How to use Cloudflare with another CA

To use Cloudflare with another CA there are 2 methods:

  1. (The fastest, but may not work all the time)
    You can go to the cloudflare DNS panel, find the CNAME records you added for infinityfree. Click on edit and change proxy status to DNS Only. Done, wait a 60 minutes to 24 hrs and clear your browser (and WordPress if you are using a caching plugin) cache. This method doesn’t always work and disables other security features like HSTS.

  2. (The best method that I use)
    You go to the SSL/TLS Section < Edge Certificates and scroll down untill you reach Disable Universal SSL. Done, wait a 60 minutes to 24 hrs and clear your browser (and WordPress if you are using a caching plugin) cache. If you have HSTS enabled, you will need to already have your SSL Certificate installed in vPanel, or else your website would crash and not be accessible.

Side Note:

Cloudflare actually uses Let’s Encrypt CA now. It has all the benefits of the old Digicert CA (including autorenew), but it has a dedicated wildcard common name (if your domain is hello.com, the common name would be *.hello.com). However when I asked the community there, they said that it could change to their Digicert SSL and change back without any warning. If you want it to not change, then you would need to opt for their ACM (Advanced Certificate Manager) which costs $10 a month per domain. However when you pay the $10, you do get a free dedicated wildcard Digicert SSL that is valid for a year.
https://community.cloudflare.com/t/cloudflare-ca/274862

BTW if you use the method in the side note, you still should install a self signed SSL on your vPanel so it could encrypt the origin server. Just because it is a Let’s Encrypt SSL, doesn’t mean it also automatically encrypts the origin server. The only time you don’t have to do that is if you use Flexible SSL (not really secure) or use Cloudflare Pages (hosted on GitHub Pages).

Think your post should be in Community Guides ?

2 Likes

Okay I will move it there and see what would happen.

This topic was automatically closed 15 days after the last reply. New replies are no longer allowed.