Trouble of adding subdomain certificate to space object storage

Posted on May 9, 2025

Hi, I have a domain in cloudflare and created a Origin Certificate of it. Then I add the certificate to space object storage, there always has a trouble when resolving the certificate.

We encountered an error while setting up your custom subdomain due to an invalid certificate. We can help create your custom subdomain by generating a certificate for you. Alternatively, consider selecting a different custom subdomain.

I created the certificate from cloudflare->SSL/TSL->Origin Server->Origin Certificates.

And also set the Current encryption mode to Full (strict).

So How can I find out the problem?

And I also want to know How many subdomains can add to a burkets?

Thanks!

This textbox defaults to using Markdown to format your answer.

You can type !ref in this text area to quickly search our full set of tutorials, documentation & marketplace offerings and insert the link!

These answers are provided by our Community. If you find them useful, show some love by clicking the heart. If you run into issues leave a comment, or add your own answer to help others.

alexdo

May 9, 2025

Heya, @mixbayes

This is expected behaviour since Cloudflare Origin Certificates are only trusted by Cloudflare’s edge servers, not by public clients or third-party services like DigitalOcean Spaces.

Spaces reports the certificate as invalid — it expects a certificate signed by a public CA like Let’s Encrypt, DigiCert, etc., but Cloudflare Origin Certs are meant only for securing traffic between Cloudflare and your origin server, not for public TLS termination.

You can check this article

https://docs.digitalocean.com/products/spaces/how-to/customize-cdn-endpoint/

Regards