This article clarifies errors with a custom domain that uses Auth0-managed certificates. The user observes that the certificate contains the description "testexp" in many of the fields, and the website is inaccessible. The web browser displays an error similar to the following:

Your connection to this site is not secure

This connection is not private

• Custom Domain
• Certificate Error

The certificate error occurs due to one of two primary reasons: the certificate has expired, or network-related problems are blocking access to the certificate. Auth0-managed certificates are sourced from Let's Encrypt or Google Trust and are automatically renewed upon expiry.

The troubleshooting steps described above should help to diagnose and fix the majority of these types of errors.

The troubleshooting steps described below diagnose and fix the majority of these errors. The generic issue is often encountered due to network-related problems. Perform the following diagnostic checks:

1. Determine if the issue occurs on a single machine or on all machines on the local network to narrow the scope of the problem.

2. If the problem occurs on a single machine, check if Hypertext Transfer Protocol Secure (HTTPS) inspection software or anti-virus is installed. Attempt to briefly disable these to determine if the issue is resolved.

3. Attempt to connect via a different network (e.g., a mobile/cellular network).

4. Try using a different web browser. If the problem is experienced by only one type of browser, a security configuration on the browser may be inadvertently preventing Secure Sockets Layer (SSL)/Transport Layer Security (TLS) from working correctly.

5. Determine if a load-balancer is involved, as its configuration may impact how the SSL/TLS certificate functions.

6. If connecting via Wi-Fi, check if the broadband router has a firewall configuration that prevents the SSL/TLS connection from working as expected.

7. If connecting to an organization via a Virtual Private Network (VPN), attempt to access it without the VPN.

8. Use a third-party website, such as SSL Checker, to check the integrity of the SSL/TLS configuration.

9. Use OpenSSL to Inspect the certificate using the following command:

echo | openssl s_client -connect <domain-name>:443 -servername <domain-name> | head

If this provides a clear diagnosis of the SSL configuration, but the browser continues to block the site and display an error message, the problem is likely due to a browser configuration issue.

• Auth0 supports only Let's Encrypt or Google Trust for custom domains with managed certificates.

• If greater flexibility is required, consider the use of custom domains with self-managed certificates. This option is available only to users with an Enterprise subscription or above.

Related References

• Configure Custom Domains with Self-Managed Certificates