Browser security errors › Chrome and Edge
NET::ERR_CERT_DATE_INVALID: how to fix it on your website
The site's TLS certificate has expired or is not yet valid, judged against the visitor's device clock.
What your visitors see
If only one visitor sees it, their device clock is often wrong. If everyone sees it, your certificate has expired.
Common causes
- Certificate expired and auto-renewal failed
- Renewed certificate not installed or the server not reloaded
- Visitor's system date is wrong
- An intermediate certificate in the chain has expired
How to fix it
- Check the expiry date with: openssl s_client -connect yourdomain.com:443 -servername yourdomain.com | openssl x509 -noout -dates
- Renew the certificate (for Let's Encrypt: certbot renew) and reload the web server
- Make sure the renewal job runs and alerts you if it fails
- Monitor expiry so you get warned 30 days ahead
Check your certificate and TLS setup
Korrali Web scans your site for certificate, TLS and security header problems and can monitor it so you hear about expiry before visitors do.