Cover both the www and the bare domain in the certificate on Cloudflare

tls.names.companion_not_covered · effort: minutes

Why it matters

The www and bare versions of the domain answer on HTTPS, but one of them is served with a certificate that is not issued for it. Visitors who type or follow that version see a security warning.

The fix

Universal SSL covers the apex and its one-level subdomains while the DNS records are Proxied. Make sure both the apex and www records exist and are Proxied (orange cloud) under DNS then Records.
Open SSL/TLS then Edge Certificates and check that the Universal certificate is active.

Read the documentation (opens in a new tab)

Reported by the certificate names and validity window check
Use a certificate with a standard validity period

Scan your domain to see whether this applies to you.

Why it matters

The fix

Related