@laurel @PunishedD Not exactly, those were g*rman authorities making Hetzner add another hop in the route and issuing letsencrypt cert. With access to domain and Cloudflare's dashboard you don't even need that since it issues valid certs automatically and the IP is going to be somewhere in https://www.cloudflare.com/ips-v4/ regardless.