The CloudFlare Origin CA is at the moment not trustworthy by browsers, so these certificates shouldn't be applied on web pages that aren't powering CloudFlare. To situation certificates which have been trusted by browsers, we would have to influence a publicly trusted certificate authority to cross-signal our CA certificate. https://travisrbmwf.bloggazza.com/26332114/the-single-best-strategy-to-use-for-whmcs-migration