[warn] RSA server certificate CommonName (CN) `CloudFlare Origin Certificate' does NOT match server name!?

Security
#1

Have added Cert from Origin Server and configure to Full (strict) but the site return 521 error.

Apache error log with below message when starting:
[warn] RSA server certificate CommonName (CN) `Cloudflare Origin Certificate’ does NOT match server name!?

#2

A 521 does not indicate a certificate issue but a general network issue. Make sure no firewall is blocking Cloudflare requests and the addresses from cloudflare.com/ips are whitelisted.

And yes, Origin certificates do not have the hostname in the CN but only in the SANs. That’s not an issue, though. That warning you can ignore.

1 Like
#3

Thanks for prompt reply. So, should be Apache issues ?

#4

Could be, but also a firewall issue.

#5

This topic was automatically closed 3 days after the last reply. New replies are no longer allowed.