Hpkp

Delete a HSTS Key Pin in Chrome

Key pinning can be tricky and sometimes you might encounter a website having an incorrect key pin. This is usually caused by renewing certificates. In that case the duration time of the key pin might overlap the expire time of the moment of renewal.

Chrome Error

You will be seeing an error something like:

Your connection is not private

 

Attackers might be trying to steal your information from domain.com (for example, passwords, messages, or credit cards). NET::ERR_SSL_PINNED_KEY_NOT_IN_CERT_CHAIN

HPKP Key Pins in Firefox

HPKP is a great technology to pin a certificate to a website. On first use of a domain, the browser of the client checks if key pinning is available. Upon a next visit, the browser applies an additional check if the certificate(s) provided is available in the previous list of white-listed sites.

HPKP error

Sometimes things go wrong with HPKP and you won’t be able to access a particular page.