You shouldn’t change to Flexible in the first place, as that’s an insecure legacy mode that drops your site’s security. Only Full Strict provides proper encryption.
But yes, a 521 means your server is not accessible. Make sure the addresses from IP Ranges are not blocked.