Yes, Cloudflare will issue certificates for itself (which since your DNS points to them is correct), and then alert you through its certificate transparency monitoring service that a new certificate has been issued, without telling you that it's one that they asked for themselves. Definitely a common source of confusion; you're not the first person to be asking about it here:
Would certainly be nice if Cloudflare made things clearer.