Get a Pentest and security assessment of your IT network.

Cyber Security

Fix HTTPS Authentication Errors

TL;DR

Your browser isn’t fully trusting the website’s security certificate. This guide helps you check your date/time, clear browser cache, update your root certificates, and temporarily bypass (with caution) if needed.

1. Check Your Computer’s Date and Time

HTTPS relies on accurate dates and times. If your computer’s clock is wrong, the security certificate might appear invalid.

  1. Windows: Right-click the time in the taskbar, select ‘Adjust date/time’, and make sure ‘Set time automatically’ is turned on.
  2. macOS: Go to System Preferences > Date & Time, unlock the padlock, and check ‘Set date and time automatically’.

2. Clear Your Browser Cache

Old cached files can sometimes cause authentication problems.

  1. Chrome: Press Ctrl+Shift+Delete (or Cmd+Shift+Delete on macOS). Select ‘Cached images and files’ and click ‘Clear data’.
  2. Firefox: Press Ctrl+Shift+Delete (or Cmd+Shift+Delete on macOS). Select ‘Cache’ and click ‘Clear Now’.
  3. Edge: Press Ctrl+Shift+Delete. Select ‘Cached images and files’ and click ‘Clear now’.

3. Update Your Root Certificates

Root certificates are like digital IDs that your browser uses to verify websites. Outdated root certificates can cause issues.

  1. Windows: Search for ‘certmgr.msc’ and open the Certificate Manager. Expand ‘Trusted Root Certification Authorities’. Look for expired or untrusted certificates (they might have a red X). You usually don’t manually update these; Windows Update handles it automatically, so ensure your system is up-to-date.
  2. macOS: macOS updates root certificates automatically as part of system updates. Ensure you’ve installed the latest macOS version.

4. Temporarily Bypass (Use with Caution)

Warning: Bypassing security checks is risky and should only be done for testing or on trusted networks. It makes your connection less secure.

  1. Chrome/Edge: Type chrome://flags/#allow-insecure-localhost in the address bar and press Enter. Enable ‘Allow invalid certificates for resources loaded from localhost’. Restart Chrome/Edge.
  2. Firefox: Open about:config in the address bar (accept the risk warning). Search for security.tls.insecure_fallback_hosts. Double-click it and add the website’s domain to the list, separated by commas (e.g., example.com,subdomain.example.com). Restart Firefox.

Important: Remove these bypasses as soon as possible after testing!

5. Check Antivirus/Firewall Software

Some antivirus or firewall programs can interfere with HTTPS connections.

  1. Temporarily disable your antivirus software and see if the problem resolves. If it does, check its settings to ensure it’s not blocking HTTPS traffic.

6. Browser Extension Interference

Certain browser extensions can sometimes cause issues with certificate validation.

  1. Disable all your browser extensions and try accessing the website again. If it works, re-enable extensions one by one to identify the problematic extension.
Related posts
Cyber Security

Zip Codes & PII: Are They Personal Data?

Cyber Security

Zero-Day Vulnerabilities: User Defence Guide

Cyber Security

Zero Knowledge Voting with Trusted Server

Cyber Security

ZeroNet: 51% Attack Risks & Mitigation