Please fill out the fields below so we can help you better. Note: you must provide your domain name to get help. Domain names for issued certificates are all made public in Certificate Transparency logs (e.g. crt.sh | example.com), so withholding your domain name here does not increase secrecy, but only makes it harder for us to provide help.
You are currently using cloudflare. They should be handling your public certificate. Right now you're serving an http website on an https port.
A second certificate will encrypt your connection from cloudflare to your server, search their documentation for "cloudflare origin CA" (or you can use a Let's Encrypt certificate.)