ERR_CERT_AUTHORITY_INVALID: 6 Safe Fixes in Chrome

ERR_CERT_AUTHORITY_INVALID shows up with “Your connection is not private”. Chrome could not verify who issued the website’s security certificate. Before you click through, learn what ERR_CERT_AUTHORITY_INVALID means and when it is safe to proceed.

Quick answer: ERR_CERT_AUTHORITY_INVALID means Chrome could not verify who issued the certificate. Fix your date and time, switch networks, disable HTTPS scanning in antivirus, and update Windows. Site owners should install a certificate from a trusted authority.

ERR_CERT_AUTHORITY_INVALID error message shown in Chrome browser

What Causes ERR_CERT_AUTHORITY_INVALID?

Chrome trusts certificates only if they chain to a known certificate authority. The warning appears when:

The site uses a self-signed or expired certificate.
Your computer’s date and time are wrong.
Antivirus or a public Wi-Fi portal is intercepting HTTPS.
Your operating system’s root certificates are outdated.

How to Fix ERR_CERT_AUTHORITY_INVALID: Step-by-Step

Step 1: Check the date and time

Wrong system time is the number one cause. Turn on “Set time automatically” and sync now in Windows Settings, Time & language.

Step 2: Reload on a different network

Public Wi-Fi at cafes and hotels often intercepts traffic. Try your mobile hotspot. If the error disappears, the original network was the cause. A similar security warning is explained in our ERR_SSL_PROTOCOL_ERROR guide.

Also Read: https://axeetech.com/how-to-fix-err-connection-refused-in-chrome-complete-guide/

Step 3: Turn off HTTPS scanning in antivirus

Some security programs replace certificates. Disable the HTTPS scanning option or add Chrome to exceptions.

Step 4: Update Windows and Chrome

Run Windows Update and update Chrome from the three-dot menu, Help, About Google Chrome. This refreshes trusted root certificates.

Step 5: Clear browsing data

Clear cached images and files and cookies from chrome://settings/clearBrowserData, then restart Chrome.

Step 6: Proceed only if you trust the site

If it is your own router or a test server with a self-signed certificate, you can click Advanced and then Proceed. Never do this on banking, shopping or login pages. Read the Chrome security help before continuing.

ERR_CERT_AUTHORITY_INVALID on Mac, Android and iPhone

On a Mac, open Keychain Access, check System Roots for expired certificates, and make sure Set Date and Time Automatically is on in System Settings, General, Date & Time. Corporate or school networks sometimes install their own root certificate, which is a normal cause of this warning.

On Android, open Settings, Date & time, and turn on automatic date and time. Old Android versions may lack newer root certificates, so update the system and Chrome from the Play Store.

Advanced Troubleshooting for ERR_CERT_AUTHORITY_INVALID

For site owners: install a certificate that chains to a public authority. Free options such as Let’s Encrypt work well. Always install the full chain, including the intermediate certificate, because a missing intermediate is the most common reason a valid certificate still shows this error.

Check your certificate with an online SSL checker and confirm the domain name matches exactly, including www or non-www.

Never ignore the warning on sites where you enter passwords or card numbers. Read the Chrome security guidance, and if you also see protocol errors, compare with our ERR_SSL_PROTOCOL_ERROR guide and ERR_CONNECTION_RESET.

ERR_CERT_AUTHORITY_INVALID fix checklist with steps in order

How to Stop ERR_CERT_AUTHORITY_INVALID Coming Back

Keep date and time automatic.
Avoid logging in over public Wi-Fi without a VPN.
Renew your own site’s SSL certificate before it expires.

Common Mistakes When Fixing ERR_CERT_AUTHORITY_INVALID

Most repeat cases of ERR_CERT_AUTHORITY_INVALID come from a handful of avoidable slips. Before you spend an hour on advanced troubleshooting, check that you have not made one of these:

Clicking Proceed on a banking, shopping or login page without verifying the site.
Forgetting that a wrong system clock can invalidate every certificate at once.
Installing only the main certificate on your own site and leaving out the intermediate chain.

Testing one change at a time also helps. If you change DNS, proxy and firewall settings together, you will not know which change actually fixed ERR_CERT_AUTHORITY_INVALID, and you may leave a harmful setting in place.

Quick Recap: Fixing ERR_CERT_AUTHORITY_INVALID

Work through the fixes in order, because most cases of ERR_CERT_AUTHORITY_INVALID clear up within the first three or four steps. If you still see ERR_CERT_AUTHORITY_INVALID after every step, note the time it happens, which network you are on, and which sites are affected, then contact your internet provider, your hosting company or the site owner with those details.

How to fix ERR_CERT_AUTHORITY_INVALID in Chrome step-by-step guide

ERR_CERT_AUTHORITY_INVALID FAQ

Is ERR_CERT_AUTHORITY_INVALID dangerous?

It can be. It warns that the certificate cannot be verified, so do not enter passwords or card details on that page.

Why does it appear on my own website?

Your certificate may be self-signed, expired, or missing the intermediate certificate chain.

Can the wrong clock cause it?

Yes. If your clock is off, valid certificates look expired or not yet valid.

Can I bypass ERR_CERT_AUTHORITY_INVALID?

Chrome lets you proceed via Advanced, but only do it for sites you own or fully trust, and never for payments or logins.

Why does it only happen on public Wi-Fi?

Captive portals and some hotspots intercept HTTPS, which makes valid certificates look untrusted.

Axee Davies

Axee Davies is the founder of AxeeTech, publishing gaming guides, codes, and Windows how-tos since March 2013. A tech enthusiast for 13+ years — starting with smartphones and Android rooting — he now runs a site that puts out a new guide every day for Roblox players, traders, and Windows users. More about AxeeTech

axeetech.com