SSL/TLS encryption mode Full

Website, Application, Performance Security
1

Greetings,
I recently added a website under the protection of cloudflare WAF. My current SSL setup is “Full” and everything works fine. My doubt is the following: does the full configuration require there to always be a valid SSL certificate on the origin server? What will happen when the SSL certificate expires on my origin server? Do I need to renew the certificate on my origin server or is it no longer used with this configuration?

Another doubt is the following:
I’m using the “Universal SSL” edge certificate, so I expected to find something like “ssl123456.cloudflaressl.com” in the common name, but instead I find the name of my domain. What could it be due to?

url: www.charitystars.com

3

Keep the certificate on your server up-to-date. This is necessary. And switch to “Full (strict)”.

(The certificate on your server should be free; just use Let’s Encrypt, in case you’re worrying about paying for it. Certificates are free these days.)

As for the edge certificate, Cloudflare creates a certificate for your domain name.

4

Thanks for the reply

5

This topic was automatically closed 2 days after the last reply. New replies are no longer allowed.