How to Fix ERR_CERT_COMMON_NAME_INVALID (Google Chrome)
Quick Answer
The ERR_CERT_COMMON_NAME_INVALID error indicates that the security certificate presented by a website does not match the domain name you are trying to access. This often points to a misconfiguration on the website's server or a potential security issue. The fastest initial fix is to clear your browser's cache and cookies, or try accessing the site in Incognito mode.
What Causes This Error
- Mismatched domain name on the SSL certificate: The certificate is issued for a different domain or subdomain than the one being accessed.
- Expired or invalid SSL certificate: The certificate has passed its validity period or is not properly configured.
- Incorrect system date and time: Your computer's clock is significantly out of sync, causing certificate validation issues.
- Browser cache and cookie issues: Stored data in Chrome may be interfering with certificate validation.
- Antivirus or firewall interference: Security software can sometimes intercept and modify secure connections, leading to certificate errors.
- DNS resolution problems: Issues with how your computer resolves domain names can prevent proper certificate validation.
Step-by-Step Fixes
1Adjust System Date and Time to Fix ERR_CERT_COMMON_NAME_INVALID
- Open your computer's system settings. On Windows, right-click the clock in the taskbar and select "Adjust date/time." On macOS, go to "System Settings" > "General" > "Date & Time."
- Ensure that "Set time automatically" and "Set time zone automatically" are enabled. If they are already enabled, toggle them off and then back on.
- Manually verify that the displayed date and time are accurate. If not, correct them.
- Save any changes and close the settings window.
- Restart Google Chrome and attempt to access the website again.
2Clear Browser Cache and Cookies in Chrome
- Open Google Chrome.
- Click the three vertical dots (Menu) in the top-right corner, then navigate to "More tools" > "Clear browsing data."
- In the "Clear browsing data" window, set the "Time range" to "All time."
- Ensure that "Cookies and other site data" and "Cached images and files" are checked. You may also check "Browsing history" if desired.
- Click the "Clear data" button.
- Close and reopen Chrome, then try visiting the problematic website.
3Try Incognito Mode or a Different Browser
- Open Google Chrome.
- Click the three vertical dots (Menu) in the top-right corner and select "New Incognito window," or press Ctrl+Shift+N (Windows) / Cmd+Shift+N (macOS).
- In the Incognito window, attempt to access the website that was displaying the ERR_CERT_COMMON_NAME_INVALID error.
- If the website loads correctly in Incognito mode, it suggests an issue with your browser extensions or cached data in your regular browsing profile.
- Alternatively, try accessing the website using a different web browser (e.g., Mozilla Firefox, Microsoft Edge) to determine if the issue is specific to Chrome.
4Disable Antivirus or Firewall Temporarily
- Locate your antivirus software icon in the system tray (Windows) or menu bar (macOS), right-click it, and look for an option to temporarily disable protection.
- Access your operating system's firewall settings. On Windows, go to "Start" > "Settings" > "Update & Security" > "Windows Security" > "Firewall & network protection." On macOS, go to "System Settings" > "Network" > "Firewall."
- Temporarily disable the firewall. Note the original settings before disabling.
- With the antivirus and/or firewall temporarily disabled, attempt to access the website in Chrome.
- If the website loads, re-enable your security software immediately and investigate its settings for SSL/HTTPS scanning or filtering features that may be causing interference. Add an exception for the website if possible.
Advanced Fixes
Flush DNS Cache and Renew IP Address
- Open Command Prompt as an administrator. On Windows, search for "cmd," right-click "Command Prompt," and select "Run as administrator."
- In the Command Prompt window, type `ipconfig /flushdns` and press Enter. This clears the DNS resolver cache.
- Next, type `ipconfig /release` and press Enter. This releases your current IP address.
- Then, type `ipconfig /renew` and press Enter. This obtains a new IP address from your router or DHCP server.
- Close the Command Prompt and restart Google Chrome. Test the website again.
Check and Modify DNS Settings
- Open your network adapter settings. On Windows, go to "Settings" > "Network & Internet" > "Change adapter options." On macOS, go to "System Settings" > "Network."
- Right-click on your active network connection (e.g., Wi-Fi or Ethernet) and select "Properties" (Windows) or select your connection and click "Details" (macOS).
- For Windows, select "Internet Protocol Version 4 (TCP/IPv4)" and click "Properties." For macOS, click "DNS" tab.
- Choose "Use the following DNS server addresses" (Windows) or add new DNS servers (macOS). Enter `8.8.8.8` as the Preferred DNS server and `8.8.4.4` as the Alternate DNS server (Google Public DNS).
- Click "OK" or "Apply" to save the changes.
- Restart your browser and attempt to access the website.
Reset Chrome Browser Settings
- Open Google Chrome.
- Click the three vertical dots (Menu) in the top-right corner, then select "Settings."
- Scroll down and click "Reset settings" in the left-hand menu or search for "reset."
- Click "Restore settings to their original defaults." A confirmation dialog will appear.
- Click "Reset settings" to confirm. This will disable extensions, clear temporary data, and reset startup pages, but your bookmarks, history, and saved passwords will not be cleared.
- Restart Chrome and check if the error persists.
Frequently Asked Questions
What does ERR_CERT_COMMON_NAME_INVALID mean?
This error means that the SSL/TLS certificate presented by the website you are trying to visit does not match the domain name in the URL. It's a security warning indicating that Chrome cannot verify the identity of the website, potentially due to a misconfiguration or a malicious attempt to intercept your connection.
Is ERR_CERT_COMMON_NAME_INVALID a serious security risk?
Yes, it can be. While it often results from a simple server misconfiguration or an incorrect system clock, it can also indicate a 'man-in-the-middle' attack where an unauthorized entity is attempting to impersonate the website to steal your data. It is advisable not to proceed to such sites, especially if sensitive information is involved, until the issue is resolved.
Can I bypass the ERR_CERT_COMMON_NAME_INVALID error?
Google Chrome typically provides an option to 'Proceed to [website name] (unsafe)' or similar. While technically possible to bypass, it is strongly discouraged, especially on sites where you enter personal or financial information. Bypassing the error means you are connecting to a site without verified security, making your data vulnerable.
Why does this error appear only on some websites?
This error often appears only on specific websites because the problem is usually related to that particular website's SSL certificate configuration or the way your browser interacts with it. Other websites may have correctly configured certificates, or your browser might not encounter the same validation issues with them.