Secure Connection Failed on mobile, often not always

[jim38]

What is the name of the domain?

Home

What is the issue you’re encountering

Have recently set up our site on cloudflare. We’re getting a Secure Connection Failed error on mobile on Firefox quite frequently, but otherwise site appears to be working well.

What steps have you taken to resolve the issue?

There is no error number or information given on the error except “someone could be trying to impersonate the site…”
The only thing I’ve spotted are a couple of subdomain DNS entries
www.legalhistory.casedo.com
www.status.casedo.com
Which have the warning triangle next to them, saying that they are NOT covered by certificates, yet they are (Siteground is our host).
I really don’t know where to look. Errors logged with this title appear to be different errors to this, from what I’ve found on the community site and in the kb docs.

Was the site working with SSL prior to adding it to Cloudflare?

Yes

What is the current SSL/TLS setting?

Full (strict)

What are the steps to reproduce the issue?

Got to casedo.com on firefox on a mobile device.

[michael]

@jim38

Which have the warning triangle next to them, saying that they are NOT covered by certificates, yet they are (Siteground is our host)

This is not correct.

Cloudflare Universal Certificates only cover one level of subdomain. So status.casedo.com is fine, but www.status.casedo.com is not. Those two entries are configured , which means that you need a valid certificate in Cloudflare. You could subscribe to Cloudflares Advanced Certificate Management to be able to deploy certificates for any hostname within the domain. You could also set the DNS entry for the www subdomains, but this would bypass all Cloudflare security and performance features.

[jim38]

Many thanks for the fast reply.

Thanks for clearing that up, it was my misunderstanding of what a first level subdomain is (Limitations for Universal SSL).

I’ll sort that out and see if I continue to get the error.

On a side note, if I’m using Cloudflare for my DNS, should/must I delete the DNS records on my origin server. I can find nothing about that in the available documentation.