Help me, please! My site is still insecure because I don't have a valid certificate on my server

To install a SSL certificate it’s not a matter of uploading files onto your domain’s htdocs folder; you’ll have to copy the private key and the certificate and paste them into the relative fields in the “SSL/TLS” section of the Control Panel for your domain (and you’ll also be better off removing those files from your domain’s htdocs folder, because the private key should be private anyway). But if you’ll proceed to install the Origin CA Certificate from Cloudflare it won’t let you install it because we apply additional validation on SSL certificates; so you’ll be better off using our “Free SSL Certificates” tool to generate a self-signed SSL certificate and set Cloudflare’s SSL option to “Full”. Here’s an article to help you do that:

Afterwards, you can re-enable the proxy for all the records of your domain through Cloudflare (as right now they’re set to DNS only) by editing the record and setting that grey cloud to orange and that should be it!

6 Likes