Please fill out the fields below so we can help you better. Note: you must provide your domain name to get help. Domain names for issued certificates are all made public in Certificate Transparency logs (e.g. crt.sh | example.com), so withholding your domain name here does not increase secrecy, but only makes it harder for us to provide help.
Cloudflare may create Let's Encrypt certs for its public facing edge. This is your cert history and Cloudflare is sending the most recent one issued. Did you have Cloudflare make a cert for its edge on Nov30? https://crt.sh/?Identity=shinymadness.com&deduplicate=Y
Your Origin Cert is used for between your server and Cloudflare edge. The public cannot see that connection including the sslshopper site you showed. Problems between your origin and Cloudflare is better addressed to Cloudflare community.
If I have misunderstood your problem please describe the problem in more words. Thank you
History is just that; And it can't be erased.
That said, the link you show it to an active wildcard cert for your domain.
Which would require validated DNS control of your domain to obtain.
Based on your authoritative DNS servers: