Certificate Not Yet Valid
The certificate's start date is in the future from the client's point of view. Almost always a wrong clock on the client or the server. Check the site below to confirm what is wrong.
- Free
- No Sign-Up
- Live Lookup
Examples:
SSL Certificate Checker
The error, and the fix
Error CodesCERT_NOT_YET_VALID
Usual CauseThe certificate's start date is in the future from the client's point of view
Check From a Terminalopenssl s_client -connect example.com:443 -servername example.com
The certificate's start date is in the future from the client's point of view. Almost always a wrong clock on the client or the server.
How to fix it: Turn on time sync (timedatectl set-ntp true) on the machine with the wrong clock.
Questions
What does "certificate not yet valid" mean?
The certificate's start date is in the future from the client's point of view. Almost always a wrong clock on the client or the server.
How do I fix it?
Turn on time sync (timedatectl set-ntp true) on the machine with the wrong clock.
Is it safe to click through the warning?
Not on a site where you enter passwords or payment details: the connection may not be private. Fix the certificate instead.
Free Tools
More tools
SSL Certificate CheckerExpiry, issuer, chain, names and TLS version for any HTTPS site.DNS LookupA, AAAA, MX, NS, TXT, CNAME, SOA and CAA records for any domain.SPF CheckerValidate an SPF record and count its DNS lookups against the limit of 10.Firewall Rule GeneratorGenerate iptables, nftables and UFW rules for common server set-ups.
Stop abuse leaving your servers
Frabs watches every VM's outbound traffic and stops spam, scans and floods before the abuse report arrives.