That&#x27;s not true, when you setup crypto in cloudflare you need pick between &quot;Full SSL (Strict)&quot;  which requires a valid certificate, and &quot;Full SSL (non-strict)&quot; which allows you to use a self-signed certificate or what not, but there&#x27;s no reason you should be using that mode if you already have a valid certificate (as is the heroku case).