I have a problem with displaying the SSL certificate on Android phones: Huawei P smart, FIG-LX1, PRA-LX1, Samsung S10+. NET:ERR_CERT_AUTHORITY_INVALID appears. On other devices it’s ok. I know that Cloudflare made changes to our certificate on May 17th. Request for help.
ps. I’ve disabled SSL and re-enabled but that didn’t help
If I buy Advanced Certificate Manager, will it help to fix this error? Has anyone managed to fix this error yet?
@sklep8, while not directly related to the proxy issue here, you do have a general security issue as you selected an insecure legacy mode here. Make sure it is Full Strict, otherwise you have no proper encryption and verification.
ok but it requires a trusted CA or Cloudflare Origin CA certificate on the server
Of course, it requires a valid certificate. Without a valid certificate, you do not have any security to begin with.
It perfectly works before Cloudlfare changed our SSL provider from Let’s Encrypt to Google Trust Serivces LLC (problematic) without asking for any confirmation.
Afraid, it can never perfectly work with that encryption mode for aforementioned reasons. Even more so if you have no secure server.
1 Like
ok, so please tell me what should i do step by step. Thank you
Fixing the encryption issue is easy.
- Switch the encryption mode to Full Strict
- Configure a proper certificate on your server. Contact your host if necessary
Why you should choose Full Strict, and only Full Strict has more on that.
1 Like
My SaaS support notice me that i can’t change it to FULL Strict 
Can anybody help me?
Personal recommendation, don’t accept their response. They are essentially telling you they cannot secure your site.
I have same problem. I think that only @Cloudflare can change it
I have same problem. Please let me know if desabling Uniwersal SSL worked.
Have you fixed the encryption mode already?
the problem is still not resolved…
Then I would start by fixing the encryption mode.
i’ve solved this problem - just disable universal SSL and turn off SSL encryption for few minutes. Then you have to all turn on.
best regards and thanks for you replies
1 Like
That may solve the proxy certificate, but it does not fix the server certificate.
You still need to configure a proper certificate and set the correct encryption mode to Full Strict, otherwise the site still has no encryption.
This topic was automatically closed 3 days after the last reply. New replies are no longer allowed.