I followed this and ended up with a CloudFlare 521 error. This error was on my discourse url (forum.website.tld) and on my main domain (website.tld). I reverted the changes and rebuilt and everything came back up.
Is there something to force a cert renewal after rebuilding?
Is this trying to create a wildcard versus a defined url?