Home › Guides › SSL certificate expired? How to fix "Your connection is not private"

SSL certificate expired? How to fix "Your connection is not private"

What an expired SSL certificate error means for visitors and site owners, and how to fix NET::ERR_CERT_DATE_INVALID fast.

If you are a visitor

First check your device clock – a wrong date causes NET::ERR_CERT_DATE_INVALID. If the clock is right, the site's certificate really has expired; avoid entering passwords or card details until it is fixed.

If you own the site

  1. Confirm with our SSL expiration checker.
  2. Renew the certificate with your CA or ACME client.
  3. Install the new certificate and the intermediate chain, then restart or reload the web server.
  4. Re-check – the days-left number should reset.

Then fix the root cause: why did auto-renewal fail? Common reasons are DNS changes, a blocked port 80 for HTTP-01 validation, or an expired API token.