SSL response notes

SSL certificate expired connection failure

A practical cause and fix order for CERT_EXPIRED errors while operating TLS.

Browser Mixed Content fix note

An operator checklist for narrowing down Mixed Content errors in Browser and preventing recurrence.

highBrowser4 min read

Browser COMMON_NAME_INVALID fix note

An operator checklist for narrowing down COMMON_NAME_INVALID errors in Browser and preventing recurrence.

highBrowser4 min read

Browser Mixed Content fix note 2

An operator checklist for narrowing down Mixed Content errors in Browser and preventing recurrence.

lowBrowser5 min read

Browser COMMON_NAME_INVALID fix note 2

An operator checklist for narrowing down COMMON_NAME_INVALID errors in Browser and preventing recurrence.

lowBrowser5 min read

Browser Mixed Content fix note 3

An operator checklist for narrowing down Mixed Content errors in Browser and preventing recurrence.

mediumBrowser6 min read

Browser COMMON_NAME_INVALID fix note 3

An operator checklist for narrowing down COMMON_NAME_INVALID errors in Browser and preventing recurrence.

mediumBrowser6 min read

Browser Mixed Content fix note 4

An operator checklist for narrowing down Mixed Content errors in Browser and preventing recurrence.

lowBrowser4 min read

Browser COMMON_NAME_INVALID fix note 4

An operator checklist for narrowing down COMMON_NAME_INVALID errors in Browser and preventing recurrence.

lowBrowser4 min read

Browser Mixed Content fix note 5

An operator checklist for narrowing down Mixed Content errors in Browser and preventing recurrence.

mediumBrowser5 min read

Browser COMMON_NAME_INVALID fix note 5

An operator checklist for narrowing down COMMON_NAME_INVALID errors in Browser and preventing recurrence.

mediumBrowser5 min read

Browser Mixed Content fix note 6

An operator checklist for narrowing down Mixed Content errors in Browser and preventing recurrence.

highBrowser6 min read

Browser COMMON_NAME_INVALID fix note 6

An operator checklist for narrowing down COMMON_NAME_INVALID errors in Browser and preventing recurrence.

highBrowser6 min read

TLS CERT_EXPIRED first triage response

A TLS first triage note for CERT_EXPIRED: TLS or certificate failure caused by hostname mismatch, expired chain, protocol policy, SNI, or mixed content. It includes evidence, output examples, branches, and the smallest reliable fix.

TLS COMMON_NAME_INVALID first triage response

A TLS first triage note for COMMON_NAME_INVALID: TLS or certificate failure caused by hostname mismatch, expired chain, protocol policy, SNI, or mixed content. It includes evidence, output examples, branches, and the smallest reliable fix.

TLS ERR_SSL_PROTOCOL_ERROR first triage response

A TLS first triage note for ERR_SSL_PROTOCOL_ERROR: TLS or certificate failure caused by hostname mismatch, expired chain, protocol policy, SNI, or mixed content. It includes evidence, output examples, branches, and the smallest reliable fix.

TLS OCSP first triage response

A TLS first triage note for OCSP: TLS or certificate failure caused by hostname mismatch, expired chain, protocol policy, SNI, or mixed content. It includes evidence, output examples, branches, and the smallest reliable fix.

TLS SNI first triage response

A TLS first triage note for SNI: TLS or certificate failure caused by hostname mismatch, expired chain, protocol policy, SNI, or mixed content. It includes evidence, output examples, branches, and the smallest reliable fix.

TLS TLS1.2 first triage response

A TLS first triage note for TLS1.2: TLS or certificate failure caused by hostname mismatch, expired chain, protocol policy, SNI, or mixed content. It includes evidence, output examples, branches, and the smallest reliable fix.

TLS cipher first triage response

A TLS first triage note for cipher: TLS or certificate failure caused by hostname mismatch, expired chain, protocol policy, SNI, or mixed content. It includes evidence, output examples, branches, and the smallest reliable fix.

TLS chain first triage response

A TLS first triage note for chain: TLS or certificate failure caused by hostname mismatch, expired chain, protocol policy, SNI, or mixed content. It includes evidence, output examples, branches, and the smallest reliable fix.

TLS HSTS first triage response

A TLS first triage note for HSTS: TLS or certificate failure caused by hostname mismatch, expired chain, protocol policy, SNI, or mixed content. It includes evidence, output examples, branches, and the smallest reliable fix.

TLS mixed content first triage response

A TLS first triage note for mixed content: TLS or certificate failure caused by hostname mismatch, expired chain, protocol policy, SNI, or mixed content. It includes evidence, output examples, branches, and the smallest reliable fix.

TLS CERT_EXPIRED post-release regression response

A TLS post-release regression note for CERT_EXPIRED: TLS or certificate failure caused by hostname mismatch, expired chain, protocol policy, SNI, or mixed content. It includes evidence, output examples, branches, and the smallest reliable fix.

TLS COMMON_NAME_INVALID post-release regression response

A TLS post-release regression note for COMMON_NAME_INVALID: TLS or certificate failure caused by hostname mismatch, expired chain, protocol policy, SNI, or mixed content. It includes evidence, output examples, branches, and the smallest reliable fix.

TLS ERR_SSL_PROTOCOL_ERROR post-release regression response

A TLS post-release regression note for ERR_SSL_PROTOCOL_ERROR: TLS or certificate failure caused by hostname mismatch, expired chain, protocol policy, SNI, or mixed content. It includes evidence, output examples, branches, and the smallest reliable fix.

TLS OCSP post-release regression response

A TLS post-release regression note for OCSP: TLS or certificate failure caused by hostname mismatch, expired chain, protocol policy, SNI, or mixed content. It includes evidence, output examples, branches, and the smallest reliable fix.

TLS SNI post-release regression response

A TLS post-release regression note for SNI: TLS or certificate failure caused by hostname mismatch, expired chain, protocol policy, SNI, or mixed content. It includes evidence, output examples, branches, and the smallest reliable fix.

TLS TLS1.2 post-release regression response

A TLS post-release regression note for TLS1.2: TLS or certificate failure caused by hostname mismatch, expired chain, protocol policy, SNI, or mixed content. It includes evidence, output examples, branches, and the smallest reliable fix.

TLS cipher post-release regression response

A TLS post-release regression note for cipher: TLS or certificate failure caused by hostname mismatch, expired chain, protocol policy, SNI, or mixed content. It includes evidence, output examples, branches, and the smallest reliable fix.

TLS chain post-release regression response

A TLS post-release regression note for chain: TLS or certificate failure caused by hostname mismatch, expired chain, protocol policy, SNI, or mixed content. It includes evidence, output examples, branches, and the smallest reliable fix.

TLS HSTS post-release regression response

A TLS post-release regression note for HSTS: TLS or certificate failure caused by hostname mismatch, expired chain, protocol policy, SNI, or mixed content. It includes evidence, output examples, branches, and the smallest reliable fix.

TLS mixed content post-release regression response

A TLS post-release regression note for mixed content: TLS or certificate failure caused by hostname mismatch, expired chain, protocol policy, SNI, or mixed content. It includes evidence, output examples, branches, and the smallest reliable fix.

TLS CERT_EXPIRED affected user or permission response

A TLS affected user or permission note for CERT_EXPIRED: TLS or certificate failure caused by hostname mismatch, expired chain, protocol policy, SNI, or mixed content. It includes evidence, output examples, branches, and the smallest reliable fix.

TLS COMMON_NAME_INVALID affected user or permission response

A TLS affected user or permission note for COMMON_NAME_INVALID: TLS or certificate failure caused by hostname mismatch, expired chain, protocol policy, SNI, or mixed content. It includes evidence, output examples, branches, and the smallest reliable fix.

TLS ERR_SSL_PROTOCOL_ERROR affected user or permission response

A TLS affected user or permission note for ERR_SSL_PROTOCOL_ERROR: TLS or certificate failure caused by hostname mismatch, expired chain, protocol policy, SNI, or mixed content. It includes evidence, output examples, branches, and the smallest reliable fix.

TLS OCSP affected user or permission response

A TLS affected user or permission note for OCSP: TLS or certificate failure caused by hostname mismatch, expired chain, protocol policy, SNI, or mixed content. It includes evidence, output examples, branches, and the smallest reliable fix.

TLS SNI affected user or permission response

A TLS affected user or permission note for SNI: TLS or certificate failure caused by hostname mismatch, expired chain, protocol policy, SNI, or mixed content. It includes evidence, output examples, branches, and the smallest reliable fix.

TLS TLS1.2 affected user or permission response

A TLS affected user or permission note for TLS1.2: TLS or certificate failure caused by hostname mismatch, expired chain, protocol policy, SNI, or mixed content. It includes evidence, output examples, branches, and the smallest reliable fix.

TLS cipher affected user or permission response

A TLS affected user or permission note for cipher: TLS or certificate failure caused by hostname mismatch, expired chain, protocol policy, SNI, or mixed content. It includes evidence, output examples, branches, and the smallest reliable fix.

TLS chain affected user or permission response

A TLS affected user or permission note for chain: TLS or certificate failure caused by hostname mismatch, expired chain, protocol policy, SNI, or mixed content. It includes evidence, output examples, branches, and the smallest reliable fix.

TLS HSTS affected user or permission response

A TLS affected user or permission note for HSTS: TLS or certificate failure caused by hostname mismatch, expired chain, protocol policy, SNI, or mixed content. It includes evidence, output examples, branches, and the smallest reliable fix.

TLS mixed content affected user or permission response

A TLS affected user or permission note for mixed content: TLS or certificate failure caused by hostname mismatch, expired chain, protocol policy, SNI, or mixed content. It includes evidence, output examples, branches, and the smallest reliable fix.

TLS CERT_EXPIRED specific path failure response

A TLS specific path failure note for CERT_EXPIRED: TLS or certificate failure caused by hostname mismatch, expired chain, protocol policy, SNI, or mixed content. It includes evidence, output examples, branches, and the smallest reliable fix.

TLS COMMON_NAME_INVALID specific path failure response

A TLS specific path failure note for COMMON_NAME_INVALID: TLS or certificate failure caused by hostname mismatch, expired chain, protocol policy, SNI, or mixed content. It includes evidence, output examples, branches, and the smallest reliable fix.

TLS ERR_SSL_PROTOCOL_ERROR specific path failure response

A TLS specific path failure note for ERR_SSL_PROTOCOL_ERROR: TLS or certificate failure caused by hostname mismatch, expired chain, protocol policy, SNI, or mixed content. It includes evidence, output examples, branches, and the smallest reliable fix.

TLS OCSP specific path failure response

A TLS specific path failure note for OCSP: TLS or certificate failure caused by hostname mismatch, expired chain, protocol policy, SNI, or mixed content. It includes evidence, output examples, branches, and the smallest reliable fix.

TLS SNI specific path failure response

A TLS specific path failure note for SNI: TLS or certificate failure caused by hostname mismatch, expired chain, protocol policy, SNI, or mixed content. It includes evidence, output examples, branches, and the smallest reliable fix.

TLS TLS1.2 specific path failure response

A TLS specific path failure note for TLS1.2: TLS or certificate failure caused by hostname mismatch, expired chain, protocol policy, SNI, or mixed content. It includes evidence, output examples, branches, and the smallest reliable fix.

TLS cipher specific path failure response

A TLS specific path failure note for cipher: TLS or certificate failure caused by hostname mismatch, expired chain, protocol policy, SNI, or mixed content. It includes evidence, output examples, branches, and the smallest reliable fix.

TLS chain specific path failure response

A TLS specific path failure note for chain: TLS or certificate failure caused by hostname mismatch, expired chain, protocol policy, SNI, or mixed content. It includes evidence, output examples, branches, and the smallest reliable fix.

TLS HSTS specific path failure response

A TLS specific path failure note for HSTS: TLS or certificate failure caused by hostname mismatch, expired chain, protocol policy, SNI, or mixed content. It includes evidence, output examples, branches, and the smallest reliable fix.

TLS mixed content specific path failure response

A TLS specific path failure note for mixed content: TLS or certificate failure caused by hostname mismatch, expired chain, protocol policy, SNI, or mixed content. It includes evidence, output examples, branches, and the smallest reliable fix.

TLS CERT_EXPIRED proxy versus origin split response

A TLS proxy versus origin split note for CERT_EXPIRED: TLS or certificate failure caused by hostname mismatch, expired chain, protocol policy, SNI, or mixed content. It includes evidence, output examples, branches, and the smallest reliable fix.

TLS COMMON_NAME_INVALID proxy versus origin split response

A TLS proxy versus origin split note for COMMON_NAME_INVALID: TLS or certificate failure caused by hostname mismatch, expired chain, protocol policy, SNI, or mixed content. It includes evidence, output examples, branches, and the smallest reliable fix.

TLS ERR_SSL_PROTOCOL_ERROR proxy versus origin split response

A TLS proxy versus origin split note for ERR_SSL_PROTOCOL_ERROR: TLS or certificate failure caused by hostname mismatch, expired chain, protocol policy, SNI, or mixed content. It includes evidence, output examples, branches, and the smallest reliable fix.

TLS OCSP proxy versus origin split response

A TLS proxy versus origin split note for OCSP: TLS or certificate failure caused by hostname mismatch, expired chain, protocol policy, SNI, or mixed content. It includes evidence, output examples, branches, and the smallest reliable fix.

TLS SNI proxy versus origin split response

A TLS proxy versus origin split note for SNI: TLS or certificate failure caused by hostname mismatch, expired chain, protocol policy, SNI, or mixed content. It includes evidence, output examples, branches, and the smallest reliable fix.

TLS TLS1.2 proxy versus origin split response

A TLS proxy versus origin split note for TLS1.2: TLS or certificate failure caused by hostname mismatch, expired chain, protocol policy, SNI, or mixed content. It includes evidence, output examples, branches, and the smallest reliable fix.

TLS cipher proxy versus origin split response

A TLS proxy versus origin split note for cipher: TLS or certificate failure caused by hostname mismatch, expired chain, protocol policy, SNI, or mixed content. It includes evidence, output examples, branches, and the smallest reliable fix.

TLS chain proxy versus origin split response

A TLS proxy versus origin split note for chain: TLS or certificate failure caused by hostname mismatch, expired chain, protocol policy, SNI, or mixed content. It includes evidence, output examples, branches, and the smallest reliable fix.

TLS HSTS proxy versus origin split response

A TLS proxy versus origin split note for HSTS: TLS or certificate failure caused by hostname mismatch, expired chain, protocol policy, SNI, or mixed content. It includes evidence, output examples, branches, and the smallest reliable fix.

TLS mixed content proxy versus origin split response

A TLS proxy versus origin split note for mixed content: TLS or certificate failure caused by hostname mismatch, expired chain, protocol policy, SNI, or mixed content. It includes evidence, output examples, branches, and the smallest reliable fix.

TLS CERT_EXPIRED timeout and load response

A TLS timeout and load note for CERT_EXPIRED: TLS or certificate failure caused by hostname mismatch, expired chain, protocol policy, SNI, or mixed content. It includes evidence, output examples, branches, and the smallest reliable fix.

TLS COMMON_NAME_INVALID timeout and load response

A TLS timeout and load note for COMMON_NAME_INVALID: TLS or certificate failure caused by hostname mismatch, expired chain, protocol policy, SNI, or mixed content. It includes evidence, output examples, branches, and the smallest reliable fix.

TLS ERR_SSL_PROTOCOL_ERROR timeout and load response

A TLS timeout and load note for ERR_SSL_PROTOCOL_ERROR: TLS or certificate failure caused by hostname mismatch, expired chain, protocol policy, SNI, or mixed content. It includes evidence, output examples, branches, and the smallest reliable fix.

TLS OCSP timeout and load response

A TLS timeout and load note for OCSP: TLS or certificate failure caused by hostname mismatch, expired chain, protocol policy, SNI, or mixed content. It includes evidence, output examples, branches, and the smallest reliable fix.

TLS SNI timeout and load response

A TLS timeout and load note for SNI: TLS or certificate failure caused by hostname mismatch, expired chain, protocol policy, SNI, or mixed content. It includes evidence, output examples, branches, and the smallest reliable fix.

TLS TLS1.2 timeout and load response

A TLS timeout and load note for TLS1.2: TLS or certificate failure caused by hostname mismatch, expired chain, protocol policy, SNI, or mixed content. It includes evidence, output examples, branches, and the smallest reliable fix.

TLS cipher timeout and load response

A TLS timeout and load note for cipher: TLS or certificate failure caused by hostname mismatch, expired chain, protocol policy, SNI, or mixed content. It includes evidence, output examples, branches, and the smallest reliable fix.

TLS chain timeout and load response

A TLS timeout and load note for chain: TLS or certificate failure caused by hostname mismatch, expired chain, protocol policy, SNI, or mixed content. It includes evidence, output examples, branches, and the smallest reliable fix.

TLS HSTS timeout and load response

A TLS timeout and load note for HSTS: TLS or certificate failure caused by hostname mismatch, expired chain, protocol policy, SNI, or mixed content. It includes evidence, output examples, branches, and the smallest reliable fix.

TLS mixed content timeout and load response

A TLS timeout and load note for mixed content: TLS or certificate failure caused by hostname mismatch, expired chain, protocol policy, SNI, or mixed content. It includes evidence, output examples, branches, and the smallest reliable fix.

TLS CERT_EXPIRED cache or propagation drift response

A TLS cache or propagation drift note for CERT_EXPIRED: TLS or certificate failure caused by hostname mismatch, expired chain, protocol policy, SNI, or mixed content. It includes evidence, output examples, branches, and the smallest reliable fix.

TLS COMMON_NAME_INVALID cache or propagation drift response

A TLS cache or propagation drift note for COMMON_NAME_INVALID: TLS or certificate failure caused by hostname mismatch, expired chain, protocol policy, SNI, or mixed content. It includes evidence, output examples, branches, and the smallest reliable fix.

TLS ERR_SSL_PROTOCOL_ERROR cache or propagation drift response

A TLS cache or propagation drift note for ERR_SSL_PROTOCOL_ERROR: TLS or certificate failure caused by hostname mismatch, expired chain, protocol policy, SNI, or mixed content. It includes evidence, output examples, branches, and the smallest reliable fix.

TLS OCSP cache or propagation drift response

A TLS cache or propagation drift note for OCSP: TLS or certificate failure caused by hostname mismatch, expired chain, protocol policy, SNI, or mixed content. It includes evidence, output examples, branches, and the smallest reliable fix.

TLS SNI cache or propagation drift response

A TLS cache or propagation drift note for SNI: TLS or certificate failure caused by hostname mismatch, expired chain, protocol policy, SNI, or mixed content. It includes evidence, output examples, branches, and the smallest reliable fix.

TLS TLS1.2 cache or propagation drift response

A TLS cache or propagation drift note for TLS1.2: TLS or certificate failure caused by hostname mismatch, expired chain, protocol policy, SNI, or mixed content. It includes evidence, output examples, branches, and the smallest reliable fix.

TLS cipher cache or propagation drift response

A TLS cache or propagation drift note for cipher: TLS or certificate failure caused by hostname mismatch, expired chain, protocol policy, SNI, or mixed content. It includes evidence, output examples, branches, and the smallest reliable fix.

TLS chain cache or propagation drift response

A TLS cache or propagation drift note for chain: TLS or certificate failure caused by hostname mismatch, expired chain, protocol policy, SNI, or mixed content. It includes evidence, output examples, branches, and the smallest reliable fix.

TLS HSTS cache or propagation drift response

A TLS cache or propagation drift note for HSTS: TLS or certificate failure caused by hostname mismatch, expired chain, protocol policy, SNI, or mixed content. It includes evidence, output examples, branches, and the smallest reliable fix.

TLS mixed content cache or propagation drift response

A TLS cache or propagation drift note for mixed content: TLS or certificate failure caused by hostname mismatch, expired chain, protocol policy, SNI, or mixed content. It includes evidence, output examples, branches, and the smallest reliable fix.

TLS CERT_EXPIRED local versus production drift response

A TLS local versus production drift note for CERT_EXPIRED: TLS or certificate failure caused by hostname mismatch, expired chain, protocol policy, SNI, or mixed content. It includes evidence, output examples, branches, and the smallest reliable fix.

TLS COMMON_NAME_INVALID local versus production drift response

A TLS local versus production drift note for COMMON_NAME_INVALID: TLS or certificate failure caused by hostname mismatch, expired chain, protocol policy, SNI, or mixed content. It includes evidence, output examples, branches, and the smallest reliable fix.

TLS ERR_SSL_PROTOCOL_ERROR local versus production drift response

A TLS local versus production drift note for ERR_SSL_PROTOCOL_ERROR: TLS or certificate failure caused by hostname mismatch, expired chain, protocol policy, SNI, or mixed content. It includes evidence, output examples, branches, and the smallest reliable fix.

TLS OCSP local versus production drift response

A TLS local versus production drift note for OCSP: TLS or certificate failure caused by hostname mismatch, expired chain, protocol policy, SNI, or mixed content. It includes evidence, output examples, branches, and the smallest reliable fix.

TLS SNI local versus production drift response

A TLS local versus production drift note for SNI: TLS or certificate failure caused by hostname mismatch, expired chain, protocol policy, SNI, or mixed content. It includes evidence, output examples, branches, and the smallest reliable fix.

TLS TLS1.2 local versus production drift response

A TLS local versus production drift note for TLS1.2: TLS or certificate failure caused by hostname mismatch, expired chain, protocol policy, SNI, or mixed content. It includes evidence, output examples, branches, and the smallest reliable fix.

TLS cipher local versus production drift response

A TLS local versus production drift note for cipher: TLS or certificate failure caused by hostname mismatch, expired chain, protocol policy, SNI, or mixed content. It includes evidence, output examples, branches, and the smallest reliable fix.

TLS chain local versus production drift response

A TLS local versus production drift note for chain: TLS or certificate failure caused by hostname mismatch, expired chain, protocol policy, SNI, or mixed content. It includes evidence, output examples, branches, and the smallest reliable fix.

TLS HSTS local versus production drift response

A TLS local versus production drift note for HSTS: TLS or certificate failure caused by hostname mismatch, expired chain, protocol policy, SNI, or mixed content. It includes evidence, output examples, branches, and the smallest reliable fix.

TLS mixed content local versus production drift response

A TLS local versus production drift note for mixed content: TLS or certificate failure caused by hostname mismatch, expired chain, protocol policy, SNI, or mixed content. It includes evidence, output examples, branches, and the smallest reliable fix.

TLS CERT_EXPIRED data or input state response

A TLS data or input state note for CERT_EXPIRED: TLS or certificate failure caused by hostname mismatch, expired chain, protocol policy, SNI, or mixed content. It includes evidence, output examples, branches, and the smallest reliable fix.

TLS COMMON_NAME_INVALID data or input state response

A TLS data or input state note for COMMON_NAME_INVALID: TLS or certificate failure caused by hostname mismatch, expired chain, protocol policy, SNI, or mixed content. It includes evidence, output examples, branches, and the smallest reliable fix.

TLS ERR_SSL_PROTOCOL_ERROR data or input state response

A TLS data or input state note for ERR_SSL_PROTOCOL_ERROR: TLS or certificate failure caused by hostname mismatch, expired chain, protocol policy, SNI, or mixed content. It includes evidence, output examples, branches, and the smallest reliable fix.

TLS OCSP data or input state response

A TLS data or input state note for OCSP: TLS or certificate failure caused by hostname mismatch, expired chain, protocol policy, SNI, or mixed content. It includes evidence, output examples, branches, and the smallest reliable fix.

TLS SNI data or input state response

A TLS data or input state note for SNI: TLS or certificate failure caused by hostname mismatch, expired chain, protocol policy, SNI, or mixed content. It includes evidence, output examples, branches, and the smallest reliable fix.

TLS TLS1.2 data or input state response

A TLS data or input state note for TLS1.2: TLS or certificate failure caused by hostname mismatch, expired chain, protocol policy, SNI, or mixed content. It includes evidence, output examples, branches, and the smallest reliable fix.

TLS cipher data or input state response

A TLS data or input state note for cipher: TLS or certificate failure caused by hostname mismatch, expired chain, protocol policy, SNI, or mixed content. It includes evidence, output examples, branches, and the smallest reliable fix.

TLS chain data or input state response

A TLS data or input state note for chain: TLS or certificate failure caused by hostname mismatch, expired chain, protocol policy, SNI, or mixed content. It includes evidence, output examples, branches, and the smallest reliable fix.

TLS HSTS data or input state response

A TLS data or input state note for HSTS: TLS or certificate failure caused by hostname mismatch, expired chain, protocol policy, SNI, or mixed content. It includes evidence, output examples, branches, and the smallest reliable fix.

TLS mixed content data or input state response

A TLS data or input state note for mixed content: TLS or certificate failure caused by hostname mismatch, expired chain, protocol policy, SNI, or mixed content. It includes evidence, output examples, branches, and the smallest reliable fix.

TLS CERT_EXPIRED safe restart decision response

A TLS safe restart decision note for CERT_EXPIRED: TLS or certificate failure caused by hostname mismatch, expired chain, protocol policy, SNI, or mixed content. It includes evidence, output examples, branches, and the smallest reliable fix.

TLS COMMON_NAME_INVALID safe restart decision response

A TLS safe restart decision note for COMMON_NAME_INVALID: TLS or certificate failure caused by hostname mismatch, expired chain, protocol policy, SNI, or mixed content. It includes evidence, output examples, branches, and the smallest reliable fix.

TLS ERR_SSL_PROTOCOL_ERROR safe restart decision response

A TLS safe restart decision note for ERR_SSL_PROTOCOL_ERROR: TLS or certificate failure caused by hostname mismatch, expired chain, protocol policy, SNI, or mixed content. It includes evidence, output examples, branches, and the smallest reliable fix.

TLS OCSP safe restart decision response

A TLS safe restart decision note for OCSP: TLS or certificate failure caused by hostname mismatch, expired chain, protocol policy, SNI, or mixed content. It includes evidence, output examples, branches, and the smallest reliable fix.

TLS SNI safe restart decision response

A TLS safe restart decision note for SNI: TLS or certificate failure caused by hostname mismatch, expired chain, protocol policy, SNI, or mixed content. It includes evidence, output examples, branches, and the smallest reliable fix.

TLS TLS1.2 safe restart decision response

A TLS safe restart decision note for TLS1.2: TLS or certificate failure caused by hostname mismatch, expired chain, protocol policy, SNI, or mixed content. It includes evidence, output examples, branches, and the smallest reliable fix.

TLS cipher safe restart decision response

A TLS safe restart decision note for cipher: TLS or certificate failure caused by hostname mismatch, expired chain, protocol policy, SNI, or mixed content. It includes evidence, output examples, branches, and the smallest reliable fix.

TLS chain safe restart decision response

A TLS safe restart decision note for chain: TLS or certificate failure caused by hostname mismatch, expired chain, protocol policy, SNI, or mixed content. It includes evidence, output examples, branches, and the smallest reliable fix.

TLS HSTS safe restart decision response

A TLS safe restart decision note for HSTS: TLS or certificate failure caused by hostname mismatch, expired chain, protocol policy, SNI, or mixed content. It includes evidence, output examples, branches, and the smallest reliable fix.

TLS mixed content safe restart decision response

A TLS safe restart decision note for mixed content: TLS or certificate failure caused by hostname mismatch, expired chain, protocol policy, SNI, or mixed content. It includes evidence, output examples, branches, and the smallest reliable fix.

TLS CERT_EXPIRED rollback or roll-forward response

A TLS rollback or roll-forward note for CERT_EXPIRED: TLS or certificate failure caused by hostname mismatch, expired chain, protocol policy, SNI, or mixed content. It includes evidence, output examples, branches, and the smallest reliable fix.

TLS COMMON_NAME_INVALID rollback or roll-forward response

A TLS rollback or roll-forward note for COMMON_NAME_INVALID: TLS or certificate failure caused by hostname mismatch, expired chain, protocol policy, SNI, or mixed content. It includes evidence, output examples, branches, and the smallest reliable fix.

TLS ERR_SSL_PROTOCOL_ERROR rollback or roll-forward response

A TLS rollback or roll-forward note for ERR_SSL_PROTOCOL_ERROR: TLS or certificate failure caused by hostname mismatch, expired chain, protocol policy, SNI, or mixed content. It includes evidence, output examples, branches, and the smallest reliable fix.

TLS OCSP rollback or roll-forward response

A TLS rollback or roll-forward note for OCSP: TLS or certificate failure caused by hostname mismatch, expired chain, protocol policy, SNI, or mixed content. It includes evidence, output examples, branches, and the smallest reliable fix.

TLS SNI rollback or roll-forward response

A TLS rollback or roll-forward note for SNI: TLS or certificate failure caused by hostname mismatch, expired chain, protocol policy, SNI, or mixed content. It includes evidence, output examples, branches, and the smallest reliable fix.

TLS TLS1.2 rollback or roll-forward response

A TLS rollback or roll-forward note for TLS1.2: TLS or certificate failure caused by hostname mismatch, expired chain, protocol policy, SNI, or mixed content. It includes evidence, output examples, branches, and the smallest reliable fix.

TLS cipher rollback or roll-forward response

A TLS rollback or roll-forward note for cipher: TLS or certificate failure caused by hostname mismatch, expired chain, protocol policy, SNI, or mixed content. It includes evidence, output examples, branches, and the smallest reliable fix.