Do you use Lets encrypt?

Yep, I use Letsencrypt and it's leagues better than any other service including Cloudflare if all you want is SSL. Yes, Letsencrypt doesnt allow for wiildcard SSL certificates however it's relatively easy registering sub domains - however using nginx requires a tad bit of manual file creation and basic data entry. Another benefit of Letsencrypt is the ssl certificates are stored locally so said certificates are exposed to other applications, for instance, self-signing node instances or GraphQL servers for https enabled API endpoints