Certificate error” ERR_SSL_VERSION_OR_CIPHER_MISMATCH “ or similar errors.
Posted: Thu Dec 18, 2025 3:33 pm
If you are receiving the Certificate error” ERR_SSL_VERSION_OR_CIPHER_MISMATCH “ or similar errors. Check the Certificate that you are trying to use. It may have been created by the CA with an Anchor Cert that had SHA-1 as its algorithm. A SHA-1 algorithm was first recognized as having security issue in 2017. NIST Retires SHA-1 Cryptographic Algorithm | NISThttps://nam11.safelinks.protection.outl ... reserved=0 Sha1 Security Vulnerability Fix: Hashing Algorithm for Microsoft https://nam11.safelinks.protection.outl ... reserved=0
-epibio-mft2.xxxx..xxx
-InCommon RSA server CA2 (intermediate)
-USERTrust RSA certificate Authority (CA root cert)
-AAA Certificate Services (Anchor root cert)
The AAA cert is being sent to the browser and causing a failure because the anchor contains the SHA-1 algorithm which Chromium browsers (Chrome and Edge) automatically reject with prejudice. If the certificate that is causing the issue has the AAA certificate. You should have an option to download the certificate chain files separately. Then import only the InCommon and User Trust, not the AAA certificate with the outdated SHA-1 algorithm.
The above is one example there may be other SHA-1 root certificates.
Most major browsers have options for you to view your certificates.
-epibio-mft2.xxxx..xxx
-InCommon RSA server CA2 (intermediate)
-USERTrust RSA certificate Authority (CA root cert)
-AAA Certificate Services (Anchor root cert)
The AAA cert is being sent to the browser and causing a failure because the anchor contains the SHA-1 algorithm which Chromium browsers (Chrome and Edge) automatically reject with prejudice. If the certificate that is causing the issue has the AAA certificate. You should have an option to download the certificate chain files separately. Then import only the InCommon and User Trust, not the AAA certificate with the outdated SHA-1 algorithm.
The above is one example there may be other SHA-1 root certificates.
Most major browsers have options for you to view your certificates.