Point subdomain to Digital Ocean droplet

No, that’s their DNS if that’s the name servers you use…which you don’t.

Are you possibly trying to use HTTPS and your server isn’t listening on Port 443?

Try opening a Support Ticket here. They might see why there’s a 521:
Login to Cloudflare and then contact Cloudflare Support by clicking on the Get More Help button.