Chrome’s “Your connection is not private” warning means it cannot validate the secure connection as expected. The cause may be the website’s certificate, your device’s clock or software, or the network between you and the site; the warning alone does not prove the site has been hacked. Start with the exact error code, then check whether the problem follows the site, your device, or a managed network. This is a quick triage, not a guaranteed two-minute fix.
What to do first when Chrome shows the warning
- Read the exact error code. On the warning page, note the code shown beneath the message. Codes such as
NET::ERR_CERT_DATE_INVALID,NET::ERR_CERT_AUTHORITY_INVALID, andERR_SSL_VERSION_OR_CIPHER_MISMATCHpoint toward different causes. - Check the device date and time. If Chrome says the clock is ahead or behind, or shows
NET::ERR_CERT_DATE_INVALID, correct the date, time, and time zone in your device settings, then reload the site. - Consider the network you are using. If you are on guest Wi-Fi that requires sign-in, open an
http://page and complete the network’s sign-in portal before trying the client site again. - Test the same page in Incognito. If it loads there, an extension may be interfering. Disable extensions one at a time in the regular Chrome window and retry to identify the problem.
- Check whether the issue is limited to this site. If the warning persists after those checks and affects only the client site, send the site owner the exact URL, time of failure, browser, and error code.
Google’s Chrome troubleshooting guide covers these certificate and privacy errors. The checks below explain how to interpret the results and when to stop troubleshooting locally.
As an Amazon Associate I earn from qualifying purchases.
Match the error or symptom to the likely cause
| Code or symptom | Likely direction | Next step |
|---|---|---|
NET::ERR_CERT_DATE_INVALID or a visibly incorrect clock |
The device date or time may be wrong. | Correct the date, time, or time zone, then retry. |
| Warning appears before guest Wi-Fi sign-in | The network may require a sign-in portal before normal browsing. | Open an HTTP page, complete sign-in, then reload the client site. |
| Page works in Incognito but not in a regular window | A browser extension may be interfering. | Disable extensions individually and retest. |
NET::ERR_CERT_AUTHORITY_INVALID on a work device or managed network |
A proxy that inspects HTTPS may require a certificate that is missing from the device. | Contact your IT administrator. Do not install a certificate yourself. |
ERR_CERT_COMMON_NAME_INVALID, NET::ERR_CERT_WEAK_SIGNATURE_ALGORITHM, or ERR_CERTIFICATE_TRANSPARENCY_REQUIRED |
The certificate or its configuration may not satisfy Chrome’s checks. | Share the exact code with the site owner; the owner may need to correct the certificate or server configuration. |
ERR_SSL_VERSION_OR_CIPHER_MISMATCH |
The site’s TLS protocol or cipher configuration may be incompatible with Chrome. | Ask the site owner to investigate the server’s TLS configuration. Do not weaken browser security settings. |
When the problem is on your device
Correct the clock before changing security settings
A device with an incorrect date or time can fail to validate certificate dates. Set the correct date, time, and time zone using your operating system’s settings, then retry the page. If the clock keeps reverting, resolve that device issue rather than bypassing the warning.
Recommended Free Tools
Use Incognito to check extensions
On a computer, open the client page in a Chrome Incognito window. If it works there, return to a regular window and disable extensions one by one, retrying after each change. When the warning returns, the last extension disabled is a useful lead. Keep only extensions you trust and need.
#1 Best Overall
- Multifunctional Network Cable Tester: TESMEN TLP-123A Supports RJ45 and RJ11, enabling rapid detection of line connectivity, short circuits, open circuits, miswiring, and cable shielding status. An essential tool for troubleshooting line faults and network maintenance, it effectively boosts your work efficiency
- Convenient and Efficient: Featuring one-button operation and a test speed adjustment gear on the main control unit for enhanced flexibility. Clear LED indicators provide intuitive test result displays, making it easy for both professionals and home users to operate
- Portable and Durable: Compact and lightweight design for easy portability. Constructed with high-quality plastic housing for robust structure, ensuring both durability and stability. Ideal for home wiring, IT equipment setup, electrical maintenance, and LAN DIY projects
- Detachable design: The main control unit and remote unit can be separated and used independently, allowing you to test both ends of long cables. This makes it ideal for wall-mounted ports, long-distance cabling, or structured cabling systems, perfect for homes, offices, or professional IT environments
- What you will get: 1 * TLP-123A Network Cable Tester, 1 * user manual, 2 * AAA batteries
Update the operating system
Chrome includes an up-to-date operating system among its troubleshooting steps for certificate errors. Install available operating-system updates and retry. This is a device-maintenance check; it will not repair an incorrectly configured certificate on the website.
Treat HTTPS scanning as a temporary diagnostic
Some antivirus products inspect encrypted traffic using a feature labeled “HTTPS protection” or “HTTPS scanning.” Chrome identifies this as a possible cause. If you test whether that feature is involved, make the change only briefly, retry the site, and turn the protection back on afterward. Do not leave security protection disabled as a workaround.
Rank #2
- Automatically runs all tests and checks for continuity, open, shorted and crossed wire pairs. Visible LED status display.
- Cable state testing (2-wire): Line DC detecting, anode and cathode determination,Ringing signal detecting open, short and cross circuit testing
- Cable Type: RJ11 Telephone cable and RJ45 LAN cable
- Connectors: Ethernet Cat 5, Ethernet Cat 5e, Ethernet Cat 6, Ethernet Cat 7, RJ11 6P and RJ45 8P
- Power Source: DC9V Battery Required (not included)
When the network or website must be fixed
Guest Wi-Fi: finish the sign-in first
On a cafe, airport, hotel, or other network that requires acceptance of terms or account sign-in, open an http:// page to prompt the portal. Complete the network sign-in, then return to the client site. If the portal does not appear, ask the network provider for help rather than bypassing Chrome’s warning.
Do these 3 things before closing this tab:
1Clear out junk files and repair common Windows errors2Scan for outdated or missing drivers - takes under a minute3Repair Windows errors before they cause bigger problemsManaged work network: contact IT
On a work device using an HTTPS-inspecting proxy, NET::ERR_CERT_AUTHORITY_INVALID can indicate that the proxy’s required certificate is not installed. Ask your administrator to check the managed configuration. Google warns: “It isn’t recommended that you install a certificate on your own, as it’s usually a security risk.” Do not install a certificate from an email, website, or other unverified source.
Rank #3
- Cable tester with single button testing of RJ11, RJ12 and RJ45 terminated voice and data cables
- Tests CAT3, CAT5e and CAT6/6A cables
- Fast LED responses indicate cable status (Pass, Miswire, Open-Fault, Short-Fault, and Shield)
- Test remote stores securely in tester body
- Compact tester easily fits in your pocket
Client site: send the owner actionable details
If the warning remains on one client site after basic device and network checks, the certificate may be expired or misconfigured, or the server may use security settings Chrome rejects. The site owner or administrator—not a visitor—must correct those server-side issues. Send them:
- The full URL you tried to open.
- The exact error code shown by Chrome.
- The date and time the warning appeared, including your time zone if relevant.
- Your browser and whether you were on a work, public, or home network.
TLS or cipher mismatch: do not lower browser protections
For ERR_SSL_VERSION_OR_CIPHER_MISMATCH, Chrome’s server guidance calls for TLS 1.3 and TLS_AES_128_GCM_SHA256 for the cited mismatch, while retaining TLS 1.2 and other ciphers for older clients. That is server-side guidance for the site owner, not a setting a visitor should change in Chrome.
Rank #4
- Anti-interference network cable tester: TESMEN TLP-900A/R can cable tracking, line positioning, suitable for CAT5/CAT6/POE/shielded cables and telephone lines, non-metallic durable sensitive probe, can help you quickly find the required cables in cable bundles, under carpets, decorative walls, and ceilings. It is a good helper for engineering wiring, daily network and equipment maintenance
- Find line faults:Test line sequence and continuity, and use the LED line sequence indicator to visually check whether the network cable is connected incorrectly, short-circuited, or open-circuited; QC RJ45 crystal head crimping inspection provides thorough cable quality inspection,and quickly feedback on the LED light, which can effectively improve your work efficiency
- Multifunctional design: The receiver with NCV function can identify live wires and sockets, avoiding the danger of strong electricity during construction, making your working environment safer; Detect the polarity of the telephone line, identify the different states of standby, off-hook, and ringing, one machine for multiple uses, easy to carry, to meet your different testing needs
- Friendly Design: Equipped with alligator clips can easily connect unterminated wires; The power indicator flashes when the battery is too low for normal use; Automatically shut down after more than 30 minutes of no operation, saving power and being green and environmentally friendly; The probe tip is equipped with a working light so that you can operate in dim environments
- What you will get: 1 transmitter with dual RJ11 RJ45 interface, 1 receiver with RJ45 interface, 1 RJ11 alligator clip adapter cable, 1 RJ45 cable, 1 RJ11 cable, 1 storage box, 1 user manual, 2 * 9V 6F22 batteries
What not to do
- Do not bypass the warning to enter passwords, payment details, or other sensitive information.
- Do not permanently disable antivirus HTTPS protection or browser security features to make one site load.
- Do not install a proxy or website certificate on your own, especially from an unverified source.
- Do not assume the warning alone means the site has been compromised; identify whether the problem follows the device, network, or site.
These steps describe Chrome’s guidance. Other browsers may use different warning text and troubleshooting paths, so do not assume the same menu instructions apply in Firefox, Safari, or Edge.
Quick Recap
Best Value
- Multi-Function Network Cable Tester: Supports RJ45 (CAT5, CAT5e, CAT6, CAT6A, CAT7) and RJ11 telephone cables. Quickly detects continuity, short circuits, open wires, miswiring, and cable shielding status, ensuring your LAN or phone lines are correctly wired and ready to use.
- Fast/Slow Mode with LED Indicators: Switch between fast and slow scan speeds to identify wiring issues more precisely. LED lights on both master and remote units show wire order, making it easy to spot errors like open pairs or misaligned pins at a glance.
- Split-Type Design for Long-Distance Testing: Master and remote units can be detached and used separately, allowing you to test both ends of a long cable run, ideal for wall-mounted ports, long runs, or structured cabling. Perfect for home, office, or professional IT setups.
- Compact, Lightweight & Durable: Ergonomically designed with sturdy ABS housing, this pocket-sized tester is ideal for on-the-go network engineers, DIYers, and electricians. It’s your go-to toolkit for cable maintenance, upgrades, or new installations.
- Safe & Easy to Use: Simple one-button operation makes testing quick and hassle-free. LED indicators clearly show wiring status, while the G light instantly identifies shielded (FTP/STP) or unshielded (UTP) cables. Supports safe testing of telephone lines with typical voltages under 48-72V, ideal for both home and professional use.
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
