Kinsta supports TLS 1.3 on all of our servers and our Kinsta CDN. If you are a Kinsta customer you never have to worry about this as we always upgrade our servers to the latest and greatest supported versions. Ideally, it should be running at least TLS 1.2 (better yet, TLS 1.3). Check for Old TLS versionĪnother possible reason is that the TLS version running on the web server is old. That is where a tool like SSL Labs can come in handy.

However, in our case, the ERR_SSL_VERSION_OR_CIPHER_MISMATCH error actually prevented us from being able to check it in Chrome DevTools. Remember though, there are wildcard certificates and other variations, but for a typical site, it should match exactly. Check out our plans Check issued domain on SSL certificate Need a blazing-fast, secure, and developer-friendly hosting for your client sites? Kinsta is built with WordPress developers in mind and provides plenty of tools and a powerful dashboard. If this doesn’t match the current site you’re on, this is a problem. Right-click anywhere on the website and click on “Inspect.” Then click on the security tab and click on “View certificate.” The issued domain will show in the certificate information.

The domain name alias is for a website whose name is different, but the alias was not included in the certificate.Īnother easy way to check the current domain name issue on the certificate is to open up Chrome DevTools on the site.

The site uses a content delivery network (CDN) that doesn’t support SSL.

The site no longer exists, yet the domain still points to the old IP address, where some other site is now hosted.

The site does not use SSL, but shares an IP address with some other site that does.

As SSL Labs states, a mismatch can be a number of things such as: As you can see from the SSL Labs test below, this is pretty quick and easy to diagnose. In this particular instance, the customer migrating to Kinsta had a certificate name mismatch which was throwing up the ERR_SSL_VERSION_OR_CIPHER_MISMATCH error. Check SSL certificate Check for Certificate Name Mismatch It could take a minute or two to scan your site’s SSL/TLS configuration on your web server. You can also select the option to hide public results if you prefer. Subscribe Now Check Out Our Video Guide to Fixing SSL Errors

Join 20,000+ others who get our weekly newsletter with insider WordPress tips! Want to know how we increased our traffic over 1000%?

Opera web browser for xp