Error guide / ERR_CERT_COMMON_NAME_INVALID

ERR_CERT_COMMON_NAME_INVALID error

ERR_CERT_COMMON_NAME_INVALID means the SSL certificate is valid, but it was issued for a different domain name than the one the visitor is opening. For example, the certificate is for example.com, but the site is opened at www.example.com or sub.example.com. The browser sees the name mismatch and blocks the connection as unsafe.

What causes it

The certificate configured on the site is at fault: it does not list the domain or subdomain being used in its names (SAN). This often happens when a certificate was issued only for the bare domain without www, or the other way round.

How to fix it

1. Use the SSL test below to see which names the certificate covers and whether your domain is among them.
2. Reissue the certificate so it covers every needed variant: both example.com and www.example.com.
3. For many subdomains a wildcard certificate like *.example.com is convenient; AutoSSL on cPanel/LiteSpeed can issue it.
4. Make sure each domain on the account actually points to this server, or AutoSSL cannot validate and add it.
5. Pick one canonical address (with or without www) and add a 301 redirect to it to avoid future mismatches.

Related errors

• ERR_CERT_DATE_INVALID ERR_CERT_DATE_INVALID error
• ERR_CERT_AUTHORITY_INVALID ERR_CERT_AUTHORITY_INVALID error
• ERR_SSL_PROTOCOL_ERROR ERR_SSL_PROTOCOL_ERROR error
• NET::ERR_CERT_REVOKED NET::ERR_CERT_REVOKED error