iTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more
If Puppeteer captures a certificate warning on an Indian bank website, Chromium has not validated the HTTPS connection under the trust and identity checks in effect for that runtime. The screenshot may be accurately showing the page Chromium reached; it does not, by itself, prove the bank’s certificate is broken. Record the exact certificate error and inspect the connection from the same machine or container before changing browser security settings. Do not enter banking credentials while a certificate warning is present.
Why Puppeteer shows a certificate warning
Puppeteer’s screenshot operation comes after Chromium navigates to a page. If HTTPS validation fails, Chromium may land on a certificate interstitial, which the screenshot can then capture. The capture is not necessarily broken; it may faithfully show the browser’s warning.
A certificate warning alone does not identify the cause. Possibilities include an untrusted root certificate in the runtime, a hostname mismatch, an expired or not-yet-valid certificate, a missing intermediate certificate, or TLS interception by a proxy. Chromium’s root-store FAQ describes users encountering NET::ERR_CERT_AUTHORITY_INVALID during a root-store and verifier rollout, illustrating that browser trust behavior can also matter: Chromium root-store FAQ.
Free tools Windows power users keep installed
One-click scans. No signup required.
Collect the details needed to diagnose it
Before changing settings, reproduce the failure in the same environment Puppeteer uses. Save the following information; without the hostname, full error and runtime details, the cause for an unnamed site cannot be determined.
#1 Best Overall
- POWERFUL SECURITY KEY: The Security Key C NFC is the essential physical passkey for protecting your digital life from phishing attacks. It ensures only you can access your accounts.
- WORKS WITH 1000+ ACCOUNTS: Compatible with Google, Microsoft, and Apple. A single Security Key C NFC secures 100 of your favorite accounts, including email, password managers, and more.
- FAST & CONVENIENT LOGIN: Plug in your Security Key C NFC via USB-C and tap it, or tap it against your phone (NFC) to authenticate. No batteries, no internet connection, and no extra fees required.
- TRUSTED PASSKEY TECHNOLOGY: Uses the latest passkey standards (FIDO2/WebAuthn & FIDO U2F) but does not support One-Time Passwords. For complex needs, check out the YubiKey 5 Series.
- BUILT TO LAST: Made from tough, waterproof, and crush-resistant materials. Manufactured in Sweden and programmed in the USA with the highest security standards.
- The complete
net::ERR_CERT_*error and navigation exception. - The requested URL and final URL after redirects.
- Puppeteer and Chromium versions, operating system, and container or host details.
- The machine’s date and time, and the certificate chain Chromium sees inside that runtime.
- Whether a corporate proxy, VPN, or other TLS inspection is in use.
Compare the certificate’s subject alternative names with the final hostname, check its validity dates and intermediate certificates, and determine whether the issuing root is trusted in the target runtime. A comparison with a separate up-to-date browser can help narrow down an environment difference, but it does not independently establish which endpoint is trustworthy.
Fix the underlying trust or configuration problem
Use the error code and chain observed inside the affected runtime to choose the next check. A hostname mismatch calls for verifying the final redirected host and its certificate names. A validity error calls for checking the certificate dates and the machine clock. An authority error calls for checking the delivered intermediates, root trust in that runtime, and possible proxy or TLS inspection. Do not assume any of these is the cause without the corresponding evidence.
Rank #2
- POWERFUL SECURITY KEY: The YubiKey 5C NFC is the most versatile physical passkey, protecting your digital life from phishing attacks. It ensures only you can access your accounts
- WORKS WITH 1000+ ACCOUNTS: Compatible with popular accounts like Google, Microsoft, and Apple. A single YubiKey 5C NFC secures 100+ of your favorite accounts, including email, password managers, and more
- FAST & CONVENIENT LOGIN: Plug in your YubiKey 5C NFC via USB and tap it, or tap it against your phone (NFC), to authenticate. No batteries, no internet connection, and no extra fees required
- MOST SECURE PASSKEY: Supports FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, Smart card (PIV), and OpenPGP. That means it’s versatile, working almost anywhere you need it
- PRIMARY & SPARE KEYS: Just like having a spare house key, we recommend buying two YubiKeys - one for daily use and one as a spare. That way you’ll never get locked out of your accounts
Indian Bank’s customer guidance says to type its URL directly, check the address and SSL lock, and keep the browser current. Its listed addresses are https://www.indianbank.in and https://www.indianbank.net.in. That guidance does not establish the present certificate status of either site or of another bank.
Indian Bank’s 2024 cyber-security audit document includes TLS version and algorithm checks and certificate-validity checks among its HTTPS controls. It is an audit checklist, not evidence of a particular bank website’s current certificate condition: Indian Bank cyber-security audit document.
Rank #3
- POWERFUL SECURITY KEY: The YubiKey 5 NFC is the most versatile physical passkey, protecting your digital life from phishing attacks. It ensures only you can access your accounts
- WORKS WITH 1000+ ACCOUNTS: Compatible with popular accounts like Google, Microsoft, and Apple. A single YubiKey 5 NFC secures 100+ of your favorite accounts, including email, password managers, and more
- FAST & CONVENIENT LOGIN: Plug in your YubiKey 5 NFC via USB and tap it, or tap it against your phone (NFC), to authenticate. No batteries, no internet connection, and no extra fees required
- MOST SECURE PASSKEY: Supports FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, Smart card (PIV), and OpenPGP. That means it’s versatile, working almost anywhere you need it
- PRIMARY & SPARE KEYS: Just like having a spare house key, we recommend buying two YubiKeys - one for daily use and one as a spare. That way you’ll never get locked out of your accounts
Use Puppeteer’s insecure-certificate option only in a controlled test
The Puppeteer ConnectOptions reference, which identifies version 25.12.0, documents acceptInsecureCerts as an optional boolean that ignores HTTPS errors during navigation; its default is false. This changes what Chromium accepts. It does not repair the certificate, prove the site’s identity, or make it safe to enter sensitive information.
For a test fixture or explicitly trusted, non-sensitive capture context, the option can be enabled on browser launch. Keep such a test isolated and never use the setting to access online banking or submit credentials.
Rank #4
- POWERFUL SECURITY KEY: The Security Key NFC is the essential physical passkey for protecting your digital life from phishing attacks. It ensures only you can access your accounts.
- WORKS WITH 1000+ ACCOUNTS: Compatible with Google, Microsoft, and Apple. A single Security Key NFC secures 100 of your favorite accounts, including email, password managers, and more.
- FAST & CONVENIENT LOGIN: Plug in your Security Key NFC via USB-A and tap it, or tap it against your phone (NFC) to authenticate. No batteries, no internet connection, and no extra fees required.
- TRUSTED PASSKEY TECHNOLOGY: Uses the latest passkey standards (FIDO2/WebAuthn & FIDO U2F) but does not support One-Time Passwords. For complex needs, check out the YubiKey 5 Series.
- BUILT TO LAST: Made from tough, waterproof, and crush-resistant materials. Manufactured in Sweden and programmed in the USA with the highest security standards.
const puppeteer = require('puppeteer');
(async () => {
const browser = await puppeteer.launch({
acceptInsecureCerts: true,
});
try {
const page = await browser.newPage();
page.on('requestfailed', request => {
console.error('Request failed:', request.url(), request.failure()?.errorText);
});
const response = await page.goto('https://example.test', {
waitUntil: 'domcontentloaded',
timeout: 30000,
});
console.log({
status: response?.status(),
finalUrl: page.url(),
title: await page.title(),
});
await page.screenshot({ path: 'test-capture.png', fullPage: true });
} catch (error) {
console.error('Navigation or capture failed:', error);
} finally {
await browser.close();
}
})();Replace https://example.test only with a non-sensitive test target you are authorized to access. If your Puppeteer setup connects to an already-running browser rather than launching one, check the options supported by that connection path; do not assume a launch setting was applied to an existing process.
Do not confuse a certificate error with a blocked request
net::ERR_BLOCKED_BY_CLIENT is not a certificate-validation error. Puppeteer’s troubleshooting page discusses it in relation to Chrome’s HTTP-first warning feature and a workaround for that situation: Puppeteer troubleshooting. That workaround does not fix an HTTPS certificate chain, hostname, validity, trust-store, or TLS interception problem.
Best Value
- Security Key : Protect your online accounts against unauthorized access by using FIDO2 and U2F authentication with T110. It's the world's most protective security key that works with windows, Mac OS, Linux as well as Chrome, Firefox, Edge and many other major browsers.
- Certified with the new FIDO2 standard, T110 provides the benefit of fast login and strong protection against phishing, account takeover as well as many other online attactks.
- Works with : Bank of America, Github, Google, Microsoft, DUO, Twitter, Facebook, Dropbox, Apple, ebay, BINANCE, mor and more.
- Fits USB-A port : Insert the T110 security key into the USB-A port of each service and log in conveniently with one touch
- For the driver download and user guide, please visit TrustKey Solutions Home support page.
Or skip the browser setup
ScreenshotNeo is a website screenshot API and MCP server, but it cannot make an unsafe banking connection trustworthy. Do not use any screenshot service to bypass a certificate warning and then enter banking credentials. For an authorized, non-sensitive capture where a screenshot is appropriate, one GET request can return an image or PDF. See the ScreenshotNeo API documentation.
curl -G "https://api.screenshotneo.com/v1/shot" -d access_key=YOUR_API_KEY --data-urlencode url=https://stripe.com -o shot.webpScreenshotNeo removes supported cookie banners, newsletter popups and chat widgets before capture; bot checks, blank pages and failed loads are not billed. Its MCP server lets AI agents take screenshots. The Free plan includes 1,000 shots per month with no card; paid plans start at $5 for 3,000 shots. Sign up for ScreenshotNeo’s free plan.
Frequently Asked Questions
Does an ERR_CERT_AUTHORITY_INVALID warning prove the bank’s certificate is faulty?
No. It can reflect trust-store or verifier behavior in the browser runtime as well as certificate-chain or proxy conditions. Inspect the chain from the affected runtime before drawing a conclusion.
The Tool Desk
Outbyte PC Repair FREERepair Windows errors before they cause bigger problemsFix Now →Outbyte Driver Updater FREEFix the driver behind crashes, sound loss and screen glitchesFind Drivers →Can I safely use acceptInsecureCerts for a bank screenshot?
No. It suppresses HTTPS errors during navigation; it does not authenticate the bank. Do not use it to access online banking or enter credentials.
Can the cause be identified without the hostname and full error?
No. A site-specific diagnosis requires the hostname, complete certificate error, runtime details and certificate chain observed by that runtime.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
