Install a certificate that covers this hostname on Cloudflare
Why it matters
The certificate the server presents is issued for other names, so browsers show a name-mismatch warning and refuse to continue silently. This happens when the host was never added to the certificate, or when the server picks the wrong certificate for the name.
The fix
- Universal SSL covers the apex domain and one level of subdomains (example.com and *.example.com). A name two levels deep, such as a.b.example.com, is not covered.
- Either use a one-level name, or buy Advanced Certificate Manager and order an advanced certificate that lists the host.
- The record for the host must be Proxied for Cloudflare's edge certificate to be served. A DNS-only record serves your own server's certificate.
The examples use example.com. Replace it with your own domain.
Related
- Reported by the certificate chain and expiry check
- Renew the expired TLS certificate
- Fix a certificate that is not valid yet
- Renew the certificate before it expires
- Replace the self-signed certificate with a trusted one
- Use a certificate from a publicly trusted authority
- Serve the full certificate chain
- Replace the expired intermediate certificate
- Re-issue the certificate with a stronger key
- Replace the certificate that uses a broken hash
- Fix the certificate that browsers reject
Scan your domain to see whether this applies to you.