Cloudflare edge + Origin certificate
Cloudflare shows visitors its own trusted certificate. Between Cloudflare and our server we install a 15-year Cloudflare Origin certificate and use Full (strict) mode, so both hops are encrypted and verified.
- Visitor to Cloudflare: Cloudflare's edge certificate
- Cloudflare to our server: 15-year Origin CA certificate
- Full (strict): Cloudflare checks the certificate on every request