Error guide / ERR_SSL_VERSION_OR_CIPHER_MISMATCH

ERR_SSL_VERSION_OR_CIPHER_MISMATCH error

ERR_SSL_VERSION_OR_CIPHER_MISMATCH means the browser and the server could not find common ground for a secure connection: they share no TLS protocol version and no cipher suite. The handshake breaks before the page loads, so the site does not open at all. This is not about the certificate itself, but about how HTTPS is configured on the server.

Check your site

>

What causes it

The server is almost always at fault. Most often it still offers only outdated TLS 1.0/1.1, which modern browsers have disabled, or old weak ciphers like RC4 or 3DES that browsers have dropped. Less often the server runs very old software, or the certificate uses an outdated key type. On the visitor side this only happens with a very old browser or an antivirus or proxy that intercepts the connection.

How to fix it

  1. Run the SSL test below: it shows which TLS versions and cipher suites the server actually offers and where they fail to match the browser.
  2. Enable modern protocols TLS 1.2 and TLS 1.3 on the server and fully disable legacy TLS 1.0/1.1.
  3. Refresh the cipher list: remove weak RC4, 3DES, and DES, and keep modern suites with AES-GCM and ECDHE.
  4. On cPanel/LiteSpeed, confirm the domain has a valid certificate and reissue AutoSSL if needed, and in the LiteSpeed settings make sure TLS 1.2/1.3 is turned on.
  5. If the site runs on your own server or a VPS, update the web server and the OpenSSL library to a supported version, since old software does not know the newer ciphers.
  6. Open the site in a private window and temporarily disable antivirus, VPN, or a proxy to rule out a problem on the visitor's side.

Related errors