Guides / Fix NET::ERR_CERT_AUTHORITY_INVALID.
Guide
Fix NET::ERR_CERT_AUTHORITY_INVALID.
Chrome is telling you the issuer is not in the trust store. That is expected for a self-signed cert. Do not turn off HTTPS. Trust the right CA.
What the error actually means
The handshake succeeded. The name may even match. Chrome still rejects the issuer because it is not a public CA. That is the correct default on the public internet and a nuisance on a homelab.
The wrong fix
Do not enable Chrome flags that ignore certificate errors. That trains you to click through real attacks. Do not email the private key to a “fix my SSL” form.
The right fix
Generate a Root CA, then a host certificate for the name you use. Trust the CA once:
Written for operators who have to trust the box they just stood up. Private keys stay in the tab. Open the generator.