One other thing I just thought of - what is the CA shown if you click the dropdown arrows on your cloudflare edge certificates?
My universal one is from Google Trust, while my backup is from Let's Encrypt.
Perhaps your primary is a Let's Encrypt?
