{"id":33478,"date":"2024-06-08T21:43:23","date_gmt":"2024-06-08T19:43:23","guid":{"rendered":"https:\/\/www.dbi-services.com\/blog\/?p=33478"},"modified":"2026-02-25T21:27:15","modified_gmt":"2026-02-25T20:27:15","slug":"self-signed-ssl-certificate-is-blocked-on-chrome-or-edge","status":"publish","type":"post","link":"https:\/\/www.dbi-services.com\/blog\/self-signed-ssl-certificate-is-blocked-on-chrome-or-edge\/","title":{"rendered":"Self-Signed SSL Certificate is blocked on Chrome or Edge"},"content":{"rendered":"\n<p>If you are using Self-Signed SSL Certificates and recently updated your Google Chrome \/ Edge browser, you might have come across a new kind of error, i.e: &#8220;ERR_SSL_KEY_USAGE_INCOMPATIBLE&#8221;. In my case, it happened a few months ago on an Alfresco installation, and more specifically the Apache Solr URL. Since this URL is mostly used\/accessible by Administrators, there is not much traffic going on there and no need to use a real signed SSL Certificate. The error on the browser looks like this:<\/p>\n\n\n\n<figure data-wp-context=\"{&quot;imageId&quot;:&quot;69f3606b890cc&quot;}\" data-wp-interactive=\"core\/image\" data-wp-key=\"69f3606b890cc\" class=\"wp-block-image size-large wp-lightbox-container\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"437\" data-wp-class--hide=\"state.isContentHidden\" data-wp-class--show=\"state.isContentVisible\" data-wp-init=\"callbacks.setButtonStyles\" data-wp-on--click=\"actions.showLightbox\" data-wp-on--load=\"callbacks.setButtonStyles\" data-wp-on-window--resize=\"callbacks.setButtonStyles\" src=\"https:\/\/www.dbi-services.com\/blog\/wp-content\/uploads\/sites\/2\/2024\/06\/sslcert-issue-1024x437.png\" alt=\"\" class=\"wp-image-33479\" srcset=\"https:\/\/www.dbi-services.com\/blog\/wp-content\/uploads\/sites\/2\/2024\/06\/sslcert-issue-1024x437.png 1024w, https:\/\/www.dbi-services.com\/blog\/wp-content\/uploads\/sites\/2\/2024\/06\/sslcert-issue-300x128.png 300w, https:\/\/www.dbi-services.com\/blog\/wp-content\/uploads\/sites\/2\/2024\/06\/sslcert-issue-768x328.png 768w, https:\/\/www.dbi-services.com\/blog\/wp-content\/uploads\/sites\/2\/2024\/06\/sslcert-issue.png 1303w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><button\n\t\t\tclass=\"lightbox-trigger\"\n\t\t\ttype=\"button\"\n\t\t\taria-haspopup=\"dialog\"\n\t\t\taria-label=\"Enlarge\"\n\t\t\tdata-wp-init=\"callbacks.initTriggerButton\"\n\t\t\tdata-wp-on--click=\"actions.showLightbox\"\n\t\t\tdata-wp-style--right=\"state.imageButtonRight\"\n\t\t\tdata-wp-style--top=\"state.imageButtonTop\"\n\t\t>\n\t\t\t<svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"12\" height=\"12\" fill=\"none\" viewBox=\"0 0 12 12\">\n\t\t\t\t<path fill=\"#fff\" d=\"M2 0a2 2 0 0 0-2 2v2h1.5V2a.5.5 0 0 1 .5-.5h2V0H2Zm2 10.5H2a.5.5 0 0 1-.5-.5V8H0v2a2 2 0 0 0 2 2h2v-1.5ZM8 12v-1.5h2a.5.5 0 0 0 .5-.5V8H12v2a2 2 0 0 1-2 2H8Zm2-12a2 2 0 0 1 2 2v2h-1.5V2a.5.5 0 0 0-.5-.5H8V0h2Z\" \/>\n\t\t\t<\/svg>\n\t\t<\/button><\/figure>\n\n\n\n<p>This is, at the moment, specific to Chrome \/ Edge but it will most probably be coming for other browsers as well. As mentioned on <a href=\"https:\/\/www.dbi-services.com\/blog\/howto-generate-a-custom-azuread-sso-certificate\/\" target=\"_blank\" rel=\"noreferrer noopener\">this previous blog<\/a>, I have been using a pretty standard OpenSSL request file to generate all my Self-Signed SSL Certificates for years. This is an example of configuration I used to use:<\/p>\n\n\n<div class=\"wp-block-syntaxhighlighter-code \"><pre class=\"brush: bash; title: ; notranslate\" title=\"\">\n&#x5B;req]\ndistinguished_name = dn\nx509_extensions = v3_req\nprompt = no\n\n&#x5B;dn]\nC = CH\nST = JU\nL = Delemont\nO = dbi services\nOU = IT\nCN = dms.poc.it.dbi-services.com\n\n&#x5B;v3_req]\nkeyUsage = keyEncipherment, dataEncipherment\nextendedKeyUsage = serverAuth\nsubjectAltName = @alt_names\n\n&#x5B;alt_names]\nDNS.1 = dms.poc.it.dbi-services.com\nDNS.2 = alfresco1.it.dbi-services.com\nDNS.3 = alfresco2.it.dbi-services.com\nDNS.4 = solr1.it.dbi-services.com\nDNS.5 = solr2.it.dbi-services.com\n<\/pre><\/div>\n\n\n<p>This has been sufficient so far and it still works properly on Firefox for example, but not on Chrome anymore. After a bit of research, I found <a href=\"https:\/\/chromeenterprise.google\/policies\/#RSAKeyUsageForLocalAnchorsEnabled\" target=\"_blank\" rel=\"noreferrer noopener\">this page from Chrome<\/a> which explains this change in behavior, for security purposes. As it states:<\/p>\n\n\n\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\">\n<p>Connections which fail this check will fail with the error ERR_SSL_KEY_USAGE_INCOMPATIBLE. Sites which fail with this error likely have a misconfigured certificate. Modern ECDHE_RSA cipher suites use the &#8220;<strong>digitalSignature<\/strong>&#8221; key usage option, while legacy RSA decryption cipher suites use the &#8220;<strong>keyEncipherment<\/strong>&#8221; key usage option. If unsure, adminstrators should include both in RSA certificates meant for HTTPS.<\/p>\n<\/blockquote>\n\n\n\n<p>Therefore, depending on the cipher suite that will be used, your Self-Signed SSL Certificate with only &#8220;<strong>keyEncipherment<\/strong>&#8220;, might not be sufficient anymore. If you want more details on the &#8220;<strong>keyUsage<\/strong>&#8220;, please see the <a href=\"https:\/\/www.openssl.org\/docs\/man3.3\/man5\/x509v3_config.html\" target=\"_blank\" rel=\"noreferrer noopener\">OpenSSL documentation<\/a>.<\/p>\n\n\n\n<p>You can, of course, set the registry entry (on Windows clients) to disable this new behavior, but that&#8217;s not the way to go in the long term. You should therefore re-generate all your Self-Signed SSL Certificate to add the &#8220;<strong>digitalSignature<\/strong>&#8221; key usage. For that purpose, you just have to edit the line 15 from the above request file from &#8220;<strong>keyUsage = keyEncipherment, dataEncipherment<\/strong>&#8221; to &#8220;<strong>keyUsage = keyEncipherment, dataEncipherment, digitalSignature<\/strong>&#8220;. The result is this one:<\/p>\n\n\n<div class=\"wp-block-syntaxhighlighter-code \"><pre class=\"brush: bash; highlight: [15]; title: ; notranslate\" title=\"\">\n&#x5B;req]\ndistinguished_name = dn\nx509_extensions = v3_req\nprompt = no\n\n&#x5B;dn]\nC = CH\nST = JU\nL = Delemont\nO = dbi services\nOU = IT\nCN = dms.poc.it.dbi-services.com\n\n&#x5B;v3_req]\nkeyUsage = keyEncipherment, dataEncipherment, digitalSignature\nextendedKeyUsage = serverAuth\nsubjectAltName = @alt_names\n\n&#x5B;alt_names]\nDNS.1 = dms.poc.it.dbi-services.com\nDNS.2 = alfresco1.it.dbi-services.com\nDNS.3 = alfresco2.it.dbi-services.com\nDNS.4 = solr1.it.dbi-services.com\nDNS.5 = solr2.it.dbi-services.com\n<\/pre><\/div>\n\n\n<p>Then re-execute the shell script (or just the OpenSSL command) and replace the certificate in your Web Server \/ Application Server to fix the issue for good. In my case, my Solr URL was reachable again through Chrome:<\/p>\n\n\n\n<figure data-wp-context=\"{&quot;imageId&quot;:&quot;69f3606b8a14c&quot;}\" data-wp-interactive=\"core\/image\" data-wp-key=\"69f3606b8a14c\" class=\"wp-block-image size-large wp-lightbox-container\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"318\" data-wp-class--hide=\"state.isContentHidden\" data-wp-class--show=\"state.isContentVisible\" data-wp-init=\"callbacks.setButtonStyles\" data-wp-on--click=\"actions.showLightbox\" data-wp-on--load=\"callbacks.setButtonStyles\" data-wp-on-window--resize=\"callbacks.setButtonStyles\" src=\"https:\/\/www.dbi-services.com\/blog\/wp-content\/uploads\/sites\/2\/2024\/06\/sslcert-fixed-1024x318.png\" alt=\"\" class=\"wp-image-33480\" srcset=\"https:\/\/www.dbi-services.com\/blog\/wp-content\/uploads\/sites\/2\/2024\/06\/sslcert-fixed-1024x318.png 1024w, https:\/\/www.dbi-services.com\/blog\/wp-content\/uploads\/sites\/2\/2024\/06\/sslcert-fixed-300x93.png 300w, https:\/\/www.dbi-services.com\/blog\/wp-content\/uploads\/sites\/2\/2024\/06\/sslcert-fixed-768x238.png 768w, https:\/\/www.dbi-services.com\/blog\/wp-content\/uploads\/sites\/2\/2024\/06\/sslcert-fixed-1536x477.png 1536w, https:\/\/www.dbi-services.com\/blog\/wp-content\/uploads\/sites\/2\/2024\/06\/sslcert-fixed-2048x636.png 2048w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><button\n\t\t\tclass=\"lightbox-trigger\"\n\t\t\ttype=\"button\"\n\t\t\taria-haspopup=\"dialog\"\n\t\t\taria-label=\"Enlarge\"\n\t\t\tdata-wp-init=\"callbacks.initTriggerButton\"\n\t\t\tdata-wp-on--click=\"actions.showLightbox\"\n\t\t\tdata-wp-style--right=\"state.imageButtonRight\"\n\t\t\tdata-wp-style--top=\"state.imageButtonTop\"\n\t\t>\n\t\t\t<svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"12\" height=\"12\" fill=\"none\" viewBox=\"0 0 12 12\">\n\t\t\t\t<path fill=\"#fff\" d=\"M2 0a2 2 0 0 0-2 2v2h1.5V2a.5.5 0 0 1 .5-.5h2V0H2Zm2 10.5H2a.5.5 0 0 1-.5-.5V8H0v2a2 2 0 0 0 2 2h2v-1.5ZM8 12v-1.5h2a.5.5 0 0 0 .5-.5V8H12v2a2 2 0 0 1-2 2H8Zm2-12a2 2 0 0 1 2 2v2h-1.5V2a.5.5 0 0 0-.5-.5H8V0h2Z\" \/>\n\t\t\t<\/svg>\n\t\t<\/button><\/figure>\n\n\n\n<p><\/p>\n","protected":false},"excerpt":{"rendered":"<p>If you are using Self-Signed SSL Certificates and recently updated your Google Chrome \/ Edge browser, you might have come across a new kind of error, i.e: &#8220;ERR_SSL_KEY_USAGE_INCOMPATIBLE&#8221;. In my case, it happened a few months ago on an Alfresco installation, and more specifically the Apache Solr URL. Since this URL is mostly used\/accessible by [&hellip;]<\/p>\n","protected":false},"author":20,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[197],"tags":[3169,1149,3375,251,454,1150,1269,382],"type_dbi":[3376],"class_list":["post-33478","post","type-post","status-publish","format-standard","hentry","category-application-integration-middleware","tag-alfresco","tag-certificate","tag-edge","tag-firefox","tag-google-chrome","tag-self-signed","tag-solr","tag-ssl","type-ssl"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v27.2 (Yoast SEO v27.5) - https:\/\/yoast.com\/product\/yoast-seo-premium-wordpress\/ -->\n<title>Self-Signed SSL Certificate is blocked on Chrome or Edge - dbi Blog<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.dbi-services.com\/blog\/self-signed-ssl-certificate-is-blocked-on-chrome-or-edge\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Self-Signed SSL Certificate is blocked on Chrome or Edge\" \/>\n<meta property=\"og:description\" content=\"If you are using Self-Signed SSL Certificates and recently updated your Google Chrome \/ Edge browser, you might have come across a new kind of error, i.e: &#8220;ERR_SSL_KEY_USAGE_INCOMPATIBLE&#8221;. In my case, it happened a few months ago on an Alfresco installation, and more specifically the Apache Solr URL. Since this URL is mostly used\/accessible by [&hellip;]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.dbi-services.com\/blog\/self-signed-ssl-certificate-is-blocked-on-chrome-or-edge\/\" \/>\n<meta property=\"og:site_name\" content=\"dbi Blog\" \/>\n<meta property=\"article:published_time\" content=\"2024-06-08T19:43:23+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-02-25T20:27:15+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.dbi-services.com\/blog\/wp-content\/uploads\/sites\/2\/2024\/06\/sslcert-issue.png\" \/>\n\t<meta property=\"og:image:width\" content=\"1303\" \/>\n\t<meta property=\"og:image:height\" content=\"556\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"Morgan Patou\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@MorganPatou\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Morgan Patou\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.dbi-services.com\\\/blog\\\/self-signed-ssl-certificate-is-blocked-on-chrome-or-edge\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.dbi-services.com\\\/blog\\\/self-signed-ssl-certificate-is-blocked-on-chrome-or-edge\\\/\"},\"author\":{\"name\":\"Morgan Patou\",\"@id\":\"https:\\\/\\\/www.dbi-services.com\\\/blog\\\/#\\\/schema\\\/person\\\/c4d05b25843a9bc2ab20415dae6bd2d8\"},\"headline\":\"Self-Signed SSL Certificate is blocked on Chrome or Edge\",\"datePublished\":\"2024-06-08T19:43:23+00:00\",\"dateModified\":\"2026-02-25T20:27:15+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.dbi-services.com\\\/blog\\\/self-signed-ssl-certificate-is-blocked-on-chrome-or-edge\\\/\"},\"wordCount\":400,\"commentCount\":0,\"image\":{\"@id\":\"https:\\\/\\\/www.dbi-services.com\\\/blog\\\/self-signed-ssl-certificate-is-blocked-on-chrome-or-edge\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.dbi-services.com\\\/blog\\\/wp-content\\\/uploads\\\/sites\\\/2\\\/2024\\\/06\\\/sslcert-issue-1024x437.png\",\"keywords\":[\"Alfresco\",\"Certificate\",\"Edge\",\"Firefox\",\"Google chrome\",\"Self-Signed\",\"Solr\",\"SSL\"],\"articleSection\":[\"Application integration &amp; Middleware\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/www.dbi-services.com\\\/blog\\\/self-signed-ssl-certificate-is-blocked-on-chrome-or-edge\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.dbi-services.com\\\/blog\\\/self-signed-ssl-certificate-is-blocked-on-chrome-or-edge\\\/\",\"url\":\"https:\\\/\\\/www.dbi-services.com\\\/blog\\\/self-signed-ssl-certificate-is-blocked-on-chrome-or-edge\\\/\",\"name\":\"Self-Signed SSL Certificate is blocked on Chrome or Edge - dbi Blog\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.dbi-services.com\\\/blog\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.dbi-services.com\\\/blog\\\/self-signed-ssl-certificate-is-blocked-on-chrome-or-edge\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.dbi-services.com\\\/blog\\\/self-signed-ssl-certificate-is-blocked-on-chrome-or-edge\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.dbi-services.com\\\/blog\\\/wp-content\\\/uploads\\\/sites\\\/2\\\/2024\\\/06\\\/sslcert-issue-1024x437.png\",\"datePublished\":\"2024-06-08T19:43:23+00:00\",\"dateModified\":\"2026-02-25T20:27:15+00:00\",\"author\":{\"@id\":\"https:\\\/\\\/www.dbi-services.com\\\/blog\\\/#\\\/schema\\\/person\\\/c4d05b25843a9bc2ab20415dae6bd2d8\"},\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.dbi-services.com\\\/blog\\\/self-signed-ssl-certificate-is-blocked-on-chrome-or-edge\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.dbi-services.com\\\/blog\\\/self-signed-ssl-certificate-is-blocked-on-chrome-or-edge\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.dbi-services.com\\\/blog\\\/self-signed-ssl-certificate-is-blocked-on-chrome-or-edge\\\/#primaryimage\",\"url\":\"https:\\\/\\\/www.dbi-services.com\\\/blog\\\/wp-content\\\/uploads\\\/sites\\\/2\\\/2024\\\/06\\\/sslcert-issue.png\",\"contentUrl\":\"https:\\\/\\\/www.dbi-services.com\\\/blog\\\/wp-content\\\/uploads\\\/sites\\\/2\\\/2024\\\/06\\\/sslcert-issue.png\",\"width\":1303,\"height\":556},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.dbi-services.com\\\/blog\\\/self-signed-ssl-certificate-is-blocked-on-chrome-or-edge\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Accueil\",\"item\":\"https:\\\/\\\/www.dbi-services.com\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Self-Signed SSL Certificate is blocked on Chrome or Edge\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.dbi-services.com\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/www.dbi-services.com\\\/blog\\\/\",\"name\":\"dbi Blog\",\"description\":\"\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.dbi-services.com\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.dbi-services.com\\\/blog\\\/#\\\/schema\\\/person\\\/c4d05b25843a9bc2ab20415dae6bd2d8\",\"name\":\"Morgan Patou\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/5d7f5bec8b597db68a09107a6f5309e3870d6296ef94fb10ead4b09454ca67e5?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/5d7f5bec8b597db68a09107a6f5309e3870d6296ef94fb10ead4b09454ca67e5?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/5d7f5bec8b597db68a09107a6f5309e3870d6296ef94fb10ead4b09454ca67e5?s=96&d=mm&r=g\",\"caption\":\"Morgan Patou\"},\"description\":\"Morgan Patou has over 12 years of experience in Enterprise Content Management (ECM) systems, with a strong focus in recent years on platforms such as Alfresco, Documentum, and M-Files. He specializes in the architecture, setup, customization, and maintenance of ECM infrastructures in complex &amp; critical environments. Morgan is well-versed in both engineering and operations aspects, including high availability design, system integration, and lifecycle management. He also has a solid foundation in open-source and proprietary technologies - ranging from Apache, OpenLDAP or Kerberos to enterprise-grade systems like WebLogic. Morgan Patou holds an Engineering Degree in Computer Science from ENSISA (\u00c9cole Nationale Sup\u00e9rieure d'Ing\u00e9nieurs Sud Alsace) in Mulhouse, France. He is Alfresco Content Services Certified Administrator (ACSCA), Alfresco Content Services Certified Engineer (ACSCE) as well as OpenText Documentum Certified Administrator. His industry experience spans the Public Sector, IT Services, Financial Services\\\/Banking, and the Pharmaceutical industry.\",\"sameAs\":[\"https:\\\/\\\/blog.dbi-services.com\\\/author\\\/morgan-patou\\\/\",\"https:\\\/\\\/x.com\\\/MorganPatou\"],\"url\":\"https:\\\/\\\/www.dbi-services.com\\\/blog\\\/author\\\/morgan-patou\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Self-Signed SSL Certificate is blocked on Chrome or Edge - dbi Blog","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.dbi-services.com\/blog\/self-signed-ssl-certificate-is-blocked-on-chrome-or-edge\/","og_locale":"en_US","og_type":"article","og_title":"Self-Signed SSL Certificate is blocked on Chrome or Edge","og_description":"If you are using Self-Signed SSL Certificates and recently updated your Google Chrome \/ Edge browser, you might have come across a new kind of error, i.e: &#8220;ERR_SSL_KEY_USAGE_INCOMPATIBLE&#8221;. In my case, it happened a few months ago on an Alfresco installation, and more specifically the Apache Solr URL. Since this URL is mostly used\/accessible by [&hellip;]","og_url":"https:\/\/www.dbi-services.com\/blog\/self-signed-ssl-certificate-is-blocked-on-chrome-or-edge\/","og_site_name":"dbi Blog","article_published_time":"2024-06-08T19:43:23+00:00","article_modified_time":"2026-02-25T20:27:15+00:00","og_image":[{"width":1303,"height":556,"url":"https:\/\/www.dbi-services.com\/blog\/wp-content\/uploads\/sites\/2\/2024\/06\/sslcert-issue.png","type":"image\/png"}],"author":"Morgan Patou","twitter_card":"summary_large_image","twitter_creator":"@MorganPatou","twitter_misc":{"Written by":"Morgan Patou","Est. reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.dbi-services.com\/blog\/self-signed-ssl-certificate-is-blocked-on-chrome-or-edge\/#article","isPartOf":{"@id":"https:\/\/www.dbi-services.com\/blog\/self-signed-ssl-certificate-is-blocked-on-chrome-or-edge\/"},"author":{"name":"Morgan Patou","@id":"https:\/\/www.dbi-services.com\/blog\/#\/schema\/person\/c4d05b25843a9bc2ab20415dae6bd2d8"},"headline":"Self-Signed SSL Certificate is blocked on Chrome or Edge","datePublished":"2024-06-08T19:43:23+00:00","dateModified":"2026-02-25T20:27:15+00:00","mainEntityOfPage":{"@id":"https:\/\/www.dbi-services.com\/blog\/self-signed-ssl-certificate-is-blocked-on-chrome-or-edge\/"},"wordCount":400,"commentCount":0,"image":{"@id":"https:\/\/www.dbi-services.com\/blog\/self-signed-ssl-certificate-is-blocked-on-chrome-or-edge\/#primaryimage"},"thumbnailUrl":"https:\/\/www.dbi-services.com\/blog\/wp-content\/uploads\/sites\/2\/2024\/06\/sslcert-issue-1024x437.png","keywords":["Alfresco","Certificate","Edge","Firefox","Google chrome","Self-Signed","Solr","SSL"],"articleSection":["Application integration &amp; Middleware"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/www.dbi-services.com\/blog\/self-signed-ssl-certificate-is-blocked-on-chrome-or-edge\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/www.dbi-services.com\/blog\/self-signed-ssl-certificate-is-blocked-on-chrome-or-edge\/","url":"https:\/\/www.dbi-services.com\/blog\/self-signed-ssl-certificate-is-blocked-on-chrome-or-edge\/","name":"Self-Signed SSL Certificate is blocked on Chrome or Edge - dbi Blog","isPartOf":{"@id":"https:\/\/www.dbi-services.com\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.dbi-services.com\/blog\/self-signed-ssl-certificate-is-blocked-on-chrome-or-edge\/#primaryimage"},"image":{"@id":"https:\/\/www.dbi-services.com\/blog\/self-signed-ssl-certificate-is-blocked-on-chrome-or-edge\/#primaryimage"},"thumbnailUrl":"https:\/\/www.dbi-services.com\/blog\/wp-content\/uploads\/sites\/2\/2024\/06\/sslcert-issue-1024x437.png","datePublished":"2024-06-08T19:43:23+00:00","dateModified":"2026-02-25T20:27:15+00:00","author":{"@id":"https:\/\/www.dbi-services.com\/blog\/#\/schema\/person\/c4d05b25843a9bc2ab20415dae6bd2d8"},"breadcrumb":{"@id":"https:\/\/www.dbi-services.com\/blog\/self-signed-ssl-certificate-is-blocked-on-chrome-or-edge\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.dbi-services.com\/blog\/self-signed-ssl-certificate-is-blocked-on-chrome-or-edge\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.dbi-services.com\/blog\/self-signed-ssl-certificate-is-blocked-on-chrome-or-edge\/#primaryimage","url":"https:\/\/www.dbi-services.com\/blog\/wp-content\/uploads\/sites\/2\/2024\/06\/sslcert-issue.png","contentUrl":"https:\/\/www.dbi-services.com\/blog\/wp-content\/uploads\/sites\/2\/2024\/06\/sslcert-issue.png","width":1303,"height":556},{"@type":"BreadcrumbList","@id":"https:\/\/www.dbi-services.com\/blog\/self-signed-ssl-certificate-is-blocked-on-chrome-or-edge\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Accueil","item":"https:\/\/www.dbi-services.com\/blog\/"},{"@type":"ListItem","position":2,"name":"Self-Signed SSL Certificate is blocked on Chrome or Edge"}]},{"@type":"WebSite","@id":"https:\/\/www.dbi-services.com\/blog\/#website","url":"https:\/\/www.dbi-services.com\/blog\/","name":"dbi Blog","description":"","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.dbi-services.com\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/www.dbi-services.com\/blog\/#\/schema\/person\/c4d05b25843a9bc2ab20415dae6bd2d8","name":"Morgan Patou","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/5d7f5bec8b597db68a09107a6f5309e3870d6296ef94fb10ead4b09454ca67e5?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/5d7f5bec8b597db68a09107a6f5309e3870d6296ef94fb10ead4b09454ca67e5?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/5d7f5bec8b597db68a09107a6f5309e3870d6296ef94fb10ead4b09454ca67e5?s=96&d=mm&r=g","caption":"Morgan Patou"},"description":"Morgan Patou has over 12 years of experience in Enterprise Content Management (ECM) systems, with a strong focus in recent years on platforms such as Alfresco, Documentum, and M-Files. He specializes in the architecture, setup, customization, and maintenance of ECM infrastructures in complex &amp; critical environments. Morgan is well-versed in both engineering and operations aspects, including high availability design, system integration, and lifecycle management. He also has a solid foundation in open-source and proprietary technologies - ranging from Apache, OpenLDAP or Kerberos to enterprise-grade systems like WebLogic. Morgan Patou holds an Engineering Degree in Computer Science from ENSISA (\u00c9cole Nationale Sup\u00e9rieure d'Ing\u00e9nieurs Sud Alsace) in Mulhouse, France. He is Alfresco Content Services Certified Administrator (ACSCA), Alfresco Content Services Certified Engineer (ACSCE) as well as OpenText Documentum Certified Administrator. His industry experience spans the Public Sector, IT Services, Financial Services\/Banking, and the Pharmaceutical industry.","sameAs":["https:\/\/blog.dbi-services.com\/author\/morgan-patou\/","https:\/\/x.com\/MorganPatou"],"url":"https:\/\/www.dbi-services.com\/blog\/author\/morgan-patou\/"}]}},"_links":{"self":[{"href":"https:\/\/www.dbi-services.com\/blog\/wp-json\/wp\/v2\/posts\/33478","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.dbi-services.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.dbi-services.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.dbi-services.com\/blog\/wp-json\/wp\/v2\/users\/20"}],"replies":[{"embeddable":true,"href":"https:\/\/www.dbi-services.com\/blog\/wp-json\/wp\/v2\/comments?post=33478"}],"version-history":[{"count":10,"href":"https:\/\/www.dbi-services.com\/blog\/wp-json\/wp\/v2\/posts\/33478\/revisions"}],"predecessor-version":[{"id":43179,"href":"https:\/\/www.dbi-services.com\/blog\/wp-json\/wp\/v2\/posts\/33478\/revisions\/43179"}],"wp:attachment":[{"href":"https:\/\/www.dbi-services.com\/blog\/wp-json\/wp\/v2\/media?parent=33478"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.dbi-services.com\/blog\/wp-json\/wp\/v2\/categories?post=33478"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.dbi-services.com\/blog\/wp-json\/wp\/v2\/tags?post=33478"},{"taxonomy":"type","embeddable":true,"href":"https:\/\/www.dbi-services.com\/blog\/wp-json\/wp\/v2\/type_dbi?post=33478"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}