The SSL certificate in my web site not point on my web site

ssl

#1

With the www, my web site point on the server but first on Cloudflare. How to solve it ?
Without the www, my web site point to the server only. It’s OK.

The cPanel writes me that the SSL certificate will be expired on February 4th, 2018. In my site, the certificate is valid until December, 2018.

NSLOOKUP Command

With the www (www.pixel-design.ca)
DNS server: www.inter-systeme.ca
DNS server’s address: 209.126.119.29#53
www.pixel-design.ca canonical name = www.pixel-design.ca.cdn.cloudflare.net

Without the www (pixel-design.ca)
DNS server: www.inter-systeme.ca
DNS server’s address: 209.126.119.29#53
Name: pixel-design.ca
Address: 209.126.119.40


#2

On January 27th at about 6 pm, I changed following ones:

CloudFlare : Active
Crypto: SSL : Full SSL (strict)

Wait 24 hours so that the modifications are effective.

Any suggestions to fix this ?

The cPanel writes me that the SSL certificate will be expired on February 4th, 2018. In my site, the certificate is valid until December, 2018.


#3

Right now, your site does not seem to be working, and is not using Cloudflare.

When using Cloudflare SSL, Cloudflare provides its own SSL certificate with its own expiration date. Your server may have its own SSL certificate with its own expiration date.

They will not have the same expiration date. You (or your server) will need to renew your local SSL certificate, but Cloudflare will automatically renew the one provided by Cloudflare SSL.


#4

Thus, by activating CloudFlare and in Crypto : SSL : choose Full SSL (strict), the problem will be fixed ?

OR otherwise

Delete my web site from CloudFlare account ?

Full SSL (strict): Your origin has a valid certificate (not expired and signed by a trusted CA or Cloudflare Origin CA) installed. Cloudflare will connect over HTTPS and verify the cert on each request.


#5

One way or another, you will be able to get your site to work with Cloudflare. Full (Strict) will work as long as cPanel keeps renewing your SSL certificate on your server. However, with the ‘www’ pointing at that canonical name at cloudflare.net, Full (Strict) isn’t going to work. (see next paragraph)

In your first post, the lookup looks wrong. The ‘www’ should point to the same place (IP address) as non-www. Are you making changes directly at Cloudflare, or is your hosting provider having you make the changes at inter-systems?


#6

It’s my hosting that a add www, because in my SSL Certificat, the www is written.

I changed at Full SSL (strict) 17 hours ago.


#7

If I ask to my hosting provider to remove my account from CloudFlare, the problem with the ‘www’ pointing at that canonical name at cloudflare.net will be fixed ?


#8

Don’t use the canonical name. Use an IP address.


#9

If I ask to my hosting provider to remove my account from CloudFlare, the problem will be fixed ?


#10

If they remove your account from Cloudflare, you can go back to whatever non-Cloudflare setup you had before.


#11

Thus, the problem “www pointe to CloudFlare will be fixed ? And will pointe to the server ?”


#12

Only if your hosting configuration is correct. Once you remove Cloudflare, you will have to take care of any problems at your hosting plan, not at Cloudflare.


#13

Thank for your assistance