Cloudflare’s Universal SSL covers one level of subdomain, so you can have a.axample.com, but not a.b.example.com. If SSL is working on your root domain, then if your subdomain is set to 
, SSL should work there too.
There are troubleshooting ideas in SSL/TLS not working on subdomain