certificate verify failed: Hostname mismatch, certificate is not valid for
The certificate doesn't cover this hostname
Seen in Python ssl, requests, urllib3, httpx, aiohttp
Python received a certificate that does not list the hostname or IP address it connected to.
Common causes
- The certificate covers the apex but not www, or a different subdomain.
- Connecting by IP address or an internal alias that is not on the certificate.
- The server returned its default certificate because the name is not configured on it, or a proxy presents its own.
How to fix it
- Compare the name in the error with the names on the certificate and reissue it with the missing name.
- Connect using a hostname the certificate covers.
- Check every server or load balancer behind the name serves the right certificate.
Got a different message? Paste it into the error explainer.
Related errors
- [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed · Python couldn't verify the server's certificate
- PKIX path building failed · Java can't build a trusted certificate chain
- javax.net.ssl.SSLHandshakeException: Received fatal alert: handshake_failure · The server rejected the TLS handshake
- No subject alternative DNS name matching example.com found · The certificate doesn't cover this hostname
- x509: certificate signed by unknown authority · Go doesn't trust the certificate's issuer
- x509: certificate is valid for X, not Y · The certificate doesn't cover this hostname
- remote error: tls: handshake failure · The server rejected the TLS handshake
- The SSL connection could not be established, see inner exception. · .NET could not complete the TLS handshake
- The remote certificate is invalid according to the validation procedure · .NET doesn't trust the server's certificate
- The request was aborted: Could not create SSL/TLS secure channel. · .NET Framework could not negotiate TLS
- cURL error 60: SSL certificate problem: unable to get local issuer certificate · PHP cURL can't verify the server's certificate
- stream_socket_enable_crypto(): SSL operation failed with code 1 · PHP failed to set up TLS on a stream