This hostname is not covered by a certificate and cannot reactivate Universal SSL

[jens.struck]

What is the name of the domain?

example.de

What is the error number?

1005

What is the error message?

Internal error encountered while processing change (Code: 1005)

What is the issue you’re encountering

In the DNS the A and other entries shows: “this hostname is not covered by a certificate” I’m already trying to switch Off/On the Universal SSL feature but only got error message ineternal error 1005

What steps have you taken to resolve the issue?

Changing browser, trying incognito mode, trying to deactivate / activate Universal SSL but only got error # 1005

What are the steps to reproduce the issue?

Just cannot use Cloudflare for my website traffic.

Screenshot of the error

[DarkDeviL]

@jens.struck

“this hostname is not covered by a certificate”

It’s hard to say anything conclusive, when you do not share the domain, and blur out the DNS records as well.

Do you by any chance have multiple levels of sub-domains?

@DarkDeviL

Universal SSL:
example.com
*.example.com

This means that both example.com, and one level like www.example.com, dev.example.com and intranet.example.com are included in Universal SSL.

If you have different intranets in your organisation, and require it all to be below intranet.example.com, such as intranets separated per continent, e.g.:

eu.intranet.example.com
na.intranet.example.com
as.intranet.example.com

Then this set up will not work alone with Universal SSL, as Universal SSL only covers the first level (e.g. intranet.example.com).

That said, -

What do you see under “Edge Certificates”?

→ https://dash.cloudflare.com/?to=/:account/:zone/ssl-tls/edge-certificates

[jens.struck]

Thank you DarkDevil for your answer. Well, you’re right. The domain we’re talking is presseservicebuero.de (www.presseservicebuero.de).

I don’t have any subdomains. And there are no entries (certificates) under Edge Certificates.
Do I have to delete the A, AAA, CNAME records on my Hetzner DNS?

[DarkDeviL]

@jens.struck

presseservicebuero.de

You have just adjusted some NS records within your current DNS provider.

You need to get delegation of name servers changed in the parent registry, through your domain registrar.

helium.ns.hetzner.de
hydrogen.ns.hetzner.com
oxygen.ns.hetzner.com

is still the name servers in the parent registry for that domain.

@jens.struck

on my Hetzner DNS?

Once the delegation of name servers has been changed properly, there will be nothing left to do on Hetzner DNS. All DNS management will then be done through Cloudflare.

[jens.struck]

Hmmm… below are my current Hetzner DNS entries (regarding NS Records):

; NS Records
@ 60 IN NS clyde.ns.cloudflare.com
@ 60 IN NS jessica.ns.cloudflare.com
Have changed this for more than 24 hours.

[Laudian]

You change your nameservers in Robot → Domains, not in the DNS section.

[jens.struck]

Exactly the opposite, but yes, I also changed the already changed DNS entry in the domain setup as well (the old one was actually still there ).
What happens now?

[jens.struck]

O.K. domain seems now active but got only the following error code after loading https://www.presseservicebuero.de
SSL_ERROR_NO_CYPHER_OVERLAP

[Laudian]

All working now:

[jens.struck]

Sometimes I should be a little bit more patient
AND obviously not changing the server provider and trying Cloudflare at the same time.

Thanks a lot for all the help appreciate it very much!