![\"The](\"https:\/\/lightningxvpn.com\/blog\/wp-content\/uploads\/2025\/10\/err-cert-common-name-invalid-1.png\")
<\/figure>\n\n\n\nHow to Fix ERR_CERT_COMMON_NAME_INVALID<\/h2>\n\n\n\n1. Check the Domain Name on Your SSL Certificate<\/h3>\n\n\n\n
Make sure your SSL certificate matches the exact domain you\u2019re visiting.<\/p>\n\n\n\n
To check:<\/p>\n\n\n\n
- \n
- Open your website in a browser.<\/li>\n\n\n\n
- Click the padlock icon next to the URL.<\/li>\n\n\n\n
- Select \u201cCertificate\u201d or \u201cConnection is secure.\u201d<\/li>\n\n\n\n
- Look at the \u201cIssued to\u201d section.<\/li>\n<\/ul>\n\n\n\n
![\"SSL](\"https:\/\/lightningxvpn.com\/blog\/wp-content\/uploads\/2025\/10\/err-cert-common-name-invalid-2.png\")
<\/figure>\n\n\n\nIf the name shown there doesn\u2019t match your site\u2019s domain, you must reissue or replace your SSL certificate with one that matches exactly – including \u201cwww\u201d or any subdomain if needed.<\/p>\n\n\n\n
2. Renew or Reinstall an Expired SSL Certificate<\/h3>\n\n\n\n
Expired certificates instantly trigger this error.<\/p>\n\n\n\n
To check the expiration date:<\/p>\n\n\n\n
- \n
- Click the padlock icon > open certificate details<\/strong>.<\/li>\n\n\n\n
- Look at the \u201cValid from\u201d and \u201cValid to\u201d dates.<\/li>\n<\/ul>\n\n\n\n
If your certificate has expired:<\/p>\n\n\n\n
- \n
- Log in to your hosting provider or SSL management panel.<\/li>\n\n\n\n
- Renew the certificate.<\/li>\n\n\n\n
- Reinstall it using the hosting dashboard (for example, cPanel or Cloudflare<\/a>).<\/li>\n<\/ul>\n\n\n\n
![\"Browser](\"https:\/\/lightningxvpn.com\/blog\/wp-content\/uploads\/2025\/10\/err-cert-common-name-invalid-3.png\")
<\/figure>\n\n\n\n3. Check for Issues with Browser Extensions<\/h3>\n\n\n\n
Installing too many browser extensions may cause conflicts, which could be the underlying cause of common name-mismatch errors.<\/p>\n\n\n\n
Try accessing the website in an incognito window. If it works normally, then the ERR_CERT_COMMON_NAME_INVALID error is likely caused by browser extensions<\/a>. The solution is to disable extensions one by one while checking the website’s status to identify the conflicting source. Once you locate the conflicting extension, remove it.<\/p>\n\n\n\n
Here\u2019s how:<\/p>\n\n\n\n
- \n
- Click the three-dot menu in the upper-right corner of Chrome and select \u201cExtensions\u201d.<\/li>\n\n\n\n
- In the new tab that appears, click \u201cManage Extensions\u201d.<\/li>\n\n\n\n
- On the new page, select the extension you want to uninstall and click Remove.<\/li>\n<\/ul>\n\n\n\n
![\"Manage](\"https:\/\/lightningxvpn.com\/blog\/wp-content\/uploads\/2025\/10\/err-cert-common-name-invalid-4.png\")
<\/figure>\n\n\n\n4. Clear Browser Cache and SSL State<\/h3>\n\n\n\n
Here are the steps to clear the cache of your browser(Google Chrome Example):<\/strong><\/p>\n\n\n\n
- \n
- Go to Settings <\/strong>> Privacy <\/strong>> Clear browsing data<\/strong>.<\/li>\n\n\n\n
- Select Cached images and files<\/strong> and Cookies<\/strong>.<\/li>\n\n\n\n
- Click Clear data<\/strong>.<\/li>\n\n\n\n
- Close and reopen Chrome.<\/li>\n<\/ol>\n\n\n\n
This ensures your browser fetches the latest SSL information the next time you visit the website.<\/p>\n\n\n\n
Further Reading: How to Clear Cache and Cookies on Chrome: Step-by-Step Guide<\/a><\/p>\n\n\n\n
To clear the SSL cache in Windows, follow these quick steps:<\/strong><\/p>\n\n\n\n
- \n
- Click the Start Menu<\/strong> and open the Control Panel<\/strong>.<\/li>\n\n\n\n
- Go to Network and Internet<\/strong> > Internet Options<\/strong>.<\/li>\n\n\n\n
- In the Content<\/strong> tab, find Clear SSL state<\/strong> under the Certificates section.<\/li>\n\n\n\n
- Click Clear SSL state<\/strong>, then select OK<\/strong> when prompted.<\/li>\n\n\n\n
- Restart your browser to apply the changes.<\/li>\n<\/ol>\n\n\n\n
You\u2019ll see a confirmation message saying the SSL cache has been cleared successfully.<\/p>\n\n\n\n
![\"Clear](\"https:\/\/lightningxvpn.com\/blog\/wp-content\/uploads\/2025\/10\/err-cert-common-name-invalid-5.png\")
<\/figure>\n\n\n\n5. Disable or Reconfigure Your VPN or Proxy<\/h3>\n\n\n\n
A VPN can occasionally route traffic through a different IP address or region, which may cause the ERR_CERT_COMMON_NAME_INVALID error. Try disabling your VPN or proxy temporarily to see if the error disappears. If you rely on a VPN regularly, choose one that handles SSL routing correctly.<\/p>\n\n\n\n
\nTip:<\/strong> LightningX VPN<\/strong><\/a>, known for reliable SSL-friendly routing and DNS protection. Plus, it provides you with powerful and stable cybersecurity protection. When connected during your online sessions, your IP address is replaced by its official proxy servers. This ensures your private network data remains secure from leaks and theft. With a strict zero-log policy, all your online traces are untraceable – let alone vulnerable to attacks from insecure network connections. Download now to unlock secure browsing protection. Subscribe and enjoy a 30-day money-back guarantee!<\/p>\n\n\n\n
\nGet LightningX VPN<\/strong><\/a><\/div>\n<\/div>\n<\/div>\n\n\n\n6. Update Your Browser and Operating System<\/h3>\n\n\n\n
An outdated browser may not recognize the latest certificate authorities. Make sure both your browser and operating system are updated to the latest version.<\/p>\n\n\n\n
Google Chrome update:<\/strong><\/p>\n\n\n\n
- \n
- Go to Settings:<\/strong> From the dropdown, select Help <\/strong>> About Google Chrome<\/strong>.<\/li>\n\n\n\n
- Check for Updates:<\/strong> Chrome will automatically check for the latest version. If an update is available, it will start downloading immediately.<\/li>\n\n\n\n
- Restart<\/strong> Chrome:<\/strong> Once the update is installed, click Relaunch<\/strong> to apply it.<\/li>\n\n\n\n
- Verify the Version:<\/strong> After Chrome restarts, return to Help <\/strong>> About Google Chrome<\/strong> to confirm that it says \u201cChrome is up to date.\u201d<\/li>\n<\/ol>\n\n\n\n
![\"Check](\"https:\/\/lightningxvpn.com\/blog\/wp-content\/uploads\/2025\/10\/err-cert-common-name-invalid-6.png\")
<\/figure>\n\n\n\nPlease Note<\/strong>: Chrome updates automatically in the background, but restarting your browser regularly ensures updates are applied.<\/p>\n\n\n\n
Learn more: How to Update Chrome | Fix Google Chrome Not Updating<\/a><\/p>\n\n\n\n
Windows Update (Windows 10 & 11):<\/strong><\/p>\n\n\n\n
- \n
- Open Settings:<\/strong> Press Windows + I<\/strong> or click Start > Settings<\/strong>.<\/li>\n\n\n\n
- Go to Update Section:<\/strong> Select Windows Update<\/strong>.<\/li>\n\n\n\n
- Check for Updates:<\/strong> Click Check for updates<\/strong> to find available updates.<\/li>\n\n\n\n
- Install Updates:<\/strong> If any are found, choose Download and install<\/strong>.<\/li>\n\n\n\n
- Restart <\/strong>Your PC:<\/strong> When prompted, click Restart now<\/strong> to complete the process.<\/li>\n\n\n\n
- Confirm:<\/strong> After reboot, check again to see \u201cYou\u2019re up to date.\u201d<\/li>\n<\/ol>\n\n\n\n
![\"Check](\"https:\/\/lightningxvpn.com\/blog\/wp-content\/uploads\/2025\/10\/err-cert-common-name-invalid-7.png\")
<\/figure>\n\n\n\nTip:<\/strong> Enable automatic updates<\/strong> in Advanced options<\/strong> so your system stays secure without manual checks.<\/p>\n\n\n\n
All these actions ensure compatibility with modern SSL encryption standards.<\/p>\n\n\n\n
7. Fix Redirect or Canonical URL Errors<\/h3>\n\n\n\n
Redirects should always point to the same protocol and domain<\/strong> version that your SSL certificate covers.<\/p>\n\n\n\n
Example:<\/strong><\/p>\n\n\n\n
If your SSL is issued for https:\/\/www.example.com, make sure redirects from:<\/p>\n\n\n\n
- \n
- http:\/\/example.com<\/li>\n\n\n\n
- https:\/\/example.com<\/li>\n<\/ul>\n\n\n\n
All go to https:\/\/www.example.com<\/strong>. Check your .htaccess<\/strong> or Nginx config for proper 301 redirects.<\/p>\n\n\n\n
8. Test Your SSL Setup<\/h3>\n\n\n\n
After fixing your configuration, test your SSL to ensure it\u2019s valid and trusted.<\/p>\n\n\n\n
Free Tools<\/strong>:<\/p>\n\n\n\n
- \n
- SSL Labs Test<\/a>: Enter your domain, run the scan, and check the overall security grade.<\/li>\n\n\n\n
- SSL.org<\/a>: Confirms whether your certificate is properly installed and browser-trusted.<\/li>\n\n\n\n
- SSL Shopper:<\/a> Shows certificate validity, issuer, and expiration date.<\/li>\n<\/ul>\n\n\n\n
Tip: <\/strong>If the test shows a \u201cname mismatch\u201d or \u201cincomplete chain,\u201d recheck your certificate installation or domain redirection.<\/p>\n\n\n\n
Common Causes of ERR_CERT_COMMON_NAME_INVALID<\/h2>\n\n\n\n
Let\u2019s look at what usually triggers this problem. There are a few main causes:<\/p>\n\n\n\n
1. Domain Mismatch<\/strong><\/p>\n\n\n\n
This is the most common reason. The domain name on the SSL certificate doesn\u2019t match the website domain. For instance, your certificate might cover mywebsite.com<\/strong>, but your users are visiting www.mywebsite.com<\/strong>.<\/p>\n\n\n\n
- SSL.org<\/a>: Confirms whether your certificate is properly installed and browser-trusted.<\/li>\n\n\n\n
- SSL Labs Test<\/a>: Enter your domain, run the scan, and check the overall security grade.<\/li>\n\n\n\n
- Go to Update Section:<\/strong> Select Windows Update<\/strong>.<\/li>\n\n\n\n
- Check for Updates:<\/strong> Chrome will automatically check for the latest version. If an update is available, it will start downloading immediately.<\/li>\n\n\n\n
- Go to Network and Internet<\/strong> > Internet Options<\/strong>.<\/li>\n\n\n\n
- Select Cached images and files<\/strong> and Cookies<\/strong>.<\/li>\n\n\n\n
- Go to Settings <\/strong>> Privacy <\/strong>> Clear browsing data<\/strong>.<\/li>\n\n\n\n
- Look at the \u201cValid from\u201d and \u201cValid to\u201d dates.<\/li>\n<\/ul>\n\n\n\n
- Click the padlock icon > open certificate details<\/strong>.<\/li>\n\n\n\n