Error issuing certificate

My domain is:

My hosting provider, if applicable, is: Fastcomet

I tried to issue lets encrypt ssl from (Cpanel>Let’s Encrypt™ SSL) using http-01 method. But I am getting the following error.

Hi @FuSan

your domain uses Cloudflare ( ):

Host T IP-Address is auth. ∑ Queries ∑ Timeout A Ashburn/Virginia/United States (US) - Cloudflare, Inc. No Hostname found yes 1 0
A Ashburn/Virginia/United States (US) - Cloudflare, Inc. No Hostname found yes 1 0
AAAA 2606:4700:30::681b:82e3 San Francisco/California/United States (US) - Cloudflare yes
AAAA 2606:4700:30::681b:83e3 San Francisco/California/United States (US) - Cloudflare yes

But you have redirects http -> https.

And Cloudflare can’t connect your domain: 525 0.410 S
Origin SSL Handshake Error
Visible Content: Error 525 Ray ID: 4f29a08aea66d0fd • 2019-07-07 11:55:02 UTC SSL handshake failed You Browser Working Berlin Cloudflare Working Host Error What happened? Cloudflare is unable to establish an SSL connection to the origin server. What can I do? If you’re a visitor of this website: Please try again in a few minutes. If you’re the owner of this website: It appears that the SSL configuration used is not compatible with Cloudflare. This could happen for a several reasons, including no shared cipher suites. Additional troubleshooting information here. Cloudflare Ray ID: 4f29a08aea66d0fd • Your IP : 2a01:238:301b::1229 • Performance & security by Cloudflare

So there is the typical Cloudflare error message.

Typical solution: Deactivate Cloudflare, create a certificate, then activate Cloudflare again.

But you have an active Letsencrypt certificate:

Issuer not before not after Domain names LE-Duplicate next LE
Let’s Encrypt Authority X3 2019-05-28 2019-08-26, - 2 entries

Isn’t it possible to install that? So Cloudflare is able to connect your domain?

Thank you for the super fast support. Managed to get dry run successfully by disabling cloudflare. Seems I need to wait some time because of the rate limit for too many failed attempt.

Can’t seem to re-instate the previous ssl. It got discarded by my silly mistake and I don’t seem to have a Jetpack backup of it. Anyway I think it will be fixed soon enough. Just need to try again later. Thank you once again for the support.

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.