How to Fix ERR_CERT_AUTHORITY_INVALID (Google Chrome)

Quick Answer: The ERR_CERT_AUTHORITY_INVALID error indicates that Chrome cannot verify the legitimacy of a website's SSL certificate. This often happens because the certificate is self-signed, expired, or issued by an untrusted Certificate Authority. The fastest fix for a temporary issue is to check your system's date and time settings.

What Causes This Error

• Incorrect system date and time
• Self-signed or privately issued SSL certificate
• Expired or revoked SSL certificate
• Untrusted Certificate Authority (CA)
• Antivirus or firewall interfering with SSL inspection
• Corrupted Chrome profile or browser extensions
• Network-level SSL interception (e.g., corporate proxy)

Step-by-Step Fixes

Fix 1: Fix 1: Correct System Date and Time

**Windows:** Right-click the clock on the taskbar > 'Adjust date/time'. Toggle 'Set time automatically' and 'Set time zone automatically' to On. If already On, toggle them Off then On again. Optionally, click 'Sync now' under 'Synchronize your clock'.,**macOS:** Go to 'System Settings' > 'General' > 'Date & Time'. Ensure 'Set date and time automatically' and 'Set time zone automatically' are enabled. Select a network time server if prompted.,**Linux (Ubuntu/Debian):** Open 'Settings' > 'Date & Time'. Ensure 'Automatic Date & Time' and 'Automatic Time Zone' are enabled. You can also use the command line: `sudo timedatectl set-ntp true`.

Fix 2: Fix 2: Clear Browser Data and Disable Extensions

Open Chrome, type `chrome://settings/clearBrowserData` in the address bar, and press Enter.,Select 'Advanced' tab. Set 'Time range' to 'All time'. Check 'Cookies and other site data' and 'Cached images and files'. Click 'Clear data'.,Type `chrome://extensions` in the address bar and press Enter.,Toggle off all extensions. Restart Chrome and try accessing the website. If the error is gone, re-enable extensions one by one to identify the culprit.

Fix 3: Fix 3: Temporarily Disable Antivirus/Firewall

Locate your antivirus software icon in the system tray (Windows) or menu bar (macOS).,Right-click the icon and look for an option to 'Disable' or 'Pause protection'. Choose a temporary duration (e.g., 10 minutes).,If using a third-party firewall, temporarily disable it via its settings.,Attempt to access the website. If the error is resolved, re-enable your security software and investigate its SSL inspection settings or add an exception for the website if possible.

Fix 4: Fix 4: Update Chrome and Operating System

**Update Chrome:** Type `chrome://settings/help` in the address bar and press Enter. Chrome will automatically check for and install updates.,**Update Windows:** Go to 'Settings' > 'Update & Security' > 'Windows Update'. Click 'Check for updates'.,**Update macOS:** Go to 'System Settings' > 'General' > 'Software Update'.,**Update Linux (Ubuntu/Debian):** Open a terminal and run `sudo apt update && sudo apt upgrade -y`.

Fix 5: Fix 5: Bypass for Self-Signed Certificates (Developer Use Only)

Access the URL causing the error. When the 'Your connection is not private' warning appears, click 'Advanced'.,Click 'Proceed to [website address] (unsafe)'. This will temporarily bypass the error for that session.,**For persistent trust (Windows/macOS/Linux):** Export the self-signed certificate from your server. Import it into your operating system's trusted root certificate store. The exact steps vary by OS. For example, on Windows, use `certmgr.msc` to import into 'Trusted Root Certification Authorities'.

Fix 6: Fix 6: Check for Network Proxy/VPN Issues

**Disable Proxy:** Go to `chrome://settings/system` > 'Open your computer's proxy settings'. Disable any manual proxy configurations. If using a system-wide proxy, disable it through your OS network settings.,**Disable VPN:** Disconnect from your VPN client.,Test website access. If the error is resolved, consult your network administrator about the proxy's SSL certificate or configure your system to trust the corporate root CA.

FAQs

Q: What does 'ERR_CERT_AUTHORITY_INVALID' mean?

A: It means Chrome cannot verify the authenticity of the website's security certificate. This typically happens because the certificate was issued by an unknown or untrusted entity, or it's otherwise invalid (e.g., expired, self-signed).

Q: Is it safe to proceed to a website with this error?

A: Generally, no. Proceeding bypasses security checks and makes your connection vulnerable to eavesdropping or tampering. Only proceed if you explicitly trust the website and understand the risks, such as when accessing a known internal development server.

Q: How do I know if the website itself is the problem?

A: If you encounter this error on multiple devices or browsers when trying to access the *same* website, it's highly likely the issue lies with the website's certificate configuration. The website owner needs to update or correctly configure their SSL certificate.

Related Errors