Lost HTTPS due to new IP address for my website. How to get a new certificate?

[hshafiq]

Hello Cloudflare community, I hope everyone is well. I have a couple of domains with Google Domains and I have change the name servers to the Cloudflare ones. If I have a look at the Crypto section, it says “Active Certificate” next to Universal SSL Status. However, there is no HTTPS when I access my website. The URLs are onlineaudioconverter.net and freeaudioconverter.net

The SSL type is set to “Flexible” (the default), and both Always Use HTTPS and Automatic HTTPS Rewrites are enabled.

Am I missing something?

[hshafiq]

The first domain loads fine on HTTPS

Not for me. Here’s a screenshot: https://i.imgur.com/8McxZTq.png
(I have done an empty cache and hard reload.)

the second one does not have any DNS records associated.

What do you mean?

[sdayman]

The first one maybe just be your DNS not up to date yet. If it’s a new addition, it may take a day or two.

I can reach the second one, but it redirects to https and then shows the 522.

Community Tip - Fixing Error 522: Connection timed out

Error Try the suggestions in this Community Tip to help you fix Error 522 “ERR CONNECTION TIMED OUT” in Google Chrome or “The connection has timed out” in Firefox. Background A 522 error happens when a TCP connection to the web server could not be established. This typically happens when Cloudflare requests to the origin (your webserver) get blocked. When this happens, you’ll see “ERR_CONNECTION_TIMED_OUT”. Quick Fix Ideas Make sure that you’re not blocking Cloudflare IPs in .htaccess, ip…

[hshafiq]

I can reach the second one, but it redirects to https and then shows the 522.

That’s interesting, I can access the second URL just fine. It does not have HTTPS but you said that my DNS my not be up to date yet so I will give it a day or two.

I find it interesting that you cannot access the second URL (freeaudioconverter.net). Both domains point towards the same IP, which is an Amazon EC2 Ubuntu server.

[sdayman]

I can reach freeaudio on HTTP, but it redirects to HTTPS, then throws a 522.

[hshafiq]

I guess I’ll wait a day or two. Because if onlineaudioconverter.net works, there’s no reason why freeaudioconverter.net shouldn’t work. It’s just another domain, pointing towards the exact same server. There can’t be any server settings that are causing this because if this was the case, you would be getting the same issue when accessing onlineaudioconverter.net

[hshafiq]

I use Amazon AWS for my website and I switched from an Ubuntu server to a Windows one. This means that my website is linked to a new IP and I have lost the HTTPS that I got with Cloudflare. In the DNS section, I have edited the “points to” IP to the new IP.

What do I need to do to get a new certificate for HTTPS? In the “Crypto” section, it still says “Active Certificate” but this is obviously not the case anymore.

My domains are onlineaudioconverter.net and freeaudioconverter.net. Both domains are linked to the same IP.

Come someone please look into this and let me know what the situation is?

[hshafiq]

I use Amazon AWS for my website and I switched from an Ubuntu server to a Windows one. This means that my website is linked to a new IP and I have lost the HTTPS that I got with Cloudflare. In the DNS section, I have edited the “points to” IP to the new IP.
What do I need to do to get a new certificate for HTTPS? In the “Crypto” section, it still says “Active Certificate” but this is obviously not the case anymore.

My domains are onlineaudioconverter.net and freeaudioconverter.net. Both domains are linked to the same IP.

Come someone please look into this and let me know what the situation is?

[domjh]

Hi @hshafiq,

Both work with HTTPS for me, however, the first redirects all traffic to HTTPS, but the second does not. You can enable ‘Always use HTTPS’ in the SSL/TLS app of your dashboard if you want it to.

[hshafiq]

Hi @domjh
Thank you for your reply. I have now enabled ‘Always use HTTPS’ for the second one.

[Judge]

Both are currently working for me

[hshafiq]

Thank you. Neither show https when I access them via Wi-Fi. Perhaps my ISP’s DNS servers need to update or something.
@domjh @Judge:
Straight after I changed the IP, I had a look at the Crypto section and it still said “Active Certificate”, which makes it seem like Cloudflare did not try issuing a new certificate. But the fact that both of you are seeing HTTPS has given me hope.

Does Cloudflare automatically issue a new certificate when the IP is changed?

[domjh]

It is probably a cached value on your end, I can confirm they both work OK for me.

It should not need a new certificate issued if you update the IP.

[hshafiq]

It is probably a cached value on your end

Is there any way to clear the cache?

[domjh]

You could try clearing your browser cache and

ipconfig /flushdns in a command prompt.

You could also check with a different browser/device/network.

[hshafiq]

@domjh
Thank you. I must say that I appreciate the responses from everyone. Today is the first time that I have used Cloudflare, and the fact that one can get quick responses to queries has left a good impression.

Go Cloudflare!