Browser security errors › Chrome and Edge
NET::ERR_CERT_COMMON_NAME_INVALID: how to fix it on your website
The certificate does not cover the domain name the visitor typed, for example it covers example.com but not www.example.com.
What your visitors see
Visitors on the uncovered hostname get a full-page warning.
Common causes
- www or a subdomain missing from the certificate's Subject Alternative Names
- Server returns the default certificate for another site because SNI is misconfigured
- Domain points at a CDN or host without a certificate for it
How to fix it
- Reissue the certificate including every hostname you serve (certbot -d example.com -d www.example.com)
- Check the server_name or virtual host matches the hostname
- Redirect unused hostnames to the main one, with a certificate that covers both
Check your certificate and TLS setup
Korrali Web scans your site for certificate, TLS and security header problems and can monitor it so you hear about expiry before visitors do.