Easy Tech TutsHow to Use Cloudflare SSL Certificate, Get & Install Free SSL Easily 2026
By Impran M N
Cloudflare issues a free Universal SSL certificate automatically for domains on its network, but picking the wrong encryption mode or skipping the HTTPS enforcement settings can leave your site insecure or broken. This guide walks through activating SSL, choosing between Flexible, Full, and Full Strict modes, and turning on the settings that keep every visitor on a secure connection.
01Open the SSL/TLS overview
From your Cloudflare dashboard, go to the SSL/TLS tab to see your domain's current certificate and encryption status.
02Confirm Universal SSL is issued
Check that the free Universal SSL certificate shows as active for your zone; this usually happens automatically once your domain is on Cloudflare.
03Choose your encryption mode
Select Flexible, Full, or Full (Strict) depending on whether your origin server has its own valid certificate — Full Strict is recommended when your host supports it.
04Generate an Origin CA certificate if needed
If your backend server needs its own certificate to support Full Strict mode, generate a free Cloudflare Origin CA certificate and install it there.
05Enforce HTTPS everywhere
Turn on "Always Use HTTPS" and "Automatic HTTPS Rewrites" under Edge Certificates to redirect visitors and fix mixed-content links automatically.
06Test your live site
Load your domain and check for the padlock icon, or run it through an external SSL scanning tool to confirm everything validates.
Frequently asked questions
Is Cloudflare's SSL certificate really free?
Yes, Universal SSL is included on every Cloudflare plan, including the free tier, with no extra cost.
Which encryption mode should I use?
Full (Strict) is the safest option if your origin server has a valid certificate; use Flexible only as a temporary fix if your origin has no SSL at all.
Why am I seeing mixed content warnings after enabling SSL?
This usually happens when some page resources still load over HTTP — Automatic HTTPS Rewrites in Cloudflare can fix most of these automatically.
What is an Origin CA certificate for?
It's a free certificate Cloudflare issues specifically to encrypt the connection between Cloudflare's edge and your backend server, needed for Full Strict mode.
Watch the full walkthrough
The same steps, demonstrated on screen from start to finish.
