Re-issue the certificate with a stronger key on Cloudflare
Why it matters
The certificate's key is too short or uses an outdated algorithm, which weakens or breaks the encryption it protects. Browsers and CAs no longer accept such keys.
The fix
- Cloudflare's edge certificates use strong keys, so this finding points at a DNS-only record, which serves your own server's certificate, or at a custom certificate you uploaded.
- For a custom certificate, issue a new one with a stronger key and upload it under SSL/TLS then Edge Certificates.
- For DNS-only records fix the certificate on your server using the generic steps.
Related
- Reported by the certificate chain and expiry check
- Renew the expired TLS certificate
- Fix a certificate that is not valid yet
- Renew the certificate before it expires
- Install a certificate that covers this hostname
- Replace the self-signed certificate with a trusted one
- Use a certificate from a publicly trusted authority
- Serve the full certificate chain
- Replace the expired intermediate certificate
- Replace the certificate that uses a broken hash
- Fix the certificate that browsers reject
Scan your domain to see whether this applies to you.