Unsupported protocol on www

[it.jb]

Why Wait
I have created a subdomain shop.tonggarden.com.sg it’s work fine with cloudflare setup however if i try to access www.shop.tonggarden.com.sg it will give me ERR_SSL_VERSION_OR_CIPHER_MISMATCH

Test Before You Post
It work fine if i disable the cloudflare proxy. It’s already a week ok more so DNS and SSL certificate should be properly propagated

[domjh]

Hi @it.jb,

Looks like this:

Subdomain too deep

This tutorial covers a possible reason for the SSL_ERROR_NO_CYPHER_OVERLAP and ERR_SSL_VERSION_OR_CIPHER_MISMATCH errors (Firefox and Chrome respectively) when seen on a subdomain. The Cloudflare universal certificates cover example.com and *.example.com. This means that it covers any subdomain one level below the domain you signed up with. It will cover www.example.com and subdomain.example.com, as these are one level below the root domain, example.com. The certificate will not cover www.sub…

[it.jb]

Hi @domjh
I have a pro plan but i dont see any option for it. Do you have any doc link for setup ?

[domjh]

It’s not included in the Pro plan and will be an additional add-on.

Docs are here: https://developers.cloudflare.com/ssl/edge-certificates/advanced-certificate-manager

[it.jb]

Hi @domjh
I see then i guess it does not fulfill our requirement what is the use of paying if cant manage a simple SSL certificate .

[domjh]

I’m not sure what you mean, a two level deep subdomain is not ‘standard’ and will require additional hostnames on the certificate. You can do this with either the ACM add-on or with a Business Plan and custom certificate.

Alternatively, you can bypass Cloudflare on that subdomain, by unproxying it, and handle the certificate on your server, if you want.

[it.jb]

Hi @domjh

Thank you unproxying on www.shop worked fine