--- title: "Your Connection Is Not Private: Causes and How to Fix It" description: "“Your connection is not private” means the browser does not trust the site’s certificate. Learn the error codes, what to do as a visitor and how owners fix it." url: https://uptrack.app/errors/your-connection-is-not-private --- NET::ERR\_CERT\_AUTHORITY\_INVALID

# Your connection is not private: causes and how to fix it

“Your connection is not private” is the warning Chrome shows when it cannot trust the certificate of a site. The certificate may be expired, issued for another name, signed by an authority the browser does not know, or replaced by something on your network. You may also see - “Warning: Potential Security Risk Ahead” (Firefox) - “This Connection Is Not Private” (Safari) - NET::ERR\_CERT\_DATE\_INVALID, NET::ERR\_CERT\_COMMON\_NAME\_INVALID (Chrome codes) ## Common causes 1. 1 The certificate has expired (NET::ERR\_CERT\_DATE\_INVALID), or the clock of your device is wrong. 2. 2 The certificate was issued for another host name (NET::ERR\_CERT\_COMMON\_NAME\_INVALID). For example, it covers example.com but not www.example.com. 3. 3 The certificate is self-signed, or its authority is not trusted (NET::ERR\_CERT\_AUTHORITY\_INVALID). A server that does not send its intermediate certificate gives the same warning. 4. 4 The certificate was revoked (NET::ERR\_CERT\_REVOKED). 5. 5 A public Wi-Fi login page, a company proxy or a security program replaces the certificate of the site. ## If you are visiting the site: how to fix it 1. 1 Check the date and time of your device. A wrong date makes valid certificates look expired. 2. 2 Reload, and try another network. A public Wi-Fi network may need a login page first. 3. 3 Update your operating system and browser, because they carry the list of trusted authorities. 4. 4 Turn off the HTTPS scanning of your security program to test. 5. 5 Do not choose “Proceed” on a site where you enter a password or pay. If you must, you cannot know who answers. ## If you run the site: what to check 1. 1 Renew an expired certificate, and set up automatic renewal. Most authorities now issue certificates for a short period, so a missed renewal comes quickly. 2. 2 Check that the certificate lists every host name you serve, including www. 3. 3 Send the full chain: the certificate and its intermediate certificates. A server that sends only its own certificate fails on some devices. 4. 4 Replace a self-signed certificate with one from a public authority, such as Let’s Encrypt. 5. 5 Check the result with an SSL checker, and monitor the expiry date. ## Check it with free tools - [SSL checkerSee the expiry date, the names covered and the chain.](https://uptrack.app/tools/ssl-checker) - [SSL monitoring guideGet a warning before a certificate expires.](https://uptrack.app/guides/ssl-monitoring) ## Frequently asked questions What does “Your connection is not private” mean? The browser could not trust the certificate of the site, so it cannot be sure that your connection is secure and that you reach the right site. It shows a warning before it opens the page. Is it safe to click Proceed on “Your connection is not private”? Only if you know why the warning appears and the site holds nothing private, for example a test server of your own. Do not proceed on a site where you log in or pay, because you cannot tell who answers. How do I fix “Your connection is not private” as a visitor? Set the right date and time, try another network, update the browser and the system, and turn off the HTTPS scanning of a security program. If it fails everywhere, the site’s certificate is wrong and only the owner can fix it. How do I fix NET::ERR\_CERT\_AUTHORITY\_INVALID on my site? Install the full certificate chain, with the intermediate certificates, or replace a self-signed certificate with one from a public authority. Then check the site with an SSL checker. Why does the warning appear on only one device? The clock of that device may be wrong, its system may be out of date, or its network or security program may replace the certificate. Try the same site on another device and network. ## Know about it before your visitors do Uptrack checks the certificate on a schedule and alerts you before it expires, so an expired certificate never becomes a warning page for your visitors. [See plans](https://uptrack.app/pricing) from $3/mo · 30-day money-back guarantee ## Other browser and DNS errors - [DNS\_PROBE\_FINISHED\_NXDOMAIN](https://uptrack.app/errors/dns-probe-finished-nxdomain) - [ERR\_NAME\_NOT\_RESOLVED](https://uptrack.app/errors/err-name-not-resolved) - [DNS server not responding](https://uptrack.app/errors/dns-server-not-responding) - [ERR\_CONNECTION\_REFUSED](https://uptrack.app/errors/err-connection-refused) - [ERR\_CONNECTION\_RESET](https://uptrack.app/errors/err-connection-reset) - [ERR\_CONNECTION\_CLOSED](https://uptrack.app/errors/err-connection-closed) - [ERR\_SSL\_PROTOCOL\_ERROR](https://uptrack.app/errors/err-ssl-protocol-error)