Use Cloudflare SSL on 20i package

https://support.cloudflare.com/hc/en-us/articles/115000479507
https://support.cloudflare.com/hc/en-us/articles/115003011431#526error

https://support.cloudflare.com/hc/en-us/articles/214820528-Validating-a-Let-s-Encrypt-Certificate-on-a-Site-Already-Active-on-Cloudflare

https://www.sslshopper.com/ssl-checker.html

https://support.cloudflare.com/hc/en-us/articles/115000479507-Managing-Cloudflare-Origin-CA-certificates

https://developers.cloudflare.com/ssl/origin-configuration/origin-ca

• Create an origin certificate in Cloudflare (under SSL/TLS, Origin Server) and get the first Cert and Private Key.
• 2nd certificate is from the Origin CA Certificate (see below).
• Use Orange clouds in Cloudflare
• Set rule to bypass cache (as below). NOTE – URL doesn’t need dot at the beginning so that it covers the whole domain.
  

 

Example of first Certificate and Private Key

—–BEGIN CERTIFICATE—–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—–END CERTIFICATE—–

—–BEGIN PRIVATE KEY—–
MIIEvgIBADANBgkqhkiG9w0BAQEFAASCBKgwggSkAgEAAoIBAQCnU1O6cHQxbdwE
nswEgbIvdUAIAq9hiCbzY+Q8SbBV7bXj1ubkn3KafA8X/HjaU5ztwN7C4VyTr1WQ
mP9nvElCv+bXRyspoUIzvByWri/Tk8iTzMw+kMiN7hfSZmClh4gjS9Z9LlGbePnu
/XyhvNWebf5Ruy+J9YP9I1UCKGEyRsQhsounoz6C2+pw84S2gpyQZtKhFcIq4W6q
AgoVp4gWRBZ2VhQGdSDaeW5EV5wITcHK1QtSxBpqg5WU/EgcwONEO2/YgCHb4um5
SOVpYnaWnvR0DiPfGgklaLrgv3sWuazQ1pATTJYvywfGwSYl5LHQQLihBXbhDDK/
NG5BruWfAgMBAAECggEASeg85e9w6zpWwfWwMNdmsJ6uEzu4YrCkX8JCGD0GNdZD
DqmoH9ir4r+kXRhn+yuOd9fGrTak0RjThwSFX7kjdOfVm0Y0svUnDDntOMMkneQ7
ZslBd+s0orhFbmpJCyRjxg9j5LQWWMFlSCJQMBJ8GrgD6u7uzxWSYLf//u1+DRnM
4IubWPGiD/XvCnjqiezF7yzt+oduRpAcb2utF4KazAl7ERWBEORNcj2Nme8EXnhK
rS5p/+9WoFWAn6vI+c3ogOqFwDfDtmPvouAVh3rSZl2Jgr3ihM9z907WZje33AFk
qta0WoVxw62mUKv4b7IMxfL7xyMo20qoabDSIpunzQKBgQDXhbw+FYwoMk++hV/D
9aK26HshGZhsFOMs0a3dSxuSz3sUPM0+0Pt02ZNx33SH6y0Ty0Z6mMHxWZv+cg0d
DqgrBn3/3in8dmviDHtvyyCSSShDTQj2o2PDTXN82BlPTJglQEhYStb8qYGepKNC
MccgihSYVOiPBimzKcedxIL3YwKBgQDGwEvSUAY2qec9DRTda9zekXjwBv4xkPtp
/F/Th/hq7RB/2PLTkb8AsHzs5nU6xg+fnmsEU7YplPTCRQJqO6D7yAFFT1CCR34h
kzz7gnn/JCkBq8AQ7FUGtPPMifxUQGBgAndz6b+a1RM6/k53pQOaW0MXSf7UI362
2mPIP1JDlQKBgD5p4UjNbqhZYZSYBVK3eOalTrsYMXbjWaKqGkKitJqAcXE75mhR
lvCQ7c0lXBbceVJpJMDuKgQd4jn+h2Op0fObzrNhgCE3nih5WunWFlmmy/0pevYJ
/SMa893squ+3C7yF8C15hubmo73wicLqrXLz6eDvfeWlcEANUlyTAyZnAoGBAJ0f
+xFKaI8gpQnz5JHkKxndwdFohd7jso8okQ1nCjJmNkwMVHSEXY8K98hFrVoIqONU
11/1WibndtR6wB0CBRPoG3ES8h/8qy+Z+nUPwqi9ipmikVYPsGx78925HL3yov5k
FNGTcwHR/8D8uUYHM6D9Ez4/JnHJmeyvHIF75eo9AoGBAJrUZKFGCDBA8IGNSSAZ
2koMAlCNVPlB/m4kZm1hy1wHtvYNhiqhOlObwgkGow7jzXCkXKUOuTlWwsFeg6tI
2cf/aYeREKy+Q5tbtH1vcztO6o3uug2sSMM7/Zn7YfmHCHXnCS7f5ioJEObXLHm2
ni5qzkICRxI2W7XJzt005wGI
—–END PRIVATE KEY—–

 

Origin CA Certificate

https://developers.cloudflare.com/ssl/origin-configuration/origin-ca

NEW ONE – 08/03/2024

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----