How to Fix NET::ERR_CERT_COMMON_NAME_INVALID (Google Chrome)
Quick Answer
The NET::ERR_CERT_COMMON_NAME_INVALID error indicates that your browser cannot establish a secure connection to a website because the security certificate presented by the server does not match the domain name you are trying to access. The fastest fix is often to check your system's date and time settings, as incorrect settings can cause certificate validation failures.
What Causes This Error
- Incorrect system date and time on your computer.
- The website's SSL certificate is issued for a different domain name than the one you are visiting (Common Name Mismatch).
- The website's SSL certificate is self-signed or not issued by a trusted Certificate Authority (CA).
- Outdated browser software or operating system.
- Interference from antivirus software or firewall settings.
- Malware or adware redirecting your connection to a malicious server.
Step-by-Step Fixes
1Verify System Date and Time Settings
- Right-click on the clock in the bottom-right corner of your screen (Windows) or click the date/time in the menu bar (macOS).
- Select 'Adjust date/time' or 'Date & Time Preferences'.
- Ensure 'Set time automatically' and 'Set time zone automatically' are enabled. If not, enable them and synchronize your clock.
- Restart your browser and attempt to access the website again.
2Clear Browser Cache and Cookies
- Open Google Chrome.
- Click the three vertical dots in the top-right corner, then navigate to 'More tools' > 'Clear browsing data'.
- Set the 'Time range' to 'All time'.
- Check the boxes for 'Cookies and other site data' and 'Cached images and files'. Uncheck other options if you wish to retain them.
- Click 'Clear data'. Restart Chrome and retest the website.
3Disable Antivirus/Firewall Temporarily
- Locate your antivirus software icon in the system tray (Windows) or menu bar (macOS).
- Right-click the icon and look for options like 'Disable protection', 'Pause protection', or 'Exit'. Select to disable it temporarily (e.g., for 10-15 minutes).
- If you have a third-party firewall, temporarily disable it as well. Consult your firewall software's documentation for specific instructions.
- Attempt to access the website. If the error is resolved, re-enable your security software and investigate its settings for SSL scanning or web protection features that might be causing the conflict.
4Update Google Chrome
- Open Google Chrome.
- Click the three vertical dots in the top-right corner.
- Navigate to 'Help' > 'About Google Chrome'.
- Chrome will automatically check for updates and download them if available.
- After the update is complete, click 'Relaunch' to restart Chrome. Retest the website.
5Check for Browser Extensions Interference
- Open Google Chrome.
- Click the three vertical dots in the top-right corner, then navigate to 'More tools' > 'Extensions'.
- Toggle off each extension one by one, starting with recently installed or security-related extensions.
- After disabling an extension, attempt to access the problematic website. If the error resolves, you have identified the conflicting extension. Consider keeping it disabled or finding an alternative.
- Re-enable extensions one by one to isolate the problematic one if necessary.
Advanced Fixes
Reset Chrome Settings to Default
- Open Google Chrome.
- Click the three vertical dots in the top-right corner, then navigate to 'Settings'.
- Scroll down and click 'Advanced'.
- Under the 'Reset and clean up' section, click 'Restore settings to their original defaults'.
- Confirm by clicking 'Reset settings'. This will disable extensions, clear temporary data, and reset startup pages, but will not delete bookmarks, history, or saved passwords.
Check for Malware
- Download and install a reputable anti-malware scanning tool (e.g., Malwarebytes, Windows Defender).
- Perform a full system scan to detect and remove any malicious software.
- Follow the tool's instructions to quarantine or delete detected threats.
- Restart your computer after the scan and removal process is complete. Then retest the website in Chrome.
Flush DNS Cache
- Open Command Prompt as an administrator (Windows) or Terminal (macOS).
- On Windows, type 'ipconfig /flushdns' and press Enter. You should see a confirmation message.
- On macOS, type 'sudo dscacheutil -flushcache; sudo killall -HUP mDNSResponder' and press Enter. You will be prompted for your administrator password.
- Close the Command Prompt/Terminal. Restart your browser and attempt to access the website.
Frequently Asked Questions
What does NET::ERR_CERT_COMMON_NAME_INVALID mean?
This error signifies that the security certificate presented by the website's server does not match the domain name you entered in your browser. This mismatch prevents Chrome from verifying the website's identity securely, leading to the 'Your connection is not private' warning.
Is it safe to proceed past this error?
Generally, it is not recommended to proceed past this error, especially on websites where sensitive information is exchanged (e.g., banking, shopping, email). Doing so means your connection might not be private, and your data could be intercepted. Only proceed if you are certain of the website's legitimacy and understand the risks.
Can this error be caused by my internet service provider (ISP)?
While less common, an ISP could potentially cause this error if they are redirecting traffic or interfering with SSL connections, sometimes for content filtering or caching. If the error occurs across many different websites and after trying other fixes, contacting your ISP might be a next step.
Why does this error appear only on some websites?
If the error appears only on specific websites, it often indicates an issue with that particular website's SSL certificate configuration. The website owner might have an expired certificate, a misconfigured certificate, or a certificate issued for a different domain name. In such cases, the website owner needs to resolve the issue.