Loading your website over HyperText Transfer Protocol Secure (HTTPS) is a key cybersecurity best practice. However, if you don't properly install your Secure Sockets Layer (SSL) document, y'all can run into a number of errors, such as Cyberspace::ERR_CERT_COMMON_NAME_INVALID.

Admittedly, solving this error tin can be a bit tricky, as in that location are many different reasons it may appear in your browser. If you can narrow downwardly the crusade, resolving this SSL result shouldn't accept long at all.

In this commodity, we'll explain what the NET::ERR_CERT_COMMON_NAME_INVALID error means, and show yous examples of what it looks like in various browsers. Then we'll share several methods you can use to prepare it.

Let's get started!

Understanding What Causes the Cyberspace::ERR_CERT_COMMON_NAME_INVALID Error

Before we dive into what causes the NET::ERR_CERT_COMMON_NAME_INVALID error, let'south pause downwardly the relevant terms. The 'common proper name' this error references is the domain on which an SSL certificate is installed.

For example, if you accept a website at mydomain.com, the common name on your SSL certificate would be mydomain.com. So every bit the error bulletin states, the root problem behind Net::ERR_CERT_COMMON_NAME_INVALID is that the common proper noun on your SSL certificate is not valid for some reason.

Oft, this means that the name on your document does not match the domain it'due south installed on. Withal, there are other scenarios that could lead to this message appearing in your browser, including:

  • Your SSL certificate does not account for www versus not-www variations of your domain.
  • You tried to switch your website to HTTPS without showtime installing an SSL certificate.
  • Your site has a cocky-signed SSL document installed and your browser does not recognize it equally valid or secure.
  • Your antivirus software is blocking your SSL connectedness.
  • A browser extension is interfering with your site's SSL connection.
  • Your proxy settings are misconfigured.
  • Your browser cache or SSL state has go corrupted.

As y'all tin see, many different factors can contribute to the NET::ERR_CERT_COMMON_NAME_INVALID error. This tin can make it hard to pin downward the correct solution, but a niggling patience will get a long mode towards helping you lot ready the problem.

Net::ERR_CERT_COMMON_NAME_INVALID Mistake Variations

We'll swoop into the solutions to the NET::ERR_CERT_COMMON_NAME_INVALIDfault shortly. First, however, you need to be able to recognize it in your browser.

Here'southward what this problem looks like in the near popular clients on the web.

Google Chrome

Like many other HTTPS-related errors, Google Chrome indicates that in that location's a mutual name mismatch past showing a "Your connection is not private" alert:

NET::ERR_CERT_COMMON_NAME_INVALID error in Chrome
The NET::ERR_CERT_COMMON_NAME_INVALID mistake in Google Chrome

You will see the specific issue (Internet::ERR_CERT_COMMON_NAME_INVALID) listed below the main bulletin. Users who see this screen may choose to proceed to your site anyhow using HTTP.

This message has the potential to scare abroad many prospective visitors.

Mozilla Firefox

Firefox presents a slightly dissimilar variation of the common name mismatch mistake. Under the "Your connection is not secure" heading, it will tell you lot that the website you lot're trying to reach has not been configured properly, and recommend that you lot refrain from accessing information technology.

You lot may as well see a message reading "Warning: Potential Security Risk Alee":

firefox security warning
A security risk alarm in Mozilla Firefox

It may also display a more than specific error message below, stating that the security document is invalid and only configured to piece of work with the listed domain names.

You'll also meet the "SSL_ERROR_BAD_CERT_DOMAIN" code.

Safari

In Safari, the corresponding mistake message reads, "Safari tin't verify the identity of the website" or "Safari can't open the folio" followed by the domain you're trying to reach.

It may too state that the site'due south SSL certificate is invalid or that it was unable to establish a secure connectedness:

safari error
Error in Safari browser

When compared to other browsers, Safari's common name mismatch fault message is somewhat vague.

If you're seeing this error window, there are other SSL related problems that could also exist behind it, so make certain to pursue a variety of solutions.

Internet Explorer

Internet Explorer cuts right to hunt, and informs you lot that "This site is non secure." and indicates an issue with the trustworthiness of the SSL document. This message may be followed past a few unlike specifications:

internet explorer ssl error
A security certificate alarm in Internet Explorer

The one that indicates a problem equivalent to the NET::ERR_CERT_COMMON_NAME_INVALID error in Chrome typically reads: "The security document presented by this website was issued for a different website's address."

It will also provide a few potential solutions for visitors, such as calculation or removing "world wide web" from the URL they entered.

Even so, such fixes are only temporary. A persistent mistake could nevertheless impairment your site's brownie and prevent yous from growing your traffic, and so it's best to detect the source of the issue and resolve it quickly.

How to Fix the NET::ERR_CERT_COMMON_NAME_INVALID Mistake (nine Methods)

Equally you now know, there are many possible causes of the Internet::ERR_CERT_COMMON_NAME_INVALID error. Therefore, there are also plenty of potential fixes for information technology. Hither are nine methods you tin can try to resolve this event on your site.

ane. Verify That Your SSL Certificate Is Correct

The well-nigh basic cause of the NET::ERR_CERT_COMMON_NAME_INVALID error is that your site's domain doesn't match the common name listed on your SSL certificate. So, the beginning fix you'll desire to try is viewing your certificate to determine if it'south been misconfigured.

Throughout this mail, we'll exist showing examples of troubleshooting this error in Google Chrome. Even so, other browsers should enable you to achieve the aforementioned outcomes via similar steps.

To get started, click on the Not Secure alarm in the URL bar. In the menu that opens, select Certificate (Invalid):

check certificate
Opening the certificate checker in Google Chrome

This will open a pocket-size window displaying the details of your SSL document:

certificate different domain name
Checking the SSL certificate for a website in Google Chrome

The domain listed here should lucifer the one you're trying to reach. If not, you'll know your document is misconfigured.

The all-time solution is to remove the document from your site and install a new 1.

Verifying Wildcard SSL Certificates

The NET::ERR_CERT_COMMON_NAME_INVALID error gets a footling more than complicated when a wildcard SSL certificate is involved. This type of certificate is designed to encrypt data for multiple subdomains.

As such, instead of having one mutual name listed on the certificate, a subdomain level such as *.example.com is used. If you take a wildcard document installed and you are seeing the Net::ERR_CERT_COMMON_NAME_INVALID error, it may hateful that your certificate does non cover the subdomain you're trying to admission.

Keep this in heed when verifying the SSL certificate in your browser. Also, notation that wildcard SSL certificates just secure one subdomain level. For instance, you would demand split up certificates for *.example.com and *.subdomain.example.com.

Verifying Subject Alternative Names (SAN) Certificates

A Subject Alternative Names (SAN) document tin encrypt data for multiple domains that point to the same site. This may include world wide web and non-www variations, subdomains, and Top-Level Domain (TLD) variations.

If the site you're trying to admission uses a SAN certificate, yous may demand to do some further excavation when verifying the SSL certificate in your browser.

In Chrome, click on Details in the document window:

certificate check san
The Details tab of the certificate checker window in Google Chrome

Scroll down until you find the section labeled Extension Subject Alternative Name. Beneath it, yous should meet a listing of all the domains the certificate protects.

2. Check for Misconfigured Redirects

If y'all redirect your site from one domain to another and don't install an SSL certificate on the start domain, it tin result in errors. For example, many SSL certificates don't automatically account for www and non-www versions of your site.

Permit's say yous set up www.case.com to redirect to example.com. If you lot install your SSL certificate on instance.com just not on world wide web.example.com, y'all might encounter the NET::ERR_CERT_COMMON_NAME_INVALID mistake.

If you're non certain whether your site is redirecting visitors in this fashion, you can check using Redirect mapper:

redirect mapper
The Redirect mapper tool

This tool only checks for redirects between the HTTP and HTTPS versions of your site, besides as between www and not-www versions.

Subscribe Now

If you find that redirects are interfering with your SSL certificate, in that location are a couple of solutions you can endeavour. One is to modify the common name on the certificate to the right version of the domain.

You tin besides acquire another document for the domain y'all're redirecting from or a SAN certificate that covers both domains. For wildcard domains, you'll need to list each subdomain that you want to encrypt, rather than redirecting between them.

3. Brand Certain Your WordPress Address and Site Address Match

It'southward fairly easy to accidentally switch your site address to HTTPS without installing an SSL document, especially in WordPress. Whether yous thought you were implementing a security all-time practice or were just poking around in your site'southward settings, you may have inadvertently acquired the Cyberspace::ERR_CERT_COMMON_NAME_INVALID error.

Fixing this is adequately straightforward.

In your WordPress dashboard, navigate to Settings > General. At that place, make sure your WordPress Address and Site Accost match:

wordpress site address
Checking the WordPress Address and Site Address settings

Additionally, if these URLs use HTTPS and you exercise not have an SSL certificate installed, change them to HTTP. Remember to save whatsoever edits you lot make.

If afterward making this switch the error persists, you may need to also change the addresses in your database via phpMyAdmin.

You lot can access this program via your hosting account. Open your site's database past clicking on its name in the left-hand sidebar, and then access the wp_options tabular array:

phpmyadmin siteurl home
Checking the siteurl and dwelling house rows in phpMyAdmin

Expect for the siteurl and home rows. Edit the addresses as necessary and and so check to come across if you can access your site.

4. Make up one's mind If Your Site Is Using a Self-Signed SSL Document

When you acquire an SSL certificate through Let's Encrypt or some other reputable source, information technology's signed past a recognized Certificate Authority (CA). Cocky-signed certificates are not backed past a CA but are created past users.

Cocky-signed certificates are not as secure as those recognized by a CA. Some users find them appealing because they're complimentary, merely Let's Encrypt supplies authorized SSL certificates at no cost too. With the exception of setting ane upwards for internal server purposes or localhost use, there's really no reason to use a cocky-signed document.

Since they don't offer the full protections that authorized certificates do, browsers by and large label sites using self-signed certificates equally 'not secure'. In some cases, this may atomic number 82 to the Net::ERR_CERT_COMMON_NAME_INVALID error.

You can bank check your certificate's CA using the first method we described before in this post. This data will be listed in the certificate information popup:

check certificate ca
Checking the CA for an SSL document in Google Chrome

If you believe your site uses a self-signed document and you lot are non a programmer, the best grade of action is to contact whoever built your site for you and ask them to remove it. That fashion, you can replace it with an authorized one.

If you installed a self-signed certificate intentionally, you can authenticate information technology with your browser to go past the fault. This process varies significantly depending on your browser and Operating System and is generally more difficult than simply installing a Let'southward Encrypt document.

v. Clear Your SSL State and Browser Enshroud

If everything looks correct in your certificate's configuration, but you're still seeing the NET::ERR_CERT_COMMON_NAME_INVALID error, you may need to clear your SSL country. Browsers might cache SSL certificates to speed up loading times. If y'all just installed a new certificate, you lot may still see an mistake bulletin even though everything is fine.

Again, this process varies depending on your browser and Os. We'll focus on Chrome for this instance just evidence yous how to clear your SSL state on both Windows and macOS.

For Windows, open up the Start carte du jour and enter Cyberspace Options. Select that same choice when it appears, and go to the Content tab inside the Internet Options window. Now click on the Clear SSL Slate button:

clear ssl
Clearing your SSL land in Windows

On macOS, you'll need to use the keychain manager to clear your SSL state. Y'all tin access it in Chrome by going to Settings > Privacy and security > Manage certificates:

mac manage certificates
Opening the Manage certificates settings in Chrome on macOS

Look for the certificate that was listed for the domain you're trying to admission. Right-click on information technology and select Delete:

mac delete certificate
Deleting document information using the macOS keychain managing director.

You may be prompted to supply your user password.

Deleting the document here should clear your SSL state and resolve Net::ERR_CERT_COMMON_NAME_INVALID (if a corrupted cache was the crusade).

It'southward also smart to clear your browser cache for good mensurate. In Chrome, this is every bit simple every bit opening the settings menu and selecting More Tools > Clear Browsing Data:

clear browsing data
Clearing your browsing data

Y'all can also navigate to your Privacy and security settings to specify which data you want to clear. Just make sure to select Cached images and files from the listing of options.

six. Assess Your Proxy Settings

A proxy server is used to route web traffic to retain anonymity for clients or origin servers. If your proxy settings are misconfigured, it tin can restrict your web access and result in a variety of bug, including SSL errors.

In order to forestall such problems, you want to reset your proxy settings. This process varies depending on if you lot use a Windows or a Mac computer.

Regardless of which Os you lot use, you can admission your proxy settings via Google Chrome by navigating to Settings > Avant-garde > System > Open your calculator'south proxy settings:

open proxy settings
Opening proxy settings via Google Chrome

If you're using Windows, this volition open the Cyberspace Properties window. Click on the Connections tab, and so cull the LAN Settings button and select Automatically detect settings:

automatically detect settings
Automatically detecting your network settings

On macOS, this will open up your Network settings window. Click on the Proxies tab and select Automatic Proxy Configuration:

automatic proxy configuration
Turning on Automatic Proxy Configuration for macOS

You can and so endeavour accessing your site once again to see if the error is resolved.

7. Troubleshoot for a Browser Extension Conflict

Like WordPress plugins, browser extensions don't always play nicely with one another.

Some such conflicts may interfere with your site'southward HTTPS connexion, resulting in various errors.

To see if a browser extension might exist causing the NET::ERR_CERT_COMMON_NAME_INVALID error, open your site in an incognito window:

chrome incognito
An incognito window in Google Chrome

This volition mitigate the furnishings of whatever extensions you lot accept installed. If you tin reach your site simply fine in incognito mode, then a browser extension is likely the source of your troubles.

In this case, the best solution is to disable your extensions i at a time to determine which is causing the error. You lot can then remove the culprit to resolve the upshot permanently.

eight. Change Your Antivirus Software Settings

Similarly, antivirus software may prevent proper HTTPS connections. If yous're running such a plan on your computer, cheque its settings to see if HTTPS scanning is disabled. If so, y'all'll desire to enable information technology.

In the effect that yous change this setting and the problem doesn't go away, you may want to consider disabling the software entirely. If this fixes the NET::ERR_CERT_COMMON_NAME_INVALID error, so you can contact your antivirus plan's support team for farther assistance.

Of course, you don't want to go out your antivirus software disabled for a meaning period of time, as this poses a security risk. And then information technology's best to turn it back on while waiting for a response from back up and follow their guidance on resolving the error while maintaining your reckoner's safety.

9. Update Your Browser and Operating Organization (OS)

An outdated OS may lead to errors while trying to access sure websites. For that reason, it's smart to ensure that y'all're running the latest version of Windows, macOS, or Linux.

You'll also desire to verify that your browser is upward-to-date. To practice so in Chrome, open the Settings menu, then select Help > Virtually Google Chrome:

about google chrome
Opening Google Chrome'due south Well-nigh section

Here you can view your browser'south version and plough on automatic updates:

Viewing your Google Chrome version
Viewing your Google Chrome version

If Chrome is not up to date, opening this screen should cause an update to beginning automatically.

Summary

When it comes to browser errors, Net::ERR_CERT_COMMON_NAME_INVALID is a tricky ane to set. However, if y'all can narrow down what's causing the problem, y'all can resolve information technology speedily and preserve your site's credibility with visitors.

As the very first steps to fixing this error, we propose starting by checking your SSL document in your browser and looking for any misconfigured redirects. If these don't help, then start taking a look at all other aspects we mentioned in this guide.


Salvage time, costs and maximize site performance with:

  • Instant help from WordPress hosting experts, 24/7.
  • Cloudflare Enterprise integration.
  • Global audience reach with 29 data centers worldwide.
  • Optimization with our built-in Awarding Performance Monitoring.

All of that and much more, in one plan with no long-term contracts, assisted migrations, and a 30-day-money-back-guarantee. Check out our plans or talk to sales to discover the programme that's right for you.