Looks like porkbuns DNS runs on cloudflare: https://lowendspirit.com/discussion/4602/porkbun-ns-moving-to-cloudflare https://lowendspirit.com/discussion/4602/po

Looks like porkbuns DNS runs on cloudflare: https://lowendspirit.com/discussion/4602/porkbun-ns-moving-to-cloudflare https://lowendspirit.com/discussion/4602/porkbun-ns-moving-t... https://kb.porkbun.com/article/216-how-to-enable-porkbuns-cloudflare-dnssec https://kb.porkbun.com/article/216-how-to-enable-porkbuns-cl... So it might have been a misconfiguration on porkbuns or cloudflares (or maybe a porkbun feature that requires the cloudflare cert) end that created a cert. Seems like porkbun should be more clear about that using "their" DNS might lead to cloudflare issuing certs for those domains.