SteadyNode

Cloudflare HTTP 526

What does Cloudflare error 526 mean?

Find out why Cloudflare reports an invalid origin certificate and how to inspect certificate validity, hostname matching, and trust chains.

Decode a CDN or gateway error

Paste a captured HTTP response or enter a status and headers. Only the status and response headers are sent; common credential headers are filtered first.

Supports raw headers, full HTTP responses, JSON with status/statusCode and headers, cURL -v/-i response output, and HAR exports. HAR selects a server error first. cURL commands are never executed; request headers, response bodies, and common credential headers are excluded.

Find the cause of the next outage sooner

During an outage, every second counts. SteadyNode's uptime engine translates CDN errors into likely root causes on every check.

No credit card required.

Start for free

Cloudflare 526: cause and troubleshooting

Cloudflare Full (strict) mode rejected the certificate presented by the origin as invalid.

What to check next

Verify the certificate is current, matches the origin hostname, chains to a trusted authority, and includes every required intermediate certificate.

Use the diagnostic code and provider headers as clues, then confirm the request against origin logs and deployment telemetry. A status code can be generated by a proxy, load balancer, function platform, or origin application; the same number does not always have the same cause across providers.

Keep a CDN error from becoming a long outage

Record the request identifier, timestamp, affected hostname, and deployment when investigating an intermittent failure. SteadyNode checks public endpoints on a schedule and translates recognized upstream errors into concise diagnostic context, helping teams identify whether a failure is at the edge or origin.

Frequently asked questions

What does Cloudflare 526 mean?

Cloudflare could not validate the origin certificate while using strict TLS validation.

How can I check for a missing intermediate?

Inspect the certificates served by the origin and ensure its TLS configuration includes the leaf certificate and the complete intermediate chain.