---
title: "ERR_SSL_VERSION_OR_CIPHER_MISMATCH on Chrome: cause and fix"
description: "Chrome dropped TLS 1.0 and 1.1 and refuses RC4 and 3DES, so a server that still works in curl or an internal tool fails only in the browser."
canonical: "https://lemwatch.com/errors/err-ssl-version-or-cipher-mismatch/on-chrome"
source: "https://lemwatch.com"
---

# ERR_SSL_VERSION_OR_CIPHER_MISMATCH on Chrome

> Chrome dropped TLS 1.0 and 1.1 and refuses RC4 and 3DES, so a server that still works in curl or an internal tool fails only in the browser.

## Why it happens on Chrome

 Chrome dropped TLS 1.0 and 1.1 and refuses RC4 and 3DES, so a server that still works in curl or an internal tool fails only in the browser.

## The fix on Chrome

 Run the SSL check below to see the highest protocol the server actually offers. If the answer is TLS 1.1 or lower, no browser fix exists — the server must enable TLS 1.2.

## If that didn't fix it

 Chrome has its own failure mode, but ERR_SSL_VERSION_OR_CIPHER_MISMATCH has a wider set of causes. The most common one overall is: The server only supports TLS 1.0 or 1.1.

 Enable TLS 1.2 and 1.3. On nginx: `ssl_protocols TLSv1.2 TLSv1.3;` then reload.

## Check your own domain

 The SSL check enumerates exactly which protocol versions and suites the server accepts, turning guesswork into a list.

## Frequently asked questions

### Why does ERR_SSL_VERSION_OR_CIPHER_MISMATCH happen on Chrome?

 Chrome dropped TLS 1.0 and 1.1 and refuses RC4 and 3DES, so a server that still works in curl or an internal tool fails only in the browser.

### How do I fix ERR_SSL_VERSION_OR_CIPHER_MISMATCH on Chrome?

 Run the SSL check below to see the highest protocol the server actually offers. If the answer is TLS 1.1 or lower, no browser fix exists — the server must enable TLS 1.2.

### What does ERR_SSL_VERSION_OR_CIPHER_MISMATCH mean?

 The browser and server have no protocol version or cipher suite in common, so the handshake ends before it starts. Almost always an origin still pinned to TLS 1.0/1.1 or an ancient cipher list.


## Related

- [All causes of ERR_SSL_VERSION_OR_CIPHER_MISMATCH](https://lemwatch.com/errors/err-ssl-version-or-cipher-mismatch)
- [All website error codes](https://lemwatch.com/errors)
- [ERR_SSL_VERSION_OR_CIPHER_MISMATCH on Nginx](https://lemwatch.com/errors/err-ssl-version-or-cipher-mismatch/in-nginx)
- [ERR_SSL_VERSION_OR_CIPHER_MISMATCH on Cloudflare](https://lemwatch.com/errors/err-ssl-version-or-cipher-mismatch/in-cloudflare)
- [Free SSL certificate check](https://lemwatch.com/tools/ssl-checker)
- [ERR_TOO_MANY_REDIRECTS: The page is stuck in a redirect loop](https://lemwatch.com/errors/err-too-many-redirects)
- [Website monitoring overview](https://lemwatch.com/website-monitoring)