ERR_SSL_VERSION_OR_CIPHER_MISMATCH after changing nameservers to Cloudflare

Applies to

• Domains recently moved to Cloudflare

• Nameservers changed to Cloudflare

• Browsers showing:

  • Chrome: ERR_SSL_VERSION_OR_CIPHER_MISMATCH

  • Firefox: SSL_ERROR_NO_CYPHER_OVERLAP

• No Cloudflare error page is shown

Overview

This error occurs when Cloudflare has not yet finished issuing an SSL certificate for your domain.

Immediately after changing your domain’s nameservers to Cloudflare:

1. DNS starts resolving via Cloudflare

2. Cloudflare begins provisioning a Universal SSL certificate

3. Until that certificate is issued, HTTPS connections fail

4. Browsers display SSL handshake errors

This is temporary and usually resolves automatically.

Why this happens

How long does it take?

• Usually 5–15 minutes

• Sometimes up to 3 hour

• Rarely up to 24 hours

How to verify

1. Log in to Cloudflare Dashboard

2. Select your domain

3. Go to SSL/TLS → Overview

4. Check Universal SSL status

If you see:

• Pending validation

• Certificate provisioning

• Initializing

Then the certificate is still being issued.

What to do

1. Wait for SSL to be issued

Most cases resolve without any action.

2. Retrigger SSL issuance (optional)

If it’s stuck:

1. Go to SSL/TLS → Edge Certificates

2. Toggle Universal SSL OFF

3. Wait 30 seconds

4. Toggle Universal SSL ON again

When to contact support

Contact Middlehost support if:

• SSL is still pending after 3 hour

• HTTPS still fails after 24 hours

Provide:

• Domain name

• Time nameservers were changed

• Screenshot of Cloudflare SSL status

Summary

Notes

• This issue is not related to your hosting server

• No server-side changes are required

• The error will disappear automatically once Cloudflare issues the certificate