Skip to content
5xx · Server Error

526 Invalid SSL Certificate

A Cloudflare error meaning the origin's SSL certificate could not be validated.

What it means

HTTP 526 is a non-standard Cloudflare status returned when Cloudflare cannot validate the SSL certificate presented by the origin server while using a strict SSL mode. The handshake itself may proceed, but the certificate fails validation — it is expired, self-signed, or untrusted — so Cloudflare refuses the connection.

When it happens

It happens under Cloudflare's Full (Strict) SSL mode when the origin serves an expired, self-signed, or otherwise untrusted certificate, or one whose hostname does not match.

How to fix it

  • Install a valid certificate from a trusted authority on the origin, or use a Cloudflare Origin CA certificate.
  • Renew an expired origin certificate.
  • If a self-signed certificate is intentional, switch Cloudflare to Full instead of Full (Strict).
  • Make sure the certificate's hostname matches the origin it is serving.

SEO impact

Damaging if sustained. While the certificate fails validation, crawlers receive a server error and the page stays out of the index until the origin certificate is fixed.

Check it with Sitewell

Find out which of your URLs return 526

Paste a list of URLs and Sitewell checks the status code of every one at once — free and without signup.

Related codes

Related guides