@bruceallen as described in my post it is for the subdomain shop.*.nl.
My main domain is hosted with ghost.
But all my domains and sub domains are hosted with tls1.3 enabled on cloudflare.
This is something that is strongly recommended by our authority’s.