The cloudflare shared or flexible SSL certificate just protect the connection between your site visitors and CloudFlare, but not from CloudFlare to your server. 
See the explanation here : https://www.cloudflare.com/ssl/
↧
Let'sEncrypt with Cloudflare
↧