How to fix NET::ERR_CERT_AUTHORITY_INVALID: 10 easy solutions

The NET::ERR_CERT_AUTHORITY_INVALID error occurs when your browser cannot verify a website’s security certificate. To fix this error, try clearing your browser’s cache and cookies, syncing your device’s date and time, or updating your browser. You can also disable your VPN, firewall, or antivirus to see if they’re causing the issue.

If none of that works, the SSL certificate itself may be the problem. In that case, renewing it through a trusted certificate authority (CA) is your best option.

We’ll walk you through ten simple ways to solve the NET::ERR_CERT_AUTHORITY_INVALID error and explain what causes it, so you can prevent it from happening again.

How to fix the NET::ERR_CERT_AUTHORITY_INVALID error

There are many different factors that can trigger this particular error, but the good news is that it’s completely fixable. We’ll walk you through the solutions to fix the NET::ERR_CERT_AUTHORITY_INVALID error, starting with the easiest.

Since this is an SSL-related error, we recommend familiarizing yourself with how a security certificate works. Our guide on what an SSL certificate is can be a great starting point.

1. Clear browser cache and cookies

Browsers use cache and cookies to speed up web page loading. However, these files can become outdated or corrupted, causing SSL errors. If the website is accessible through incognito mode, you might be dealing with an expired browser cache. Clearing your browser’s cache should resolve the issue.

Here’s how to clear your browser cache and cookies in Google Chrome:

1. Click the three dots menu on the top right and select Clear browsing data.

2. Select the time range and check all elements for removal. Click Clear data to remove the browser’s cached files.

2. Adjust time and date settings on your computer

Battery issues, time zone misconfiguration, and daylight saving time can alter system time settings. Having the wrong date and time can cause the browser to mark a valid SSL certificate as expired.

Here’s how to readjust the time and date on Windows devices:

1. Open the Start menu and search for Date and time settings.
2. Under the Additional settings section, click Sync now.

3. Turn on the Set time zone automatically option to keep your device’s time accurate, especially when traveling.

If you’re on macOS, follow these steps:

1. Open the Apple menu.
2. Go to System Settings → General → Date & Time.
3. Toggle on the Set date & time automatically option.

4. Go to Time Zone and check whether you’re using the correct time zone.

Once you’ve set the time and date on your operating system, refresh the browser to check if the error disappears.

3. Temporarily disable browser extensions

Browser extensions enhance the functionality and user experience of web browsing. However, some of them can change how browsers load pages, potentially causing SSL errors. Deactivating browser extensions can help determine if they cause the NET::ERR_CERT_AUTHORITY_INVALID error.

Deactivating browser extensions follows a similar process across popular browsers. Here’s how it’s done in Google Chrome:

1. Open the three dots menu on the top right and select Extensions → Manage Extensions.
2. Toggle off all of your active extensions.

3. Reload the web page to check if the error persists. If this resolves the issue, activate the extensions one by one to identify the culprit.

4. Update your browser

Outdated browsers often lack support for the latest security protocols or contain unresolved bugs, causing issues like the NET::ERR_CERT_AUTHORITY_INVALID error. If that’s the case, updating your browser should fix the error.

Follow these steps to check for and update Google Chrome:

1. Access the three dots menu on the top right and select Settings → About Chrome.
2. If your browser is up to date, you’ll see a “Chrome is up to date” message.

3. If an update is available, the Update Google Chrome button will appear. Click it to download the update, then select Relaunch to complete the process.

5. Clear the SSL state

Similar to browser cache, SSL state stores information related to secure connections. Sometimes, your computer might save incorrect or outdated SSL certificate information from the websites you visit, causing the NET::ERR_CERT_AUTHORITY_INVALID error. Clearing the SSL state removes these cached certificates.

Here is how to clear the SSL state on Windows:

1. Open the Start menu and search for Internet Options.
2. In the Internet Options section, go to the Content tab.
3. Click Clear SSL State.

On macOS, follow these steps to remove any untrusted certificates:

1. Click on the Spotlight search icon at the top of your screen and search for Keychain Access.
2. Within the System category, select Certificates.

3. Look for untrusted certificates marked with a red “X” icon.
4. Right-click on the problematic certificate and choose Delete.

6. Deactivate VPN

A virtual private network (VPN) enhances online privacy and security by encrypting your connection and masking your IP address for safer browsing and access to geo-restricted content. However, it can disrupt SSL certificate validation due to routing methods or security protocols, triggering the NET::ERR_CERT_AUTHORITY_INVALID error message.

Try deactivating your VPN to troubleshoot the error. If the error disappears, contact the VPN’s support team for assistance or try different VPN providers.

7. Disable your firewall or antivirus

If no method has worked so far, take a closer look at your system security by temporarily deactivating your firewall or antivirus software. Sometimes, their security protocols can disrupt SSL certificate validation, leading to the NET::ERR_CERT_AUTHORITY_INVALID error.

Follow these steps to deactivate Windows Firewall:

1. Navigate to the Control Panel from the Start menu.
2. Go to System and Security → Windows Defender Firewall.
3. Click Turn Windows Defender Firewall on or off on the sidebar.

4. Select Turn off Windows Defender Firewall (not recommended) for both private and public network settings.

Here’s how to turn off the firewall on macOS:

1. Open the Apple menu.
2. Head to System Settings → Network.

3. Access the Firewall section and toggle it off to disable the feature.

The antivirus deactivation process varies depending on the software. Look for a temporary disable option in the software’s settings or consult the software’s help resources.

After disabling these security measures, restart your browser and try reaccessing the website. If the error message disappears, enable the firewall and antivirus software one by one to determine the cause of the NET::ERR_CERT_AUTHORITY_INVALID error.

Here’s what you can do if one of them is at fault:

• Whitelist the website, i.e. allow it to pass through your firewall or antivirus settings.
• Contact your antivirus support team for assistance.
• Look for alternative firewalls or antivirus software.

8. Run an SSL test

After ruling out client-side issues, let’s examine the server side.

Start by running an SSL server test to identify any problems with your site’s SSL certificate. Free SSL testing tools like SSL Shopper provide a detailed analysis in a few clicks.

The SSL check report offers detailed insights into your website’s SSL certificate setup, including the IP address, expiration date, and whether the certificate correctly includes your domain name.

Green check marks indicate a clean report, confirming that:

• Your website has a valid certificate.
• Major web browsers trust the SSL certificate.
• The SSL certificate is intended for your website.

If the tool flags issues like an expired certificate or a mismatched domain name, keep reading to learn how to resolve them.

9. Get a trusted SSL certificate

If the SSL check report shows that your SSL certificate is invalid or self-signed, it’s time to get a new one from a trusted certificate authority.

This is important, especially since, according to a Google report on HTTPS encryption, 99% of the pages loaded on Chrome in the U.S. in 2025 were HTTPS-secured websites. Without a valid SSL certificate, your site may appear untrustworthy to users and browsers alike.

Reputable hosting providers bundle hosting plans with free SSL certificates. Hostinger users on basic web hosting and cloud hosting plans get free lifetime SSL certificates for all their domains and subdomains. Our auto-renewal feature keeps your certificate valid all the time.

Check out our guide for other ways to get an SSL certificate for your website.

As there are different types of SSL certificates, pick the one that best fits your website needs. For example, large organizations may opt for Extended Validation (EV) SSL certificates because they go through a more detailed validation process, offering a higher level of trust.

For WordPress users, implementing WordPress SSL keeps the site data secure from cyber attacks and boosts its search engine optimization (SEO) ranking.

10. Renew the SSL certificate

The validity of SSL certificate validity periods varies among providers, with the maximum being 397 days or 13 months. Keeping your SSL certificate updated ensures your website’s security.

If your SSL certificate, including free ones, doesn’t have an automatic renewal setup, renew it manually at least 30 days before the expiration date.

Follow these steps to verify the certificate’s expiration date in Google Chrome:

1. Hit the View site information or padlock icon in the address bar.

2. Select Connection is secure → Certificate is Valid. A new window will display the website’s certificate details, including the validity period.

If you have an expired SSL certificate, contact the issuer for renewal instructions. The process usually involves purchasing a new certificate, generating a certificate signing request (CSR), and then installing the certificate on your web server.

What causes the NET::ERR_CERT_AUTHORITY_INVALID error

The NET::ERR_CERT_AUTHORITY_INVALID error can result from SSL and browser-related issues. Here’s a breakdown:

Source error	Description
Expired SSL certificates	A browser flags an expired certificate as invalid since it can’t ensure data encryption until renewed.
Self-signed certificates	This type of SSL certificate isn’t issued by a certificate authority (CA), so browsers don’t recognize it as trusted.
Incorrect date and time	An outdated operating system can cause incorrect date and time settings, flagging a valid certificate as expired.
Untrusted certificate authority	Your website’s SSL certificate is from an unrecognized CA not listed as a trusted authority by browsers.
Outdated browser cache or SSL state	Browsers cache certificates for faster connections, but an old or corrupt cache can cause certificate mismatches.
VPN and security software interference	VPNs and security software like firewalls and antivirus can disrupt the SSL handshake, causing browser warnings.
Conflicting browser extensions	An extension might incorrectly change or block the browser’s certificate verification.

How the NET::ERR_CERT_AUTHORITY_INVALID error appears in different browsers

The ERR_CERT_AUTHORITY_INVALID error appears differently across browsers. Let’s explore its variations in Google Chrome, Safari, Mozilla Firefox, and Microsoft Edge.

Google Chrome

When accessing a website with SSL errors, the Google Chrome browser will display a message saying, “Your connection is not private.” Users can still access the website at their own risk by clicking Proceed to [domain name].

Other error messages indicating this SSL issue include:

• NET::ERR_CERT_COMMON_NAME_INVALID
• NET::ERR_CERT_INVALID
• NET::ERR_CERT_DATE_INVALID
• NET::ERR_CERT_WEAK_SIGNATURE_ALGORITHM
• NET::ERR_CERTIFICATE_TRANSPARENCY_REQUIRED
• SSL CERTIFICATE ERROR

Each SSL error code variation hints at the actual issue. For instance, NET::ERR_CERT_COMMON_NAME_INVALID indicates that the domain name doesn’t match the SSL certificate.

Safari

When Safari encounters an issue validating an SSL certificate, a warning may pop up about the risk of accessing a potentially fraudulent site.

The Show Certificate option offers more details about the SSL certificate’s issuer, allowing users to decide whether to proceed with caution to the website.

Microsoft Edge

Like Google Chrome, Microsoft Edge displays SSL error codes that help identify the cause of SSL issues. Common error code variations include:

• NET::ERR_CERT_COMMON_NAME_INVALID
• NET::ERR_CERT_DATE_INVALID
• NET::ERR_CERT_AUTHORITY_INVALID
• NET::ERR_CERT_REVOKED

Mozilla Firefox

Mozilla Firefox displays a “Warning: Potential Security Risk Ahead” message explaining possible triggers for the SSL error. There’s an option to check the SSL certificate information as well, empowering users to make informed decisions.

This browser has its set of error codes, such as:

• SEC_ERROR_UNKNOWN_ISSUER
• SEC_ERROR_REUSED_ISSUER_AND_SERIAL
• SSL_ERROR_RX_MALFORMED_HANDSHAKE
• SSL_ERROR_UNSUPPORTED_VERSION
• MOZILLA_PKIX_ERROR_KEY_PINNING_FAILURE

What are the potential risks associated with the ERR_CERT_AUTHORITY_INVALID error?

Seeing the NET::ERR_CERT_AUTHORITY_INVALID error means your connection to the website might not be secure. This can put sensitive information like passwords, credit card numbers, or personal details at risk of being intercepted by hackers.

For business websites, this error can hurt customer trust. Visitors might leave your site, which can lead to lost sales and a damaged reputation. That’s why it’s important to fix the NET::ERR_CERT_COMMON_NAME_INVALID error as soon as possible to keep your site safe and trustworthy.

ERR_CERT_AUTHORITY_INVALID FAQ