---
title: "ERR_SSL_OBSOLETE_VERSION: causes and how to fix it"
description: "A warning rather than a hard failure: the connection succeeded but negotiated TLS 1.0 or 1.1, which browsers flag as obsolete and will eventually refuse…"
canonical: "https://lemwatch.com/errors/err-ssl-obsolete-version"
source: "https://lemwatch.com"
---

# ERR_SSL_OBSOLETE_VERSION: The site uses an obsolete TLS version

> A warning rather than a hard failure: the connection succeeded but negotiated TLS 1.0 or 1.1, which browsers flag as obsolete and will eventually refuse outright.

## Short answer

 A warning rather than a hard failure: the connection succeeded but negotiated TLS 1.0 or 1.1, which browsers flag as obsolete and will eventually refuse outright.

## What ERR_SSL_OBSOLETE_VERSION means

 Browsers surface this to give operators warning before the protocol is removed. The page still loads today. It will stop loading when the browser drops support, usually without further notice.

## Causes and fixes, most likely first

- The origin's TLS configuration has not been updated since before TLS 1.2 became the baseline. Enable TLS 1.2 and 1.3 and disable 1.0/1.1. Confirm with an external check that 1.2 is actually being negotiated afterwards.
- A load balancer or WAF in front of the origin is terminating TLS with old settings. Update the TLS policy on the load balancer — the origin's own configuration is irrelevant when something in front terminates first.

## How to stop it happening again

- Monitor the negotiated TLS version continuously, not just at deploy time.

## Check your own domain

 The SSL check reports the negotiated protocol version, confirming whether the fix actually took effect at the edge that answers.

## Frequently asked questions

### Is ERR_SSL_OBSOLETE_VERSION blocking my visitors?

 Not yet — it is a warning. It becomes a hard failure when the browser removes the protocol, so treat it as a deadline rather than an outage.


## Related

- [All website error codes](https://lemwatch.com/errors)
- [ERR_SSL_VERSION_OR_CIPHER_MISMATCH](https://lemwatch.com/errors/err-ssl-version-or-cipher-mismatch)
- [ERR_SSL_PROTOCOL_ERROR](https://lemwatch.com/errors/err-ssl-protocol-error)
- [Free SSL certificate check](https://lemwatch.com/tools/ssl-checker)
- [ERR_QUIC_PROTOCOL_ERROR: The QUIC / HTTP3 connection failed](https://lemwatch.com/errors/err-quic-protocol-error)
- [Website monitoring overview](https://lemwatch.com/website-monitoring)