I'm getting a NET::ERR_CERT_AUTHORITY_INVALID for the following google sponsored website: https://viz.mediapipe.dev/

Subject: mediapipe.dev
Issuer: GTS CA 1O1
Expires on: 8 Mar 2021

I get this in Chrome only. In both Chromium and Firefox (on Ubuntu OS) the certificate is deemed valid and the page loads without any security related warnings. How would you go about figuring whether there's a real issue or security situation v.s. just a bug in Chrome?


The site is improperly setup. It only serves the leaf certificate, but does not serve the necessary chain certificate for the intermediate CA "GTS CA 1O1". See this SSLLabs report:

enter image description here

Browser usually try to work around such issues, but these workarounds will not always succeed. For example an existing Firefox profile will probably have cached the missing intermediate certificates and the workaround will work. With a fresh Firefox profile it will fail though:

enter image description here

I'm note sure why it fails with Chrome though but still succeeds with Chromium since I would expect both to apply the same kind of workarounds. Anyways, it should be fixed on the server side since it also fails with Python, curl etc.

  • Great find! The fact that Firefox caches every intermediate that it sees is great for performance, but makes this kind of debugging really hard. ... "but it works on my machine" – Mike Ounsworth Jan 19 at 22:24

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.