# Help me, please! My site is still insecure because I don't have a valid certificate on my server **URL:** \ **Category:** Hosting Support\ **Created:** [June 28, 2023, 7:53pm UTC](https://forum.infinityfree.com/t/help-me-please-my-site-is-still-insecure-because-i-dont-have-a-valid-certificate-on-my-server/78257 "2023-06-28T19:53:52Z")\ **Posts on this page:** 1\ **Showing post:** 2
**Author:** ![anon90933456](https://forum.infinityfree.com/letter_avatar/anon90933456/32/5_5575768a8748004e209b776fc1b2916d.png) [@anon90933456](https://forum.infinityfree.com/u/anon90933456)\ **Post date:** [June 28, 2023, 8:05pm UTC](https://forum.infinityfree.com/t/help-me-please-my-site-is-still-insecure-because-i-dont-have-a-valid-certificate-on-my-server/78257/2 "2023-06-28T20:05:33Z")
To install a SSL certificate it’s not a matter of uploading files onto your domain’s `htdocs` folder; you’ll have to copy the private key and the certificate and paste them into the relative fields in the “SSL/TLS” section of the Control Panel for your domain (and you’ll also be better off removing those files from your domain’s `htdocs` folder, because the private key should be private anyway). But if you’ll proceed to install the Origin CA Certificate from Cloudflare it won’t let you install it because we apply additional validation on SSL certificates; so you’ll be better off using our “Free SSL Certificates” tool to generate a self-signed SSL certificate and set Cloudflare’s SSL option to “Full”. Here’s an article to help you do that: > [@How to setup Full SSL with Cloudflare](https://forum.infinityfree.com/t/how-to-setup-full-ssl-with-cloudflare/60679): > > By default, Cloudflare uses a system called “Flexible SSL”. In this system, Cloudflare secures the connection between your visitors and Cloudflare, but not the connection between Cloudflare and your website. Not only is this less secure, some websites (notably WordPress) have trouble detecting whether HTTPS is in use, causing all sorts of issues. The best way to resolve this is by using Full SSL in Cloudflare. This way, the connection between Cloudflare and your website is encrypted, and your w… Afterwards, you can re-enable the proxy for all the records of your domain through Cloudflare (as right now they’re set to DNS only) by editing the record and setting that grey cloud to orange and that should be it! --- _[View the full topic](https://forum.infinityfree.com/t/help-me-please-my-site-is-still-insecure-because-i-dont-have-a-valid-certificate-on-my-server/78257)._