22

When accessing your https site using Chrome you may receive the following errors

NET::ERR_CERT_VALIDITY_TOO_LONG

The server certificate has a validity period that is too long

This is caused by your SSL certificate having a validity period that is longer than 39 months. enter image description here

How do I allow requests to go through in chrome?

2 Answers 2

31

Do below to fix the issue

  1. Go to the URL with has certificate issue
  2. Click the grey area
  3. Type "thisisunsafe" + "enter key"
  4. Chrome will now allow requests to the URL.
6
  • 1
    wow, did not know about this trick! unsure though why they made the keyword thisisunsafe instead of thisissafe Dec 14, 2020 at 21:36
  • 1
    what a secret passphrase! it's also mentioned in stackoverflow.com/a/58957322/1533884
    – Roy Ling
    Feb 18, 2021 at 2:28
  • 1
    @Api How did you discover this information? Apr 4, 2022 at 4:34
  • This doesn't seem to be permanent
    – Rino Bino
    Apr 30, 2022 at 0:15
  • @Api what do you mean by the gray area? do you mean click on the "Not Secure" text next to the URL textbox?
    – H A
    Jul 8, 2022 at 2:24
23

Starting on September 1st (2020), SSL/TLS certificates cannot be issued for longer than 13 months (397 days).

From a high-level, theoretical standpoint there are two primary benefits for shorter-lived certificates:

The first is the technical component – longer lifespans means it takes longer to organically roll out updates or changes. A real-world example would be the SHA1-to-SHA2 transition. Unless you’re going to revoke a whole bunch of certificates and force the customer to re-issue, it can take years before all of the old certificates are replaced. In the case of SHA1, it took three. That creates risk.

The other benefit has to do with identity – how long should the information used to validate an identity stay trusted? The longer between validation, the greater the risk. Google has said that in an ideal world domain validation would occur about every six hours.

Before 2015 you could get an SSL/TLS certificate issued for up to five years. That was reduced to three, and then again in 2018 to two. At the end of 2019, a ballot was proposed at the CA/B Forum that would have reduced it to one year – it was voted down soundly by the Certificate Authorities.

References

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge that you have read and understand our privacy policy and code of conduct.

Not the answer you're looking for? Browse other questions tagged or ask your own question.