{"id":21809,"date":"2026-11-06T01:04:42","date_gmt":"2026-11-05T22:04:42","guid":{"rendered":"https:\/\/sunucun.com.tr\/blog\/fix-err-cert-authority-invalid\/"},"modified":"2026-11-06T01:04:43","modified_gmt":"2026-11-05T22:04:43","slug":"fix-err-cert-authority-invalid","status":"publish","type":"post","link":"https:\/\/sunucun.com.tr\/blog\/fix-err-cert-authority-invalid\/","title":{"rendered":"What Is NET::ERR_CERT_AUTHORITY_INVALID and How Do You Fix It?"},"content":{"rendered":"<div id=\"ez-toc-container\" class=\"ez-toc-v2_0_89 ez-toc-wrap-center counter-hierarchy ez-toc-counter ez-toc-custom ez-toc-container-direction\">\n<div class=\"ez-toc-title-container\">\n<span class=\"ez-toc-title-toggle\"><\/span><\/div>\n<nav><ul class='ez-toc-list ez-toc-list-level-1 ' ><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-1\" href=\"https:\/\/sunucun.com.tr\/blog\/fix-err-cert-authority-invalid\/#What_Does_ERR_CERT_AUTHORITY_INVALID_Mean\" >What Does ERR_CERT_AUTHORITY_INVALID Mean?<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-2\" href=\"https:\/\/sunucun.com.tr\/blog\/fix-err-cert-authority-invalid\/#Causes_of_the_Error\" >Causes of the Error<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-3\" href=\"https:\/\/sunucun.com.tr\/blog\/fix-err-cert-authority-invalid\/#How_to_Fix_It_as_a_Visitor\" >How to Fix It as a Visitor<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-4\" href=\"https:\/\/sunucun.com.tr\/blog\/fix-err-cert-authority-invalid\/#How_to_Fix_It_as_a_Site_Owner\" >How to Fix It as a Site Owner<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-5\" href=\"https:\/\/sunucun.com.tr\/blog\/fix-err-cert-authority-invalid\/#Similar_Certificate_Errors\" >Similar Certificate Errors<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-6\" href=\"https:\/\/sunucun.com.tr\/blog\/fix-err-cert-authority-invalid\/#Conclusion\" >Conclusion<\/a><\/li><\/ul><\/nav><\/div>\n\n<p class=\"wp-block-paragraph\"><strong>NET::ERR_CERT_AUTHORITY_INVALID<\/strong> is an SSL error showing that the browser does not trust the organization (certificate authority) that issued a website&#8217;s SSL certificate. Chrome then shows the &#8220;Your connection is not private&#8221; page with the code <code>NET::ERR_CERT_AUTHORITY_INVALID<\/code> below it. In this guide we explain what the error means, why it happens and how to fix it as a visitor and as a site owner.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"What_Does_ERR_CERT_AUTHORITY_INVALID_Mean\"><\/span>What Does ERR_CERT_AUTHORITY_INVALID Mean?<span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n<p class=\"wp-block-paragraph\">Every site opened over HTTPS presents an SSL\/TLS certificate to prove its identity. The browser checks that this certificate is signed through a chain that leads up to one of the trusted root certificate authorities stored on the device. If the chain cannot be linked to a trusted root, the browser cannot be sure who issued the certificate and shows ERR_CERT_AUTHORITY_INVALID.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"Causes_of_the_Error\"><\/span>Causes of the Error<span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n<ul class=\"wp-block-list\"><li><strong>Self-signed certificate:<\/strong> The server uses a certificate created by the server itself rather than by an authority. This is common on test servers and on router and device admin panels.<\/li><li><strong>Missing intermediate certificate:<\/strong> If the server sends only the site certificate and not the intermediate certificates, some devices cannot complete the chain.<\/li><li><strong>Untrusted or distrusted authority:<\/strong> Certificates from an organization that browsers no longer trust cause this error.<\/li><li><strong>Old device or operating system:<\/strong> Outdated devices may not have newer root certificates.<\/li><li><strong>Wrong date and time:<\/strong> If the device clock is wrong, the certificate chain may not be evaluated correctly.<\/li><li><strong>Software or network in the middle:<\/strong> Antivirus programs that inspect HTTPS traffic, corporate proxies and the login pages of public Wi-Fi networks can present their own certificates.<\/li><\/ul>\n\n\n\n<h2 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"How_to_Fix_It_as_a_Visitor\"><\/span>How to Fix It as a Visitor<span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n<ol class=\"wp-block-list\"><li><strong>Set the date and time automatically:<\/strong> Turn on automatic time under <strong>Settings &gt; Time &amp; language<\/strong> on Windows, or in the date and time settings on your phone.<\/li><li><strong>Try a different network:<\/strong> If the error appears only on a hotel, cafe or office network, try mobile data. On public networks you may first need to open the login page and sign in.<\/li><li><strong>Check your antivirus HTTPS scanning:<\/strong> Temporarily turn off the &#8220;HTTPS scanning&#8221; or &#8220;encrypted connection inspection&#8221; feature of your security software and try again.<\/li><li><strong>Update the browser and system:<\/strong> Updates also refresh the list of trusted root certificates on the device.<\/li><li><strong>Clear the SSL state and cache:<\/strong> On Windows, use <strong>Internet Options &gt; Content &gt; Clear SSL state<\/strong>, then clear the browser cache.<\/li><\/ol>\n\n\n<p class=\"wp-block-paragraph\"><strong>Important:<\/strong> Clicking through the warning with &#8220;Advanced &gt; Proceed (unsafe)&#8221; means sending data without verifying that the connection really belongs to that site. Do not bypass the warning on pages where you enter passwords, card details or personal data. Continuing is reasonable only on local devices where you know the certificate is self-signed, such as your own router&#8217;s admin panel.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"How_to_Fix_It_as_a_Site_Owner\"><\/span>How to Fix It as a Site Owner<span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n<ol class=\"wp-block-list\"><li><strong>Use a certificate from a trusted authority:<\/strong> Instead of a self-signed certificate, install a trusted free or paid certificate such as Let&#8217;s Encrypt. For the options, see our article on <a href=\"https:\/\/sunucun.com.tr\/blog\/ssl-what-is-free\/\">free SSL<\/a>.<\/li><li><strong>Install the full chain:<\/strong> Add the intermediate certificates when installing the certificate. In Nginx, use the <code>fullchain.pem<\/code> file on the <code>ssl_certificate<\/code> line rather than only the site certificate; in Apache, define the intermediates with <code>SSLCertificateChainFile<\/code> or append them to the certificate file.<\/li><li><strong>Test the chain:<\/strong> You can see the certificates the server sends with this command:<\/li><\/ol>\n\n\n<pre class=\"wp-block-code\"><code>openssl s_client -connect yourdomain.com:443 -servername yourdomain.com -showcerts<\/code><\/pre>\n\n\n<p class=\"wp-block-paragraph\">The output should show the intermediate certificate next to the site certificate and end with <code>Verify return code: 0 (ok)<\/code>. Also check the chain from outside with an SSL test tool. If you use cPanel, AutoSSL can install and renew the certificate automatically; we explain the steps in our article on <a href=\"https:\/\/sunucun.com.tr\/blog\/how-to-automatically-renew-ssl-certificate-in-cpanel\/\">automatically renewing an SSL certificate in cPanel<\/a>.<\/p>\n\n\n<p class=\"wp-block-paragraph\">If you use a CDN such as Cloudflare, the certificate the visitor sees is presented by the CDN; make sure the certificate is active for the domain and its subdomains in the CDN dashboard.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"Similar_Certificate_Errors\"><\/span>Similar Certificate Errors<span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n<p class=\"wp-block-paragraph\">For other errors, such as an expired certificate (NET::ERR_CERT_DATE_INVALID) or a certificate that does not match the domain (NET::ERR_CERT_COMMON_NAME_INVALID), and their fixes, see our guide <a href=\"https:\/\/sunucun.com.tr\/blog\/what-is-an-ssl-error\/\">what is an SSL error<\/a>.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"Conclusion\"><\/span>Conclusion<span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n<p class=\"wp-block-paragraph\">NET::ERR_CERT_AUTHORITY_INVALID shows that the site&#8217;s certificate cannot be linked to a trusted authority. On the visitor side, fixing the clock, changing the network and checking security software is usually enough. If you are the site owner, use a trusted certificate and install the full chain, including the intermediate certificates.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>NET::ERR_CERT_AUTHORITY_INVALID is an SSL error showing that the browser does not trust the organization (certificate authority) that issued a website&#8217;s SSL certificate. Chrome then shows the &#8220;Your connection is not private&#8221; page with the code NET::ERR_CERT_AUTHORITY_INVALID below it. In this guide we explain what the error means, why it happens and how to fix it&hellip;<\/p>\n","protected":false},"author":1,"featured_media":21818,"comment_status":"","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"_uf_show_specific_survey":0,"_uf_disable_surveys":false,"footnotes":""},"categories":[1525],"tags":[],"class_list":["post-21809","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-siber-guvenlik"],"_links":{"self":[{"href":"https:\/\/sunucun.com.tr\/blog\/wp-json\/wp\/v2\/posts\/21809","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/sunucun.com.tr\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/sunucun.com.tr\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/sunucun.com.tr\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/sunucun.com.tr\/blog\/wp-json\/wp\/v2\/comments?post=21809"}],"version-history":[{"count":0,"href":"https:\/\/sunucun.com.tr\/blog\/wp-json\/wp\/v2\/posts\/21809\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/sunucun.com.tr\/blog\/wp-json\/wp\/v2\/media\/21818"}],"wp:attachment":[{"href":"https:\/\/sunucun.com.tr\/blog\/wp-json\/wp\/v2\/media?parent=21809"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/sunucun.com.tr\/blog\/wp-json\/wp\/v2\/categories?post=21809"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/sunucun.com.tr\/blog\/wp-json\/wp\/v2\/tags?post=21809"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}