Need help?

Our experts have had an average response time of 13.52 minutes in October 2021 to fix urgent issues.

We will keep your servers stable, secure, and fast at all times for one fixed price.

Let’s Encrypt with Cloudflare – How to use

by | May 14, 2021

How do we use Let’s Encrypt with Cloudflare?

Let’s Encrypt is an open service for creating free SSL certs for our site. Improper configuration settings while using Cloudflare with Let’s Encrypt, could cause connection errors.

As a part of our Server Management Services, we help our Customers with tasks related to Let’s Encrypt regularly.

Let us today discuss how to set up Cloudflare to use Let’s Encrypt SSL.

Let’s Encrypt with Cloudflare

To use Let’s Encrypt in Cloudflare, Let’s Encrypt should be installed on the server.

SSL mode in Cloudflare account

First, we will need a Cloudflare account and will need to generate a Let’s Encrypt x3 cert on the server.

While selecting incorrect SSL mode in Cloudflare, it will not load and instead will display an invalid SSL cert. This is a common error and one that can be avoided to ensure that our customers have a positive and trusted experience with our site.

A key part is to make certain the correct SSL mode is set in Cloudflare since it offers a number of different SSL modes:

  • Off
  • Flexible SSL
  • Full SSL (Recommended Setting)
  • Full SSL (Strict)

SSL Modes can be accessed from the Crypto section in the Cloudflare dashboard. Select the domain we want to work with. Then select “Crypto” top menu option in Cloudflare. Under SSL select – Full. Scroll down to see Always use HTTPS and set it to ON.

Let’s Encrypt with Cloudflare

SSL settings in Cloudflare

After setting the SSL mode, we need to enable HSTS. On the HTTP Strict Transport Security (HSTS) section, select Enable HSTS. We will need to select the “I understand” checkbox and click on the Next button.

A pop-up box will appear, where we will set the above values and click save:

  • Max-Age: 3 months
  • Apply HSTS policy to subdomains (includeSubDomains): Off
  • Preload: Off

Now, we need to set to Minimum TLS Version to TLS 1.2 and Opportunistic Encryption to ON. Also, set TLS 1.3 to Enabled and Automatic HTTPS Rewrites to On.

Further, Disable Universal SSL by selecting this option. As we are no longer using Cloudflare Universal SSL certificate and are using SSLs stored in our server, in this case, Let’s Encrypt. Click “I understand” and select Confirm.

These simple changes made in Cloudflare will help to avoid any dreaded downtime. This means that customers can fully trust that their data is securely transferred with HTTPS through Let’s Encrypt.

[Need any further assistance with Cloudflare errors? – We’re available 24*7]


In short, Improper configuration settings while using Let’s Encrypt, could cause connection errors. Today, we saw how our Support Engineers perform this task.


Submit a Comment

Your email address will not be published. Required fields are marked *


Privacy Preference Center


Necessary cookies help make a website usable by enabling basic functions like page navigation and access to secure areas of the website. The website cannot function properly without these cookies.

PHPSESSID - Preserves user session state across page requests.

gdpr[consent_types] - Used to store user consents.

gdpr[allowed_cookies] - Used to store user allowed cookies.

PHPSESSID, gdpr[consent_types], gdpr[allowed_cookies]


Statistic cookies help website owners to understand how visitors interact with websites by collecting and reporting information anonymously.

_ga - Preserves user session state across page requests.

_gat - Used by Google Analytics to throttle request rate

_gid - Registers a unique ID that is used to generate statistical data on how you use the website.

smartlookCookie - Used to collect user device and location information of the site visitors to improve the websites User Experience.

_ga, _gat, _gid
_ga, _gat, _gid


Marketing cookies are used to track visitors across websites. The intention is to display ads that are relevant and engaging for the individual user and thereby more valuable for publishers and third party advertisers.

IDE - Used by Google DoubleClick to register and report the website user's actions after viewing or clicking one of the advertiser's ads with the purpose of measuring the efficacy of an ad and to present targeted ads to the user.

test_cookie - Used to check if the user's browser supports cookies.

1P_JAR - Google cookie. These cookies are used to collect website statistics and track conversion rates.

NID - Registers a unique ID that identifies a returning user's device. The ID is used for serving ads that are most relevant to the user.

DV - Google ad personalisation

IDE, test_cookie, 1P_JAR, NID, DV, NID
IDE, test_cookie


These are essential site cookies, used by the google reCAPTCHA. These cookies use an unique identifier to verify if a visitor is human or a bot.