You could use a self-signed cert, since cloudflare doesn't care about that.