← All guides TLS/SSL · ERR_CERT_DATE_INVALID

SSL Certificate Problems: Why Browsers Are Blocking Your Site

Unlike a DNS or hosting failure, an SSL problem usually means the server responded just fine — but your browser refused to trust the connection and stopped before showing you anything.

What's actually happening

HTTPS relies on a certificate that proves the server is who it claims to be, issued by a certificate authority and valid for a specific set of domains within a specific date range. If the certificate has expired, doesn't cover the exact hostname being requested, or was issued by something the browser doesn't trust, the browser blocks the page with a warning instead of loading it.

How to tell which certificate problem you have

• Expired certificate — the browser warning will usually say so directly, or a check will show a status like certificate has expired.
• Hostname mismatch — happens when the certificate covers example.com but not www.example.com (or vice versa), or when it's still the default certificate for a hosting platform rather than yours.
• Untrusted or self-signed — common on staging servers, or when a certificate was generated manually instead of through a recognized authority.
• Broken certificate chain — the server isn't sending the intermediate certificates a browser needs to verify trust, even though the main certificate itself is fine.

How to fix it

If you use a managed platform

Most modern hosts (Cloudflare Pages, Vercel, Netlify, etc.) issue and renew certificates automatically. If yours has expired anyway, check that the domain is still correctly attached to the project in your dashboard — a detached or newly re-pointed domain is the usual cause.

If you manage certificates yourself

Reissue and reinstall the certificate through your certificate authority or provider (many use free automated issuance like Let's Encrypt, which needs to be renewed roughly every 90 days unless auto-renewal is configured). Confirm the new certificate includes every hostname you serve, including both the bare domain and the www subdomain if you use both.

Either way

Set a calendar reminder or, better, enable auto-renewal so this doesn't recur. Certificate expiry is one of the most common self-inflicted outages because it's invisible until the exact day it isn't.