Be aware that if you use @cloudflare for *anything* (even just DNS), they'll obtain a wildcard cert for your domain: https:/…