How to fix
ERR_SSL_KEY_USAGE_INCOMPATIBLE error in Chrome or Edge
on Windows

I see ERR_SSL_KEY_USAGE_INCOMPATIBLE error whenever I try visiting some websites in Chrome and Edge. This is quite strange considering that I'm trying to access trusted websites such as Facebook or YouTube. What is going on?

The Chrome or Edge ERR_SSL_KEY_USAGE_INCOMPATIBLE error appears when, for some reason, the browser can't establish a secure connection to a website because of incompatible key usage parameters of the SSL certificate.

Most often, this kind of error provides evidence that the SSL certificate has not been installed correctly on the site or does not contain the key usage extension like the Digital Signature. All that means modern web browsers cannot verify the certificate, and that keeps them from accessing the site.

ERR_SSL_KEY_USAGE_INCOMPATIBLE error happens with many users while connecting to websites that have self-signed SSL. This is especially the case when those are generated without the key usage extensions required. That is very common in scenarios involving older configuration of certificates, where the same fail to meet new standards of security introduced as updates in Chrome and Edge.

Another potential causes of the ERR_SSL_KEY_USAGE_INCOMPATIBLE error are older versions of browsers, wrong system time, and restrictions set by firewalls. The first thing should be to check that SSL certificates are correctly configured.

Other probable solutions include updating your browser and changing various system settings such as date and time. For more persistent issues, the only way to fix this is regenerating the SSL certificate with the right key usage parameters.

If you need steps on how to resolve this issue, then you can refer to the following steps. Also, a good [d1] repair tool may be used to check and fix such system-level issues that may be causing the SSL error, so troubleshoot much faster.

Fix 1. Update your browser

One of the most common reasons for the ERR_SSL_KEY_USAGE_INCOMPATIBLE error is using an outdated browser version. Updating your browser ensures it complies with the latest security protocols.

Google Chrome

• Click on the three vertical dots in the top-right corner of the browser.
• Select Help > About Google Chrome.
• Wait till the browser is updated and click Relaunch.

MS Edge

• Open Microsoft Edge.
• Click on three horizontal dots (Settings and more) at the top-right corner of the browser.
• Select Settings.
• Click on Help and Feedback > About Microsoft Edge on the left.
• The browser should now automatically be updated to the latest version.

Fix 2. Check and correct your system time

Wrong system time might lead to SSL certificate problems. Check if your computer's date and time are correct.

• Type in Control Panel in Windows search and press Enter.
• Go to Clock and Region and click on Date and Time.
• Pick the Internet Time tab and select Change Settings.
• Make sure that Synchronize with an Internet time server box is ticked.
• Click Update now and OK.

Fix 3. Disable problematic extensions

Some browser add-ons like security tools or VPNs may block SSL certificate checks.

Google Chrome

• Open Settings and go to More tools.
• Select Extensions.
• Here, you will find the list of the installed extensions.
• You can either delete them by pressing Remove or toggling the switch to disable them.

MS Edge

• Click the Extensions button next to the address bar.
• Select Manage extensions.
• Here, you can either Remove the extension or disable it by toggling the switch.

Fix 4. Regenerate the SSL certificate

Website administrators facing this problem need to regenerate the SSL certificate with the right key usage settings like Digital Signature.

• Type PowerShell in Windows search.
• Right-click on the result and select Run as an administrator.
• Run the command:
  New-SelfSignedCertificate -DnsName "YourServerName" -CertStoreLocation "Cert:\LocalMachine\My" -KeyUsage DigitalSignature, KeyEncipherment
• Apply the new certificate in your IIS or server settings.

Fix 5. Bypass the error (temporarily)

If you’re visiting a trusted site but getting this error, you can bypass it for temporary access.

• Click Advanced on the error screen in Chrome or Edge.
• Select Proceed to [website] (unsafe).
  Note: This should only be done for trusted sites.

Fix 6. Clear SSL Slate

Clearing the SSL Slate removes any cached SSL certificates that your computer has stored.

• Press Win + R to open the Run dialog.
• Type inetcpl.cpl and press Enter. This opens the Internet Properties window.
• Go to the Content tab.
• Under the Certificates section, click on Clear SSL state.
• You will see a confirmation that the SSL cache has been cleared.

Fix 7. Clear your browser’s cache

Cached files can sometimes cause conflicts with updated SSL certificates, leading to the error.

Google Chrome

• Click on Menu and select Settings.
• Under Privacy and security, pick Clear browsing data.
• Select All time under the time range.
• Select Browsing history, Cookies and other site data, as well as Cached images and files.
• Click Clear data.

MS Edge

• Open Edge and click on three horizontal dots (Settings and more).
• Select Settings and then pick Privacy, search, and services on the left.
• On the right side of the window, scroll down to find the Clear browsing data section.
• Click Choose what to clear.
• Select All time under the time range.
• Pick all the sections and click Clear now.

Fix 8. Check the firewall or antivirus settings

Firewalls or antivirus software can block SSL connections, causing this error. Temporarily disabling these security programs may help diagnose the issue.

• Right-click your antivirus software icon in the system tray and disable it.
• Press Win + S and type "firewall." Select Windows Defender Firewall.
• Click on Turn Windows Defender Firewall on or off.
• Select Turn off Windows Defender Firewall for both private and public network settings. Remember to turn these back on after testing.