The ssl-certificate is cut down over time

I have same problem with site https://osteriya-mario-banket.ru.
At first the site works fine, then this error ERR_SSL_VERSION_OR_CIPHER_MISMATCH appears and nothing helps, even after watching this video and discussions here.

I solve this problem by disabling Universal SSL and then enabling.


After 5 minutes cert reissued and site works fine :slight_smile:

Why does this happen periodically with different domains?
Bug or feature by Cloudflare?

This appears to be a relatively frequent issue with DigiCert at the moment, and their restricted TLDs, which includes ru.

https://knowledge.digicert.com/solution/Embargoed-Countries-and-Regions.html

Toggling Universal SSL usually fixes it since it will try a different CA, but if you want to set your default Universal SSL CA to something like Let’s Encrypt via the API, that should resolve it moving forward:

curl -X PATCH "https://api.cloudflare.com/client/v4/zones/ZONE_ID/ssl/universal/settings" \
     -H "X-Auth-Email: EMAIL_ADDRESS" \
     -H "X-Auth-Key: API_KEY" \
     -H "Content-Type: application/json" \
     --data '{ "certificate_authority": "lets_encrypt" }'

This topic was automatically closed 15 days after the last reply. New replies are no longer allowed.