Skip to content
Chat history
New chat
Ctrl
Shift
O
Search chats
Ctrl
K
Images
Apps
Codex
Projects
GPTs
Symbi
Big Surprise Button
Explore GPTs
Your chats
Yseeku Platform Progress
File Analysis Options
Continue.dev Setup Windows
Yseeku.com Website Review
SYMBI Archives Overview
Pisces Sun Reading
Setup Free Coding Assistant
Project SYMBI Overview
Project Evolution Insights
Emergent AI Behavior
SYMBI Project Status Update
Symbi vs ChatGPT
Fixing SSL Error Vercel
Accessing Shared Link
Dynamic linguistic vector steering
SYMBI transition summary
Process unredacted archive
GitHub file issue
SYMBI Evolution Partnership
Case study analysis
Repository SYMBI-SYNERGY Overview
Conversation recap
Introduction and clarification
Show browser for login
Conversation link assistance
Agent mode function
Database setup advice
Symbi project discussion
Repo analysis summary
Connect GPT to Telegram
Stephen Aitken
Free
Upgrade
Get Plus
ChatGPT
Get Plus
Share
how do i fix net::ERR_CERT_COMMON_NAME_INVALID on my website? is on vercel
That error means
the SSL certificate presented by your site doesnât match the domain name being visited
. On Vercel this is usually quick to fix, but the cause matters.
Below is the
practical, Vercel-specific checklist
(ordered from most common â least).
1. Check the exact domain thatâs failing (most common)
The cert must match
exactly
.
Common mismatches:
www.example.com
vs
example.com
https://example.com
works but
https://www.example.com
fails
Subdomain missing from Vercel (
app.
,
beta.
, etc.)
Fix
Go to
Vercel Dashboard â Project â Settings â Domains
Make sure
every variant
you expect works is listed:
example.com
www.example.com
(if used)
Any subdomains
ð Vercel issues certs
per-domain
, not âautomatically for all variantsâ.
2. Domain not fully verified yet
If DNS is partially wrong, Vercel may fall back to a
default cert
, causing this error.
Fix
In
Settings â Domains
, look for:
â âInvalid Configurationâ
â³ âPending Verificationâ
Click
âView DNS Recordsâ
and ensure:
A / CNAME records match
exactly
what Vercel shows
No extra conflicting records
Typical setup:
example.com
â A record to
76.76.21.21
www.example.com
â CNAME to
cname.vercel-dns.com
3. Old / conflicting DNS records (very common)
This happens if the domain was previously on:
Netlify
Cloudflare
AWS
Another Vercel project
Fix
At your DNS provider:
Remove
all old A, AAAA, and CNAME records
There should be
only one target per hostname
â ï¸ Especially check for:
AAAA
(IPv6) records
Hidden
@
records
Cloudflare âorange cloudâ proxy (see below)
4. Cloudflare proxy causing cert mismatch
If youâre using Cloudflare and itâs set to
Proxied (orange cloud)
, Cloudflare presents
its
cert â which may not match.
Quick test
Temporarily set:
DNS â
Proxy status: DNS only (grey cloud)
If the error disappears, that was the issue.
Proper fix
Either:
Use
Cloudflare Full (Strict)
SSL
Or let Vercel handle SSL directly (recommended unless you need CF features)
5. Certificate hasnât finished provisioning
Vercel certs usually issue in minutes, but sometimes hang.
Fix
Remove the affected domain in Vercel
Re-add it
Wait ~5â10 minutes
Hard refresh (or test in incognito)
6. Browser / OS cache (rare but real)
Especially on macOS.
Test
Open in
Incognito
Test from another device
Run:
Bash
openssl
s_client
-connect
example.com:443
-servername
example.com
Check
CN=
or
SAN=
values.
7. Youâre hitting the wrong project
If multiple Vercel projects use similar domains, you might be routing to the wrong one.
Fix
Ensure:
Domain is assigned to
only one Vercel project
No âshadowâ deployments using the same hostname
Fast diagnosis (recommended)
Tell me:
The
exact domain
showing the error
Whether youâre using
Cloudflare
Screenshot or text from
Vercel â Domains status
I can pinpoint the exact misconfiguration in one pass.
TL;DR (90% of cases)
You added
example.com
but are visiting
www.example.com
, or DNS is pointing to the wrong place.
Fix the domain entry in Vercel and clean up DNS â the cert error disappears automatically.
ChatGPT said:
Great, this screenshot explains
exactly
why youâre getting
net::ERR_CERT_COMMON_NAME_INVALID
.
You currently have
GitHub Pages and Vercel fighting over the same domain
.
Whatâs wrong (root cause)
ð´ Your apex/root domain (
example.com
) is pointing to
GitHub Pages
These 4 records are the smoking gun:
A 185.199.108.153
A 185.199.109.153
A 185.199.110.153
A 185.199.111.153
Those IPs are
GitHub Pages
.
But at the same time:
ð¢ Your
www
+ wildcard are pointing to
Vercel
www â CNAME â *.vercel-dns.com
* â ALIAS â cname.vercel-dns.com
Result
Browser sometimes hits
GitHubâs SSL cert
Sometimes expects
Vercelâs cert
Certificate CN/SAN doesnât match â â
COMMON_NAME_INVALID
This is a
classic mixed-hosting SSL failure
.
The correct fix (choose ONE hosting target)
â
Option A â Use
Vercel for everything
(recommended)
1.
Delete ALL GitHub Pages A records
Remove these entirely:
185.199.108.153
185.199.109.153
185.199.110.153
185.199.111.153
2. Set apex domain to Vercel
You should have
ONE
of these (depends on DNS provider):
Either
@ â A â 76.76.21.21
OR
@ â ALIAS â cname.vercel-dns.com
(You already have the ALIAS â thatâs good.)
3. Keep these
â
Keep:
www â CNAME â *.vercel-dns.com
* â ALIAS â cname.vercel-dns.com
CAA â letsencrypt.org
4. Wait ~5 minutes
Vercel will automatically:
Detect the fix
Re-issue the SSL cert
Error disappears
ð« Option B â Use GitHub Pages for apex (NOT recommended)
Youâd need to:
Remove
all Vercel domain bindings
Disable wildcard + www on Vercel
Let GitHub handle SSL
This is fragile and not what you want if youâre deploying on Vercel.
Secondary issue (not breaking SSL, but important)
These are
still GitHub Pages
:
docs â CNAME â s8ken.github.io
demo â CNAME â s8ken.github.io
Thatâs fine
only if intentional
.
If
docs.yourdomain.com
or
demo.yourdomain.com
are supposed to be Vercel apps, they must be changed to Vercel CNAMEs too.
Final sanity check (after cleanup)
Run:
Bash
openssl
s_client
-connect
yourdomain.com:443
-servername
yourdomain.com
You should see:
Issuer: Let's Encrypt
Subject Alternative Name:
DNS:yourdomain.com
DNS:www.yourdomain.com
TL;DR
You cannot mix GitHub Pages A records with Vercel SSL.
Delete the
185.199.x.x
records and let Vercel fully own the domain.
If you want, tell me:
The exact domain name
Whether
docs
/
demo
should stay on GitHub
Iâll give you the
exact final DNS table
to copy-paste.
ChatGPT said:
Perfect â this second screenshot confirms
youâve fixed the core problem correctly
ð
What youâre seeing now is the
healthy
end state for Vercel.
Let me walk you through
whatâs now correct
,
what to expect next
, and
one optional cleanup
.
â
Current state (this is GOOD)
1. Apex domain is now fully on Vercel
You have:
@ â ALIAS â 5e8dfbdc0a482438.vercel-dns-016.com
âï¸ This is exactly what Vercel wants
âï¸ No more GitHub Pages A records
âï¸ No SSL conflict
2.
www
is correctly configured
www â CNAME â 5e8dfbdc0a482438.vercel-dns-016.com
âï¸ Good
âï¸ Will be covered by the same certificate
3. Wildcard routing is correct
* â ALIAS â cname.vercel-dns-016.com
âï¸ Lets Vercel handle subdomains cleanly
âï¸ Prevents accidental misroutes
4. SSL issuance is allowed
CAA â issue "letsencrypt.org"
âï¸ Correct
âï¸ Vercel uses Letâs Encrypt
5. Nameservers
ns1.vercel-dns.com
ns2.vercel-dns.com
âï¸ Domain is fully delegated to Vercel
âï¸ Fast propagation, fewer edge cases
â³ What happens next (normal behavior)
Vercel will
automatically reissue the SSL certificate
This usually takes
2â10 minutes
During this time you might see:
Intermittent cert warnings
One browser works, another doesnât
Thatâs normal â DNS + cert caches catching up.
ð What to do right now
Wait 5â10 minutes
Hard refresh:
macOS:
Cmd + Shift + R
Test in:
Incognito
Mobile device (cellular)
Your site should load cleanly over HTTPS.
ð Optional but recommended cleanup (GitHub-related)
You still have GitHub Pages records:
docs â CNAME â s8ken.github.io
demo â CNAME â s8ken.github.io
_github-pages-challenge-s8ken â TXT
These are
not breaking SSL
, but:
If
docs.
and
demo.
are intentional â â
keep them
If they are legacy â â remove them
ð Removing unused GitHub Pages records reduces future confusion.
𧪠Final verification (if you want certainty)
Run:
Bash
openssl
s_client
-connect
yourdomain.com:443
-servername
yourdomain.com
You should see:
Issuer: Let's Encrypt
DNS:yourdomain.com
DNS:www.yourdomain.com
â
Bottom line
You fixed the problem.
No more mixed hosting, no more cert mismatch.
If after ~15 minutes you
still
see
ERR_CERT_COMMON_NAME_INVALID
, tell me:
The exact domain youâre visiting
Which browser
But based on this DNS state â youâre done ð
So does this mean i cannot use demo.yseeku.com for my github page?
Short answer:
you
can
use
demo.yseeku.com
for GitHub Pages
, but
only if you do it intentionally and cleanly
. What you
cannot
do is let it overlap or be caught by Vercelâs wildcard in a half-configured way.
Right now, youâre
almost
there â you just need to be clear about ownership.
The rule (this is the key idea)
Each hostname must be owned by exactly ONE platform.
Vercel and GitHub Pages must never both think they serve the same name.
Apex +
www
â Vercel
demo.yseeku.com
â GitHub Pages
That is a perfectly valid setup.
Your current setup (based on the screenshot)
You have:
demo â CNAME â s8ken.github.io
* â ALIAS â cname.vercel-dns.com
This is the subtle part:
demo.yseeku.com
does win
over
*
(explicit beats wildcard)
So DNS-wise,
demo.yseeku.com
correctly goes to GitHub Pages
SSL-wise, GitHub Pages will issue its own cert
if configured
So DNS is OK â
the remaining requirement is GitHub Pages config
.
What MUST be true for this to work
1. GitHub Pages must explicitly know about
demo.yseeku.com
In the GitHub repo used for Pages:
Go to
Settings â Pages
Custom domain:
demo.yseeku.com
Ensure the repo contains a
CNAME
file with:
demo.yseeku.com
Without this, GitHub Pages serves a cert for
*.github.io
, not your subdomain â cert error.
2. Do NOT add
demo.yseeku.com
to Vercel
In Vercel:
Do not
add
demo.yseeku.com
as a domain
Let it exist only in DNS + GitHub
This avoids Vercel trying to issue a cert for it.
3. Wait for GitHub SSL provisioning
GitHub Pages SSL:
Can take
up to ~1 hour
Uses Letâs Encrypt
Youâll see â
HTTPS enforced
â toggle appear
Once thatâs on, the cert will be valid.
Safe mental model
Hostname
Platform
yseeku.com
Vercel
www.yseeku.com
Vercel
demo.yseeku.com
GitHub Pages
docs.yseeku.com
GitHub Pages (if desired)
everything else
Vercel wildcard
That model is
stable and production-safe
.
When you
would
get the cert error again
Youâll see
ERR_CERT_COMMON_NAME_INVALID
if:
You add
demo.yseeku.com
to Vercel
and
GitHub
You forget the GitHub Pages custom domain step
You delete the
demo
CNAME but keep the wildcard
You rely on wildcard ALIAS to âcoverâ GitHub Pages (it wonât)
Recommendation (practical)
âï¸ Yes, use
demo.yseeku.com
for GitHub Pages
âï¸ Keep the explicit
demo
CNAME
âï¸ Configure the domain inside GitHub Pages
â Donât let Vercel know about it
If you want, tell me:
Which repo backs
demo
Whether
docs
should also be GitHub Pages
Iâll give you the
exact final DNS + GitHub Pages config
to lock it in cleanly.
ChatGPT said:
Good you stopped here â
do not add that A record
ð
What youâre looking at in this screenshot is the
one thing
that would break your setup again.
Letâs be very explicit.
â What you should NOT do
You are currently on the âAdd DNS recordâ form with:
Name: subdomain
Type: A
Value: 76.76.21.21
â
Do not add this for
demo.yseeku.com
(or any GitHub Pages subdomain)
.
Why:
76.76.21.21
=
Vercel
Adding this would make
Vercel claim the subdomain
GitHub Pages would still think it owns it
Result â
SSL cert conflict again
This would recreate
ERR_CERT_COMMON_NAME_INVALID
.
â
The correct way to use
demo.yseeku.com
for GitHub Pages
DNS (only this)
You already had it right earlier â this is the correct record:
demo â CNAME â s8ken.github.io
âï¸ Keep this
â Do not add an A record
â Do not point it at Vercel
Explicit CNAME
beats
the wildcard ALIAS, so Vercel will ignore
demo
.
GitHub Pages (this is mandatory)
In the
GitHub repo that powers demo
:
Go to
Settings â Pages
Set
Custom domain
to:
demo.yseeku.com
Ensure a file named
CNAME
exists in the repo with:
demo.yseeku.com
GitHub will then:
Issue a Letâs Encrypt cert for
demo.yseeku.com
Serve HTTPS correctly
â³ This can take
10â60 minutes
the first time.
â
What your final DNS should look like (authoritative)
Name
Type
Value
Owner
@
ALIAS
*.vercel-dns.com
Vercel
www
CNAME
*.vercel-dns.com
Vercel
demo
CNAME
s8ken.github.io
GitHub
docs
CNAME
s8ken.github.io
(if used)
GitHub
*
ALIAS
cname.vercel-dns.com
Vercel
CAA
issue letsencrypt.org
SSL
This setup is
correct, stable, and safe
.
Mental model (remember this)
A / ALIAS â platform owns the hostname
One hostname = one platform
Wildcards never override explicit records
Never point GitHub Pages domains at Vercel IPs
Final answer to your original concern
âSo does this mean I cannot use demo.yseeku.com for my GitHub page?â
â
You absolutely can
â
Just not with an A record to Vercel
Stick with the CNAME â
s8ken.github.io
, configure it in GitHub Pages, and youâre done.
If you want, tell me:
Is
demo
a single repo or a monorepo?
Are you planning more GitHub Pages subdomains?
I can sanity-check the whole domain map before you lock it in.
ChatGPT can make mistakes. Check important info.