ZARIVORATools

How to Fix SSL Errors

Browsers show a full-page warning when TLS fails, which stops nearly all visitors. Each error message maps to a specific cause.

Check Your SSL Certificate →

Error by error

  • ERR_CERT_DATE_INVALID — expired certificate. Renew it and fix the automated renewal job.
  • ERR_CERT_COMMON_NAME_INVALID — the hostname isn't covered. Reissue including www and any subdomains you serve.
  • ERR_CERT_AUTHORITY_INVALID — self-signed certificate or a missing intermediate. Install the full chain.
  • ERR_SSL_PROTOCOL_ERROR — the server isn't serving TLS correctly on port 443.
  • Mixed content — HTTPS page loading HTTP assets. Update hard-coded URLs in templates and the database.

After it works

  • Redirect all HTTP traffic to HTTPS with a 301.
  • Update the canonical URLs and sitemap to the HTTPS versions.
  • Add Strict-Transport-Security once every subdomain is served over HTTPS.
  • Set a calendar reminder to verify renewal, even when it is automated.