CloudFlare operates at major scale and we are increasing very quickly. To create Universal SSL function at our scale we would have liked to guarantee it would not overwhelm our resources. We had two primary issues: Google Trust Services does not support punycode domains as mentioned in the certificate https://userbookmark.com/story17025391/anti-spam-filter-things-to-know-before-you-buy