How to View and Manage Saved SSL Certificates in Google Chrome

Secure Sockets Layer (SSL) and Transport Layer Security (TLS) certificates form the foundation of secure web browsing, encrypting traffic between your browser and remote servers while verifying website identity. Occasionally, web developers, network engineers, and system administrators need to inspect certificate authority (CA) chains, diagnose expired SSL warnings, import custom enterprise certificates, or export root certificates for local development. While modern Google Chrome versions tuck certificate controls deep inside settings, Chrome includes complete management interfaces across Windows, macOS, and Linux.

Understanding how to inspect active website certificates and manage the underlying cryptographic trust store ensures you can troubleshoot HTTPS connection errors swiftly.

Inspecting an Active Website SSL Certificate

You can inspect the security details and cryptographic issuer of any live website directly from the Chrome address bar:

1. Open Google Chrome and navigate to the target website.
2. In the address bar (omnibox), click the Tune / Security icon (the two sliders or padlock icon) immediately to the left of the website URL.
3. In the dropdown panel, click Connection is secure.
4. Click Certificate is valid.
5. Chrome displays the Certificate Viewer dialogue, broken into three informative tabs:
   • General: Displays the Common Name (CN), organisation name, validity start date, and exact expiration timestamp.
   • Details: Details the public key algorithm (e.g. RSA 2048 or ECC 256), SHA-256 fingerprint, Subject Alternative Names (SANs), and Key Usage parameters.
   • Certification Path: Displays the complete hierarchy from the End-Entity certificate up through Intermediate CAs to the Root Certificate Authority.

Managing the System and Chrome Certificate Stores

Google Chrome has transitioned towards its own internal trust store (the Chrome Root Program) while continuing to coordinate with underlying operating system stores for local enterprise roots:

1. Click the Three dots (Menu) in the top-right corner of Chrome and select Settings.
2. In the left-hand navigation menu, click Privacy and security.
3. Click Security.
4. Scroll down to the Advanced section and click Manage device certificates (on Windows and macOS, this opens the native OS certificate management console: certmgr.msc on Windows or Keychain Access on Mac).
5. To view certificates trusted specifically by Chrome’s native root store, navigate directly to the following internal URL in your address bar:

chrome://certificate-manager/

6. This page displays Chrome’s consolidated security store, separated into Local certificates, Enterprise certificates, and Chrome Root Store authorities.

Exporting an SSL Certificate for Local Development

If you need to extract a certificate to configure local proxies, Docker containers, or API test suites:

1. Open the Certificate Viewer dialogue on the website (via the address bar Tune icon → Connection is secure → Certificate is valid).
2. Click the Details tab.
3. Click the Export button at the bottom of the dialogue box.
4. Select your preferred format: DER-encoded binary X.509 (.cer) or Base64-encoded X.509 (.pem).
5. Choose a save directory on your local machine and click Save. You now possess a portable certificate copy ready for curl scripts, Postman, or local trust injection.

Resolving Common Chrome SSL Warning Errors

If Chrome flags a site with NET::ERR_CERT_DATE_INVALID or NET::ERR_CERT_AUTHORITY_INVALID:

• System Clock Mismatch: Check your local computer clock. If your system time is even an hour behind or ahead, Chrome cannot validate certificate validity ranges and throws security errors.
• Antivirus HTTPS Scanning: Third-party antivirus programs intercept SSL connections by injecting custom root certificates. Disabling “HTTPS Scanning” or “Web Shield” in your antivirus settings frequently resolves false certificate warnings.