ERR_SSL_VERSION_OR_CIPHER_MISMATCH after changing nameservers to Cloudflare
Applies to
Domains recently moved to Cloudflare
Nameservers changed to Cloudflare
Browsers showing:
Chrome:
ERR_SSL_VERSION_OR_CIPHER_MISMATCHFirefox:
SSL_ERROR_NO_CYPHER_OVERLAP
No Cloudflare error page is shown
Overview
This error occurs when Cloudflare has not yet finished issuing an SSL certificate for your domain.
Immediately after changing your domainβs nameservers to Cloudflare:
DNS starts resolving via Cloudflare
Cloudflare begins provisioning a Universal SSL certificate
Until that certificate is issued, HTTPS connections fail
Browsers display SSL handshake errors
This is temporary and usually resolves automatically.
Why this happens
| Step | Description |
|---|---|
| Nameservers changed | Domain now points to Cloudflare |
| Cloudflare activates the zone | DNS works |
| SSL issuance starts | Cloudflare requests a certificate |
| Certificate not ready yet | HTTPS handshake fails |
| Browser shows SSL error | Temporary |
How long does it take?
Usually 5β15 minutes
Sometimes up to 3 hour
Rarely up to 24 hours
How to verify
Log in to Cloudflare Dashboard
Select your domain
Go to SSL/TLS β Overview
Check Universal SSL status
If you see:
Pending validation
Certificate provisioning
Initializing
Then the certificate is still being issued.
What to do
1. Wait for SSL to be issued
Most cases resolve without any action.
2. Retrigger SSL issuance (optional)
If itβs stuck:
Go to SSL/TLS β Edge Certificates
Toggle Universal SSL OFF
Wait 30 seconds
Toggle Universal SSL ON again
When to contact support
Contact Middlehost support if:
SSL is still pending after 3 hour
HTTPS still fails after 24 hours
Provide:
Domain name
Time nameservers were changed
Screenshot of Cloudflare SSL status
Summary
| Item | Status |
|---|---|
| Server SSL configuration | Not the issue |
| TLS / Cipher mismatch | Not the real cause |
| Cloudflare SSL pending | Root cause |
| Waiting / retriggering SSL | Fix |
Notes
This issue is not related to your hosting server
No server-side changes are required
The error will disappear automatically once Cloudflare issues the certificate