Preferences were set as in the documented instructions here on the help site and were eventually accepted on the micro.blog side (I had to temporarily turn off cloudflare proxying).
Using Cloudflare DNS and EU server, tried all of the SSL options on the cloudflare side. Turned off cloudflare proxying again and it doesn’t work either on or off.