
Does it mean that every time I should switch to in order to avoid connection errors while issuing the ssl certificate? Is this the free plan limitation?

[fritex]

@ivangorshkov

Does it mean that every time I should switch to in order to avoid connection errors while issuing the ssl certificate?

Short answer - yes.

@ivangorshkov

Is this the free plan limitation?

No, it is not. I am not 100% sure the answer, while there are some other tries and workarounds, but the suggested one from my above post works best for me.

Maybe trying with a search would get us some better answers for future understanding of the architecture working under it:

• https://community.cloudflare.com/search?q=let's%20encrypt

Let Let's Encrypt bot bypass Always Use HTTPS

I ran a simple test with page rules, via turning off Always Use HTTPS at the SSL page, then create a page rule for */.well-known/acme-challenge/* with SSL to off, followed by a second page rule for * that turns Always Use HTTPS back on. This of course is not the ideal solution, but it shouldn’t require any manual intervention over time. Agreed that this should be something more of a checkbox/actual page rule item.

Let's Encrypt and Cloudflare. How to set?

Hi. I dont’t know how to make these work together. These are my actions: In Cloudflare dashboard im disabling ssl (off) hsts http rewrites universal ssl Im leaving enabled TLS 1.3 and 1.0 default + Authenticated Origin Pulls. Then im pausing Cloudflare and disabling DNS (clouds). Then im installing lets encrypt and checking if it works with https://www.sslshopper.com. And it works but my site is unacessible. In firefox i have SSL_ERROR_NO_CYPHER_OVERLAP error. After this i tried in direct…