Problems with 522 following migration of origin server from one server to another

Application Security Advanced Certificate Manager
4
  1. The part upowr.net and wattlepowr.com.au are main domains.
  2. umbriel and unicorn are 1st-level sub-domain.
  3. www is 2nd-level sub-domain, and if you’d want the www to be proxied :orange: , continue reading below to fix 522 issue.

I am afraid this is a case of deep-level subdomain as described here:

Easy and simple fix is to use and purchase Advanced Certificate Manager so the proxied :orange: hostname www.umbriel.upowr.net and www.unicorn.wattlepowr.com.au would have been covered with Cloudflare’s Universal SSL certificate.

Since unicorn and umbriel are 1st-level sub-domain, they’re covered by the default Cloudflare’s Universal SSL.

This certificate will cover your zone apex (example.com) and all first-level subdomains (subdomain.example.com), and is provisioned even if your records are DNS only. However, the certificate will only be presented if your domain or subdomains are proxied.

More about ACM which you’d need if you want www :orange: proxied and working for both sub-domains: