Cloudflare Origin CA Certificates are only trusted by the Cloudflare Proxy. You need to enable Proxy ( ) on your apex’s (shoptop-store.com) DNS Record for it to work.
However… either you’ve already figured this out, or you turned it on recently and you’ve just got local DNS Cache still, it looks all good from my end.