Base44 deployment

SSL Certificate Errors on Base44 Published App

Your published Base44 app shows SSL certificate warnings in the browser. Users see "Not Secure" in the address bar, a certificate error page they must click through, or mixed content warnings where some resources load over HTTP instead of HTTPS.

SSL issues erode user trust and can prevent some browsers from loading the app at all. Modern browsers increasingly block mixed content and show prominent warnings for certificate issues, making this a critical problem for any production app.

The issue may affect only your custom domain while the default Base44 URL works fine with SSL, or it may manifest as intermittent certificate errors that come and go.

Error Messages You Might See

Your connection is not private NET::ERR_CERT_COMMON_NAME_INVALID Mixed Content: The page was loaded over HTTPS but requested an insecure resource This site's security certificate is not trusted
Your connection is not privateNET::ERR_CERT_COMMON_NAME_INVALIDMixed Content: The page was loaded over HTTPS but requested an insecure resourceThis site's security certificate is not trusted

Common Causes

  1. The SSL certificate for a custom domain has not been provisioned or has expired
  2. Mixed content: some images, scripts, or API calls use HTTP instead of HTTPS
  3. The app references hardcoded HTTP URLs in custom code or embedded content
  4. DNS changes disrupted the SSL certificate renewal process

How to Fix It

If using a custom domain, check whether the SSL certificate has been provisioned by visiting the domain and inspecting the certificate in your browser. If it hasn't been provisioned, re-verify your DNS settings and trigger a re-provisioning if Base44 offers that option.

For mixed content warnings, search your app's custom code and component settings for any http:// URLs and change them to https://. Embedded iframes, images, and external scripts are common culprits.

Persistent SSL issues, especially on custom domains, may require developer intervention to properly configure the certificate chain and ensure all resources are served securely.

Real developers can help you.

Matt Butler Matt Butler Software Engineer @ AWS Pratik Pratik SWE with 15+ years of experience building and maintaining web apps and extensive BE infrastructure David Olverson David Olverson Solo dev shipping production apps with AI-assisted development. I specialize in rescuing broken Lovable/Bolt/Cursor builds and taking them to production. 10+ apps shipped including SaaS CRMs, gaming platforms, real estate tools, and Discord bots. Stack: Next.js 16, TypeScript, Tailwind CSS, FastAPI, PostgreSQL, Prisma. I use Claude Code with 50+ custom skills for rapid delivery. Average turnaround: 2-4 weeks from broken prototype to production. BurnHavoc BurnHavoc Been around fixing other peoples code for 20 years. AUXLE AUXLE I am a Full Stack Developer experienced in building Websites, Web apps and Cross Platform Mobile Apps for Startups and Companies. Milan Surelia Milan Surelia Milan Surelia is a Mobile App Developer with 5+ years of experience crafting scalable, cross-platform apps at 7Span and Meticha. At 7Span, he engineers feature-rich Flutter apps with smooth performance and modern UI. As the Co-Founder of Meticha, he builds open-source tools and developer-focused products that solve real-world problems. Expertise: 💡 Developing cross-platform apps using Flutter, Dart, and Jetpack Compose for Android, iOS, and Web. 🖋️ Sharing insights through technical writing, blogging, and open-source contributions. 🤝 Collaborating closely with designers, PMs, and developers to build seamless mobile experiences. Notable Achievements: 🎯 Revamped the Vepaar app into Vepaar Store & CRM with a 2x performance boost and smoother UX. 🚀 Launched Compose101 — a Jetpack Compose starter kit to speed up Android development. 🌟 Open source contributions on Github & StackOverflow for Flutter & Dart 🎖️ Worked on improving app performance and user experience with smart solutions. Milan is always happy to connect, work on new ideas, and explore the latest in technology. Tejas Chokhawala Tejas Chokhawala Full-stack engineer with 5 years experience building production web apps using React, Next.js and TypeScript. Focused on performance, clean architecture and shipping fast. Experienced with Supabase/Postgres backends, Stripe billing, and building AI-assisted developer tools. zipking zipking I am a technologist and product builder dedicated to creating high-impact solutions at the intersection of AI and specialized markets. Currently, I am focused on PropScan (EstateGuard), an AI-driven SaaS platform tailored for the Japanese real estate industry, and exploring the potential of Archify. As an INFJ-T, I approach development with a "systems-thinking" mindset—balancing technical precision with a deep understanding of user needs. I particularly enjoy the challenge of architecting Vertical AI SaaS and optimizing Small Language Models (SLMs) to solve specific, real-world business problems. Whether I'm in a CTO-level leadership role or hands-on with the code, I thrive on building tools that turn complex data into actionable value. Matthew Butler Matthew Butler Systems Development Engineer @ Amazon Web Services Nam Tran Nam Tran 10 years as fullstack developer

You don't need to be technical. Just describe what's wrong and a verified developer will handle the rest.

Get Help

Frequently Asked Questions

Why does my Base44 app show 'Not Secure'?

This usually means the SSL certificate isn't properly configured or there's mixed content (some resources loading over HTTP). Check your custom domain SSL settings and search for any hardcoded HTTP URLs.

How do I fix mixed content warnings in Base44?

Find any images, scripts, or API calls that use http:// URLs and change them to https://. This includes embedded content, external scripts, and image URLs in your database.

Related Base44 Issues

Can't fix it yourself?
Real developers can help.

You don't need to be technical. Just describe what's wrong and a verified developer will handle the rest.

Get Help