Knowledge BaseMetric InsightsConfigurationSSL CertificatesSSL warning: NET::ERR_CERT_COMMON_NAME_INVALID

SSL warning: NET::ERR_CERT_COMMON_NAME_INVALID

ISSUE

We are using self-signed certificates on the Metric Insights server provided for us by IT department.

When I try to open Metric Insights application in Chrome or Safari browser I get not private connection warning:

RESOLUTION:

Chromium removed support for matching common name in certificates in M58:

* Feature bug (including motivation): Issue 308330

* https://www.chromestatus.com/features/4981025180483584

Certificates that rely on this deprecated behavior will now be rejected with:

 ERR_CERT_COMMON_NAME_INVALID

The affected certificates are often locally generated ones for development purposes, or are part of a private PKI.

The solution is to re-generate the certificates to include a Subject Alternative Name extension, or to enable an option in Chrome to allow them.

Following articles should help you overcome the issue:

https://stackoverflow.com/questions/43665243/chrome-invalid-self-signed-ssl-cert-subject-alternative-name-missing

https://textslashplain.com/2017/03/10/chrome-deprecates-subject-cn-matching/

https://alexanderzeitler.com/articles/Fixing-Chrome-missing_subjectAltName-selfsigned-cert-openssl/