Today I learned that cloudflare free tier universal certs do not support multilevel subdomains.
By default, Cloudflare Universal SSL certificates only cover your apex domain and one level of subdomain.
Fix VERSION_OR_CIPHER_MISMATCH · Cloudflare SSL/TLS docs
!https://developers.cloudflare.com/ssl/troubleshooting/version-cipher-mismatch/
Copy this post