you are right! cloudflare is the badass.
My dns are already correct on both server and cloudflare side.
I had SSL setup on that subdomain self signed. probably that got lost after update and cloudflare wasnt able to make the handshake. I disabled it and its working fine now on port.
By the way.. can you please tell me the parameter for just to reconfigure the SSL for panel?. ( eg: perl -reconfigure.... )