Here’s a step-by-step guide to fix the NET::ERR_CERT_AUTHORITY_INVALID error in Chrome for site owners and visitors
If you’re facing the “NET ERROR_CERT_AUTHORITY_INVALID” (or what’s sometimes referred to as “ERR_CERT_AUTHORITY_INVALID” or “NET::ERR_CERT_AUTHORITY_INVALID”) error in Google Chrome, then you’re not alone. Thousands of users around the world face this pesky SSL error, and it’s irritating to say the least.
If you’re looking for a solution through this post, you’re either a website owner whose website is facing this error or you’re a user who wants to access a particular website that’s displaying this error message. In either case, this post will help to solve the SSL certificate error in Chrome.
What the NET::ERR_CERT_AUTHORITY_INVALID Looks Like on Different Platforms
- Chrome: NET::ERR_CERT_AUTHORITY_INVALID, ERR_CERT_AUTHORITY_INVALID (-202), or ERR_SSL_SERVER_CERT_BAD_FORMAT
- Firefox: SEC_ERROR_UNKNOWN_ISSUER
- OpenSSL: X509_V_ERR_CERT_HAS_EXPIRED
Here’s a quick peek at what the error looks like when displayed in Google Chrome:
Image caption: A screenshot of the NET::ERR_CERT_AUTHORITY_INVALID error in Google Chrome.
What Causes the NET ERR_CERT_AUTHORITY_INVALID Error?
If you’re a website owner and your website displays this error message, then there are several potential reasons why the browser says the cert authority is invalid:
- You’re using a self-signed SSL certificate,
- You’re using an expired certificate,
- The certificate doesn’t list the necessary server aliases, or
- The certificate authority (CA) that issued your SSL certificate isn’t trusted by Google Chrome.
Purchase an SSL Certificate & Save Up to 88%!
We offer the best discount on all types of Domain Validation (DV), Organization Validation (OV), and Extended Validation (EV) SSL Certificates. We offer certificates from the leading CAs, including Comodo CA, Sectigo, Thawte, GeoTrust, and RapidSSL with DV certificates starting as low as $5.45 per year.
How to Fix the NET ERR_CERT_AUTHORITY_INVALID Error in Google Chrome (For Website Owners)
Ready to address this ERR_CERT_AUTHORITY_INVALID issue in Chrome?
- Purchase and install an SSL/TLS certificate from a public certificate authority (CA) or reseller. Getting an SSL certificate from a trusted CA will make browsers (including Chrome and Firefox) trust your website. We have SSL certificate installation guides to walk you through the installation process.
- Check for any misconfigurations. If the SSL error appeared after you’ve installed the certificate, verify your installation with the CheapSSLSecurity.com free SSL checker.
Simple, wasn’t it?
Want some great news? SSL certificates are now cheaper than ever. Check out our selection of SSL certificates, which have prices starting as low as $5.45 per year.
How to Fix the NET ERR_CERT_AUTHORITY_INVALID Error in Google Chrome (For Website Visitors)
As we mentioned moments ago, most of the time, this error exists due to a problematic SSL certificate on the website. So, the solution remains in the hands of the website administrator or owner (be sure to reach out and let them know in case they’re not aware!). However, on the rare occasion, it’s actually a user’s operating system or browser that causes the issue.
If you’re a user facing this error, try the following solutions one by one. If one doesn’t work, then try the next one on the list:
Update Google Chrome
- First, open Google Chrome.
- Now, type chrome://settings/help in the address bar.
- Let Google Chrome update by itself.
Clear Google Chrome’s Cache Memory
- Open Google Chrome.
- Click on the three vertical dots you see in the top right corner.
- Go to Settings.
- Move to the end of the page and click on Advanced –> Privacy and security –> Clear Browsing Data.
- Choose all three options (Note: It will clear all of your browsing data) and click on Clear Data.
- Close Chrome and launch it again.
Reset Google Chrome to Default Settings
- Open Google Chrome.
- Click on the three vertical dots you see in the top right corner.
- Go to Settings.
- Click on
- Now, click on Reset settings to their original defaults and reset the settings.
Clear Google Chrome’s DNS Cache
- Open Google Chrome.
- Type chrome://net-internals/#dns in the address bar.
- Click on the Clear host cache
Disable Google Chrome’s Extensions
First try to open the website using Google Chrome’s incognito mode. If you don’t encounter this error, the problem is likely to be in Chrome’s extensions.
- Click on the three vertical dots you see in the top right corner of your web browser.
- Now, click on More tools option
- Go to Extensions
- Turn all extensions off and check if the error persists.
What You Should Not Do When Facing This Error
Turn Off Your Antivirus/Firewall
This is not a recommended option as it could make your system vulnerable to threats. It’s bad news all the way around — please don’t do it.
Temporarily Ignore the Error Message
This drives us crazy. Time and again, you’ll read enabling the -ignore-certificate-errors parameter as a solution for fixing this NET ERR_CERT_AUTHORITY_INVALID ERROR. However, it’s as much of a solution as putting on a blindfold when locked in a room with a bear: you’re still in a dangerous position, you just don’t see it.
Simply put, this is not a solution in any way. Performing this step will simply make your browsers ignore of the error and leave your data at risk of compromise.
Purchase SAN Certificate/Multi-Domain SSL & Save Up to 88%!
We offer the best discount on all types of SAN SSL Certificates (Multi-Domain SSL). We offer certificates from the leading CAs, including Comodo CA, Sectigo, Thawte, and GeoTrust with SAN certificates starting as low as $18.02 per year.
Editor’s Note: This article was originally published in January 2020. It was updated on April 2, 2025 to provide more current and accurate information.