Skip to content
SSL Error · Chrome, Edge, Brave, Opera

SSL version or cipher mismatch

ERR_SSL_VERSION_OR_CIPHER_MISMATCH

The browser and server share no common TLS version or cipher suite, so they can't agree on how to encrypt the connection.

What it means

A TLS handshake needs both sides to support at least one common protocol version and one common cipher suite. ERR_SSL_VERSION_OR_CIPHER_MISMATCH means that overlap is empty. Modern browsers have dropped old, weak protocols like TLS 1.0 and 1.1 and insecure ciphers, so a server that only offers those has nothing left to negotiate with an up-to-date browser.

When it happens

This usually involves an older server stuck on deprecated TLS versions or weak ciphers, hit by a current browser that refuses them. It also appears the other way around: an old browser or device that doesn't support TLS 1.2 or 1.3 trying to reach a modern, hardened server. Misconfigured cipher lists after a security hardening pass can accidentally leave no overlap with real-world clients.

How to fix it

  1. Check which TLS versions and ciphers the server offers, then enable TLS 1.2 and TLS 1.3 with a modern cipher suite.
  2. Avoid over-restricting the cipher list so tightly that common, current clients are excluded.
  3. If the problem is an old client, update the browser or operating system so it supports modern TLS.
  4. Retest the handshake after each config change to confirm a working overlap exists.
Check it with Sitewell

Check this site’s certificate

Paste the domain and Sitewell shows the certificate’s expiry, the hostnames it covers, the chain, and the issuer — enough to pin down what triggered this error. Free, no signup.

Related errors