Fix Google Chrome ERR_CERT_INVALID Error

To fix the Google Chrome ERR_CERT_INVALID error, first check your system date and time, then clear your browser cache and SSL state, and if the problem persists, try disabling your antivirus or VPN temporarily. This error means Chrome cannot verify the security certificate of the website you are trying to visit, which can happen for several reasons ranging from a simple clock misconfiguration to a genuinely unsafe site.

What Causes ERR_CERT_INVALID?

Chrome displays this error when the SSL/TLS certificate presented by a website is invalid, expired, self-signed, or does not match the domain name you requested. The browser blocks the connection to protect you from potential man-in-the-middle attacks or data interception. Common triggers include:

Incorrect system date/time – if your clock is off by even a few minutes, certificate validation fails.
Expired or misconfigured certificate – the website owner has not renewed or properly installed their certificate.
Self-signed certificates – often used in testing or internal networks, but not trusted by Chrome by default.
Antivirus or firewall interference – security software may intercept HTTPS traffic with its own certificate, which Chrome does not trust.
VPN or proxy issues – these can route your traffic through a server that presents a different certificate.
Corrupted browser cache or SSL state – leftover data can cause false validation failures.

How to Fix ERR_CERT_INVALID – Step-by-Step

Follow these steps in order. Most users resolve the issue within the first few steps.

Check your system date and time. Right-click the clock in your taskbar, select “Adjust date/time,” and ensure “Set time automatically” and “Set time zone automatically” are turned on. If they are already on, toggle them off and on again, then restart Chrome.
Clear Chrome’s cache and cookies. Go to Chrome Settings > Privacy and security > Clear browsing data. Select “All time” and check “Cached images and files” and “Cookies and other site data.” Click “Clear data.”
Clear the SSL state (Windows). Open “Internet Options” from the Control Panel, go to the “Content” tab, and click “Clear SSL state.” This clears the certificate cache used by Windows.
Disable your antivirus or VPN temporarily. Some security suites perform HTTPS scanning. Turn off this feature or the entire software briefly, then try the site again. If it works, add an exception for the website.
Try Incognito mode. If the error disappears in Incognito, the issue is likely caused by an extension or cached data. Disable extensions one by one to find the culprit.
Check if the site is legitimate. If you are on a public or corporate network, an admin may be using a custom certificate. For personal use, avoid the site if you cannot verify its authenticity.

What to Do If the Error Persists

If none of the above fixes work, the problem may be on the website’s side. Try accessing the same site from another browser or device. If it works elsewhere, the issue is local. If it fails everywhere, the site’s certificate is genuinely invalid – do not bypass the warning. For sites you trust (like your own router’s admin page), you can click “Advanced” and then “Proceed to [site] (unsafe)” to continue, but only if you are certain the site is safe.

For Windows users, you can also try resetting Chrome’s settings to default: Settings > Advanced > Reset and clean up > Restore settings to their original defaults. This removes problematic extensions and settings without deleting bookmarks or passwords.

How to Prevent ERR_CERT_INVALID in the Future

Keep your operating system and Chrome updated – updates often include certificate trust store changes.
Regularly check your system clock, especially after changing time zones or during daylight saving transitions.
If you use a corporate or school network, ask the IT department to install their root certificate on your device.
For self-hosted sites, use a free certificate from Let’s Encrypt instead of a self-signed one.

Common Misconceptions About ERR_CERT_INVALID

Many users think this error always means the website is malicious. That is not true – it often appears on legitimate sites due to misconfigured servers or local issues. Conversely, some users assume clicking “Proceed” is always safe, which is dangerous if the error appears on a banking or shopping site. The warning exists to protect you; only bypass it when you have confirmed the site’s identity through another channel.

Frequently Asked Questions

Why does ERR_CERT_INVALID appear on every website?

If the error appears on all sites, the cause is almost certainly your system clock, an antivirus HTTPS scanner, or a VPN. Check the date/time first, then temporarily disable security software and VPN.

Can I ignore ERR_CERT_INVALID and continue?

Technically yes, by clicking “Advanced” and then “Proceed,” but only do this if you are absolutely sure the site is safe (e.g., your own router). On any site that handles personal data, close the page.

Does clearing the SSL state delete my passwords?

No. Clearing the SSL state only removes cached certificates. Your saved passwords and bookmarks remain untouched.

Is ERR_CERT_INVALID the same as ERR_CERT_DATE_INVALID?

No. ERR_CERT_DATE_INVALID specifically means the certificate’s validity period is wrong, often due to a system clock issue. ERR_CERT_INVALID is a broader error covering any certificate validation failure.

Will this error affect my other browsers?

It can, if the cause is system-wide (clock, antivirus). If it only happens in Chrome, the issue is likely browser-specific – try Firefox or Edge to confirm.

Should I reinstall Chrome to fix this?

Reinstalling is rarely necessary. The steps above resolve the vast majority of cases. If you still see the error after trying everything, consider a different browser or contact the website owner.

General steps for current mainstream versions; menus can differ by device and version. See the disclaimer or report an error.

More in this bed

The whole Tech How-To bed →