Skip to content
EVI Solutions

SSL error and "connection is not secure" message: how to fix it

Medium 30 min Updated:

Quick answer

The "connection is not secure" message usually means the SSL certificate is missing, expired, not installed correctly, or content is mixed between HTTP and HTTPS addresses. Check the expiry date, certificate chain and redirects, then install a valid certificate and force HTTPS.

How to recognize the problem

  • Browser shows a "Connection is not secure" or "Not secure" warning, sometimes with a red warning icon
  • The site opens via https:// but with a certificate warning
  • Some pages or images load via http:// and cause mixed content
  • After moving to a new host, an SSL error appears
  • Users report they cannot access the site due to a security warning

Most common causes

The certificate has expired

SSL certificates have a limited validity period. If it was not renewed automatically, browsers show a warning.

The certificate is not installed or is incorrect

The server is missing the private key, the certificate chain is incomplete, or a certificate for the wrong domain is installed.

Mixed content

The page loads via HTTPS, but some elements (images, scripts, CSS) load via HTTP, so the browser shows a warning.

Wrong domain or subdomain name

The certificate was issued for www or only for the root domain, but the site opens on another name, or the SAN entry is missing.

Incorrect redirect

HTTP and HTTPS versions run in parallel or there is a redirect loop, which can cause a warning or make the site unavailable.

Step-by-step fix

  1. 1

    Check the certificate expiry date

    Click the site information icon in the address bar (padlock or similar icon) and choose the option to view the certificate. Check the expiry date and whether the domain name matches. If the certificate has expired, go to step 3.

  2. 2

    Determine whether the problem is site-wide or only on some pages

    Open several pages and check whether the warning appears everywhere or only on parts of the site. If it is only on some pages, it is probably mixed content.

  3. 3

    Renew or install the SSL certificate

    In your hosting control panel, find the SSL/TLS certificates section. If you use free Let's Encrypt, start a renewal or enable automatic renewal. If you have a purchased certificate, download the new files and install them via the panel or hosting support.

  4. 4

    Check the certificate chain

    An incomplete chain is a common cause of warnings. In the hosting panel, look for the option to install the CA bundle file or ask support to check the chain. You can find checking tools on sites like SSL Labs, but do not enter sensitive data.

  5. 5

    Remove mixed content

    Open the page with the warning, open developer tools (F12 or the appropriate shortcut) and look at the Console or Network tab for errors mentioning http://. Then, in the database or through the CMS, replace http:// with https:// in links to images, scripts and styles. Always make a backup before changing the database. If you use WordPress, use the WP-CLI command wp search-replace 'http://yourdomain' 'https://yourdomain' --all-tables or a trusted search and replace plugin; avoid manually changing only the wp_posts table because it can damage serialized data.

  6. 6

    Set up a redirect to HTTPS

    In the hosting panel, enable the option to force HTTPS if it exists, or, if the server uses Apache, add a rule to the .htaccess file. If you are not sure the rule is correct, make a backup of the file first. The goal is for all requests to go to the https:// version.

  7. 7

    Clear the cache and test in incognito mode

    Clear the browser cache and the site cache (if you use a CDN or caching plugin). Open the site in an incognito window or on another device to make sure the error is fixed.

  8. 8

    Check whether the certificate renews automatically

    If you use a free certificate, enable automatic renewal in the panel and check that it succeeded. Set a reminder to check the status one month before expiry.

If nothing helps

If you have renewed the certificate and set up redirects, but the warning still appears, check whether there are multiple instances of the site (staging, old copy) or whether the CDN service uses its own certificate. In that case, contact hosting or CDN provider support with the exact domain name and the time the error occurs. For advanced cases, such as a misconfigured reverse proxy, help from a server administrator is needed.

How to prevent it

  • Enable automatic SSL certificate renewal and check the status once a month.
  • Regularly update the CMS and plugins that can introduce HTTP links.
  • Use a mixed content checking tool after every major site change.
  • Keep a record of the certificate validity period and set a reminder.

When to call a professional

If you cannot access the hosting panel, do not know how to install a certificate, or the error repeats even after all the steps, contact IT support or the server administrator.

Let us handle it Ask the AI IT assistant
Website development · Fast, SEO-ready, multilingual websites

FAQ

Is an SSL error dangerous for users?

Yes, the warning discourages visitors and can undermine trust. If it is not fixed, browsers may show the site as unsafe, and search engines may reduce its visibility.

Can I install a free SSL certificate myself?

You can if the hosting panel offers automatic installation of a Let's Encrypt certificate. Otherwise, contact hosting support or the server administrator.

Why does the warning appear only on some pages?

Most often because of mixed content, that is, elements that load via HTTP. Check the browser console and replace all `http://` links in the content.

Share
Didn't find a fix?The AI IT assistant is available 24/7. Describe the problem or send a screenshot of the error and get instructions for your case.Ask the AI IT assistant