Common cause
The Server Name Indication (SNI) hostname sent by the client during the TLS handshake does not match the Host header sent in the subsequent HTTP request.
Cloudflare enforces SNI matching to prevent SSL spoofing and cross-tenant proxy abuse.
Resolution:
If you are a visitor:
- Clear your browser cache and SSL state, or update your browser software.
- If using custom proxy software or VPN tunnels, ensure they do not alter HTTP
Hostheaders independently of TLS SNI handshakes.
If you are a developer:
- When using command-line tools like curl, ensure your request URL matches the SNI name (e.g.
curl --resolve example.com:443:104.16.x.x https://example.com).
Source: Cloudflare Documentation - Troubleshooting Cloudflare 1XXX errors (Error 1013)