Cloudflare ERR_SSL_VERSION_OR_CIPHER_MISMATCH

How to fix it

Try these in order — the most common fix is first.

1. 1. Check the certificate status

   Copy steps
   1. Open SSL/TLS > Edge Certificates and confirm the Universal certificate is Active
   2. New certificates can take up to 24 hours
   Did this fix it? Yes No

2. 2. Proxy the record

   1. In DNS, switch the A, AAAA or CNAME to Proxied (orange cloud)
   Did this fix it? Yes No

3. 3. Multi-level subdomains

   Copy steps
   1. Universal covers apex and one level only
   2. Enable Total TLS, order an Advanced Certificate or upload a custom certificate
   Did this fix it? Yes No

4. 4. Stopgap

   1. Pause Cloudflare temporarily until the certificate is active
   Did this fix it? Yes No

Symptoms

Browser shows ERR_SSL_VERSION_OR_CIPHER_MISMATCH for a domain or subdomain on Cloudflare.

Why it happens

• Universal certificate not yet issued (up to 24 hours)
• DNS record is DNS only, not proxied
• Expired custom certificate
• Multi-level subdomain not covered by Universal SSL

This guide also covers

• err_ssl_version_or_cipher_mismatch cloudflare
• cloudflare ssl not working new domain

Other Cloudflare errors

• Cloudflare Error 521: Web Server Is Down
• Cloudflare Error 522: Connection Timed Out
• Cloudflare Error 524: A Timeout Occurred
• Cloudflare Error 525: SSL Handshake Failed
• Cloudflare Error 526: Invalid SSL Certificate
• Cloudflare Error 520: Web Server Returned an Unknown Error
• Cloudflare Error 1020: Access Denied
• Cloudflare Error 1015: You Are Being Rate Limited