Skip to content
OrbixPanel OrbixPanel Tutorials

Fix common SSL / HTTPS errors

Your site has a certificate but the browser still complains. Each warning points at a specific cause — here’s how to read and fix them. (If SSL won’t issue at all, start with SSL won’t issue.)

“Not secure” / mixed content

The page loads over HTTPS but pulls some resources (images, scripts, CSS) over http://. The browser flags the whole page.

Fix: make every asset load over https:// (or protocol-relative). For WordPress, update the site URL and run a search-replace of http://yourdomain → https://yourdomain — see move a WordPress site.

NET::ERR_CERT_DATE_INVALID (expired)

The certificate lapsed.

  • Let’s Encrypt certs auto-renew — if one expired, renewal has been failing. Usually the domain stopped pointing at the server, or port 80 got blocked. Fix that, then re-request. → How free SSL works
  • Custom/uploaded certs don’t auto-renew — upload the renewed cert → custom certificate.

NET::ERR_CERT_COMMON_NAME_INVALID (name mismatch)

The certificate doesn’t cover the name you visited — e.g. a cert for yourdomain.com served on www.yourdomain.com, or a subdomain with no cert.

Fix: issue/request a certificate that includes the exact hostname (both www and non-www, or the subdomain), or use a wildcard.

“Your connection is not private” right after install

Often just the browser caching the old state. Hard-refresh, try an incognito window, and give it a minute. If it persists, the cert didn’t actually install — check the panel.

Chain / intermediate errors (works in browser, fails in apps/APIs)

Usually a missing intermediate certificate. Make sure you installed the full-chain (your cert + intermediates), not just the leaf — see custom certificate.

Verify from the command line

Terminal window
echo | openssl s_client -connect yourdomain.com:443 -servername yourdomain.com 2>/dev/null | openssl x509 -noout -subject -issuer -dates

Checks the served certificate’s names, issuer, and validity dates.

Running OrbixPanel? Automatic Let’s Encrypt renewal avoids most expiry errors entirely. OrbixPanel.com → — the free, self-hosted, AI-powered hosting control panel.