How to fix ssl error on Shopify
Replace or reissue your SSL/TLS certificate so it is valid for the exact domain name your store uses, eliminating the hostname mismatch error.
Steps for Shopify
- Shopify provisions and renews SSL certificates automatically for all stores on the myshopify.com subdomain and for custom domains added correctly through Shopify.
- Go to: Shopify Admin → Settings → Domains.
- If your custom domain shows a warning or 'SSL unavailable', click the domain name and then click 'Re-verify connection' or remove and re-add the domain.
- Ensure your DNS A record points to Shopify's IP (23.227.38.65) and your CNAME for www points to shops.myshopify.com — a misconfigured DNS record is the most common cause of certificate mismatch on Shopify.
- Allow up to 48 hours after correcting DNS for Shopify to automatically re-provision a valid certificate. If it persists beyond 48 hours, contact Shopify Support.
What is ssl error?
Every HTTPS website uses an SSL/TLS certificate to prove its identity to browsers and to encrypt the connection. The certificate must explicitly list the domain name (or names) it is allowed to protect. A "hostname mismatch" error means the certificate installed on your server was issued for a different domain than the one visitors are actually trying to reach — for example, the certificate covers "www.yourstore.com" but not "yourstore.com" (or vice versa), or it was issued for a completely different domain altogether. Browsers and security scanners treat this as a critical failure and refuse to establish a trusted connection.
When a hostname mismatch exists, most modern browsers display a full-page "Your connection is not private" warning before visitors can even see your store. This kills conversions — the majority of shoppers will leave immediately rather than click through a security warning. Google also uses HTTPS as a ranking signal and can demote or omit pages it cannot crawl securely. Beyond lost sales and rankings, transmitting payment and personal data over an untrusted connection is a serious security risk and may violate PCI DSS compliance requirements for accepting card payments. This maps directly to OWASP A02:2021 — Cryptographic Failures.
See the complete Ssl error guide for every platform and the full background.
Not sure if your Shopify store has this?
Run a free SEOLZ audit — we’ll find ssl error and every other issue across your whole site.
Scan my site free