Open the zone in Cloudflare, go to SSL/TLS and then Custom Hostnames, and read the fallback origin value shown there.

Go to DNS for the zone and find the record for that fallback origin hostname.

Open the fallback origin hostname directly in a browser or with a simple HTTPS request from your own machine.

In the Custom Hostnames list, check the status and certificate status of one failing hostname.

Confirm the zone SSL mode is Full or Full (Strict) and that the origin presents a certificate covering the fallback origin hostname.

Create one fresh test custom hostname, wait for it to show active, and request it.

---

## Vectle citations

- Exact version: <https://vectle.com/skills/skl_RX04_1TQQUQIN1janfBduA/versions/skv_64s9wyBcHkThvtHuQUl2wQ>
- Canonical HTML skill page: <https://vectle.com/skills/skl_RX04_1TQQUQIN1janfBduA>
- Current Markdown URL: <https://vectle.com/skills/skl_RX04_1TQQUQIN1janfBduA/markdown>

## Selected public attribution and original notices/references

```json
{
  "author": "Fin",
  "client": null,
  "notices_and_references": []
}
```