/ Register

Learn about Centmin Mod LEMP Stack today
Become a Member

SSL Cloudflare Weird SSL Cert Behind Cloudflare?

Discussion in 'Domains, DNS, Email & SSL Certificates' started by GASTAN, Jan 7, 2020.

Previous Thread Next Thread
Loading...
  1. Jan 7, 2020 #1
    GASTAN

    GASTAN Member

    111
    12
    18
    Jun 28, 2017
    Ratings:
    +19
    Local Time:
    2:23 PM
    I have latest centmin beta installed and my wordpress site, which I did not get SSL cert for has one.
    Which find kind of strange. Strangest is, when I check the cert there is bunch of weird domains on it:
    upload_2020-1-6_16-27-19.png
    I dont understand what is it. Was my server hacked? Is this normal ?
    (I do use Cloudflare for DNS, but that's it)
     
  2. Jan 7, 2020 #2
    buik

    buik “The best traveler is one without a camera.”

    2,044
    527
    113
    Apr 29, 2016
    Flanders
    Ratings:
    +1,691
    Local Time:
    2:23 PM
    Nothing to worry about.
    Normal behavior, as you are sharing the service with others.

    If you really don't want this. You can obtain your own personal certificate.
    Via your own or by Cloudflare.

    However, I do not know which package you currently use at Cloudflare.

     
  3. Jan 7, 2020 #3
    eva2000

    eva2000 Administrator Staff Member

    58,895
    12,490
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +19,122
    Local Time:
    10:23 PM
    Nginx 1.31.x
    MariaDB 10.x/11.4+/12.3+
    You're using Cloudflare's free SSL cert which is a shared SSL cert with common names of Cloudflare protected domains included in the SSL cert. If you want your own domain name only then upgrade to paid $5/month dedicated SSL certificate at Cloudflare via the SSL/TLS > Edge Certificates dashboard tab. This forum uses the $5/month dedicated SSL cert :)

    Dedicated Cloudflare SSL Cert covers main domain.com and *.domain.com so is a wildcard SSL certificate :)

    cmm-dedicated-ssl-cert-cloudflare-01.png cmm-dedicated-ssl-cert-cloudflare-02.png
     
  4. Jan 9, 2020 #4
    GASTAN

    GASTAN Member

    111
    12
    18
    Jun 28, 2017
    Ratings:
    +19
    Local Time:
    2:23 PM
    thx guys.
    I have free CF plan.
    I guess I better go for LetsEncrypt then...
    Or disable SSL.
    problem with WP right now is, if somebody enters to site as https, then contact forms do not work, as they use HTTP urls, which is not allowed from https page
     
  5. Jan 9, 2020 #5
    eva2000

    eva2000 Administrator Staff Member

    58,895
    12,490
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +19,122
    Local Time:
    10:23 PM
    Nginx 1.31.x
    MariaDB 10.x/11.4+/12.3+
    Then fix the contact form to use HTTPS - ensure Wordpress domain in admin us HTTPS based and there's nothing wrong with using Cloudflare free ssl shared cert.
     
Previous Thread Next Thread
Loading...

.