Browser security errors › Chrome and Edge
NET::ERR_CERT_AUTHORITY_INVALID: how to fix it on your website
The browser does not trust the certificate authority that issued the certificate, or the chain to a trusted root is incomplete.
What your visitors see
Visitors see 'Your connection is not private'. Most will leave.
Common causes
- Self-signed certificate on a public site
- Missing intermediate certificate in the server configuration
- Certificate from an untrusted or distrusted CA
- Corporate proxy or antivirus intercepting HTTPS on the visitor's side
How to fix it
- Serve the full chain (for Nginx use fullchain.pem, not cert.pem)
- Replace self-signed certificates with one from a public CA such as Let's Encrypt
- Test the chain with an SSL checker and fix any 'chain incomplete' warning
Check your certificate and TLS setup
Korrali Web scans your site for certificate, TLS and security header problems and can monitor it so you hear about expiry before visitors do.