Why is my A Record not working with cloudflare origin cert?

[jackiegleason]

I have created an origin cert and set it up using nginx like…

server {
    # listen          80;

    listen  443 ssl;
    ssl_certificate /usr/src/secondave.pem;
    ssl_certificate_key /usr/src/secondave.key;
    server_name     ha.secondave.net;
    location / {
        proxy_pass          http://homeassistant:8123;
        proxy_set_header    Host    $host;
        proxy_set_header    X-Forward-For   $remote_addr;
    }
}

When I access via the IP I get the expected warning message about it being an insecure cert but it looks correct…

But when I try to access the actual subdomain it says the server is down. I have confirmed the A record looks correct and is pointed to the correct IP

What am I missing? It does look like it is hitting it enough to get the 302 because it ends on the authorize URL.

[jackiegleason]

Here is the DNS

[jackiegleason]

Also I seem to be getting the following when trying to get https://vpn.secondave.net

SEC_ERROR_UNKNOWN_ISSUER

But the cert looks correct

[Cyb3r-Jak3]

You are getting the error because origin certificates are only valid between your server and Cloudflare. When you have a DNS record of it will fail.