The Tool Desk
Outbyte PC Repair FREEClear out junk files and repair common Windows errorsFree Scan →Outbyte Driver Updater FREEFix the driver behind crashes, sound loss and screen glitchesFind Drivers →First find out which HTTPS connection failed: your application connecting to the screenshot API, or the API’s browser connecting to the page you want to capture. These are separate TLS connections with different fixes. Check the API’s HTTP status and response body before treating a non-image response as screenshot data, then repair the trust, certificate, or authentication issue at the failing layer.
Identify which connection failed
A screenshot request can involve two HTTPS connections:
- Your client to the screenshot API: If TLS fails here, your client usually cannot establish a normal API response. Investigate the client runtime, proxy, system trust store, CA bundle, clock, and API endpoint certificate.
- The API’s rendering browser to the target website: The API may accept the request, then its browser may fail to navigate to the target. The result can be a provider-specific error page or failed-navigation response.
Start with the API HTTP status, response headers, body or content type, and any provider render logs. Some providers expose a final target-page status header; a 401 or 403 may reflect a rendered login or error page rather than an API authentication failure. Diagnostics and meanings differ by provider. See the ScreenshotEngine documentation for its response format and guidance to check status before treating a body as an image.
A non-200 response or invalid image file alone does not prove that a certificate failed. Record the exact error text and determine whether the request reached the API.
#1 Best Overall
- Read Before You Buy — No Video Output: These adapters support charging and USB 2.0 data transfer, but cannot transmit video signals. Except for standard USB webcams (which use USB data only), they are not compatible with HDMI/DisplayPort cables, video-capable USB-C hubs, or docking stations with video output.
- Convert USB-A Ports to USB-C: Designed to connect USB-C earphones, cables, flash drives, card readers, and other USB-C accessories to standard USB-A ports. Plug-and-play with no drivers or software required.
- Aluminum Alloy Housing: Built with a sturdy aluminum alloy shell that aids in heat dissipation and protects against daily wear and scratches. Designed to maintain a stable and secure connection.
- Compact & Travel-Friendly: The ultra-compact design allows the adapter to stay plugged into your device without blocking adjacent ports or adding bulk, reducing wear and tear on your original USB ports.
- 12-Month Warranty: Backed by a 12-month manufacturer warranty for peace of mind. Designed to meet strict quality control standards for reliable everyday performance.
Collect the evidence before changing settings
- Save the complete error string, API status, response headers, and response body or content type.
- Record the client runtime and version, and the browser version if available from provider logs.
- Record the target URL, redacting tokens, credentials, and other secrets before sharing it.
- Check whether the same target URL opens in an ordinary browser. This is a useful clue, but the browser may use a different network, trust store, or client identity than the screenshot renderer.
- Check provider logs or target-page status when the API accepted the job; use the exact diagnostics your provider exposes.
Fix the caller-to-API TLS connection
If the client cannot establish HTTPS to the API endpoint, the target website’s certificate is not yet the issue. Check the caller’s network and trust configuration first.
Check the client environment
- Confirm the machine’s date and time are correct; an incorrect clock can make otherwise valid certificates appear out of date or not yet valid.
- Check whether a corporate proxy or security appliance intercepts TLS. It may substitute a certificate signed by an organization-specific CA that your runtime does not trust.
- Confirm the runtime is using an up-to-date CA bundle or system trust store, and that the API host’s certificate chain is trusted in that environment.
- If the problem occurs only on one network or machine, compare its proxy and trust configuration with a working environment rather than disabling certificate checks.
Node.js and Playwright behind an intercepting proxy
Playwright documents a specific browser-installation failure: an intercepting proxy that uses an untrusted custom certificate authority can produce Error: self signed certificate in certificate chain while downloading browsers. In that Node/Playwright environment, configure the organization’s root certificate with NODE_EXTRA_CA_CERTS before installing browsers. Follow the Playwright proxy-installation guidance for the certificate file and command appropriate to your environment.
Rank #2
- 5-in-1 USB-C Hub: Experience comprehensive connectivity featuring a Power Delivery input, two USB-A 2.0 ports, a USB-A 3.0 port, and an HDMI port. (Note: The USB-C power delivery input port is only for connecting an external wall charger to power your laptop and cannot power peripheral devices.)
- 90W Pass-Through Charging: Achieve optimal charging with 90W pass-through power to your laptop, supported by a total input of 100W, with the hub reserving 10W for operational efficiency. (Note: Wall charger not included.)
- Quick Data Transfers: Accelerate your productivity with rapid data transfers using a high-speed 5Gbps USB 3.0 port and two 480Mbps USB 2.0 ports.
- 4K HDMI Display: Enhance your visual experience with a hub capable of delivering 4K resolution at 30Hz in both mirror and extend modes. Please note that this hub is compatible with MacBook (macOS 12 and newer), Windows 10 and 11, ChromeOS, and laptops equipped with DP Alt Mode and Power Delivery. Note: This device is not compatible with Linux.
- What You Get: Anker USB-C Hub (5-in-1, 4K HDMI), welcome guide, 18-month warranty, and our friendly customer service.
This is not a universal setting for hosted screenshot APIs. It applies to the documented Playwright scenario; a hosted provider’s renderer and trust store are controlled separately.
Fix the renderer-to-target TLS connection
If the API accepted the request but the render failed, check the target certificate from the perspective of the browser that performs the capture. The target hostname must match a name on the certificate, the certificate must be within its validity dates, and the server must present a chain trusted by that renderer. Chrome lists NET::ERR_CERT_AUTHORITY_INVALID and ERR_CERT_COMMON_NAME_INVALID among certificate errors; “Your connection is not private” and “SSL certificate error” are other reported Chrome messages. See Chrome Help on connection errors.
Free tools Windows power users keep installed
One-click scans. No signup required.
Rank #3
- Sleek 7-in-1 USB-C Hub: Features an HDMI port, two USB-A 3.0 ports, and a USB-C data port, each providing 5Gbps transfer speeds. It also includes a USB-C PD input port for charging up to 100W and dual SD and TF card slots, all in a compact design.
- Flawless 4K@60Hz Video with HDMI: Delivers exceptional clarity and smoothness with its 4K@60Hz HDMI port, making it ideal for high-definition presentations and entertainment. (Note: Only the HDMI port supports video projection; the USB-C port is for data transfer only.)
- Double Up on Efficiency: The two USB-A 3.0 ports and a USB-C port support a fast 5Gbps data rate, significantly boosting your transfer speeds and improving productivity.
- Fast and Reliable 85W Charging: Offers high-capacity, speedy charging for laptops up to 85W, so you spend less time tethered to an outlet and more time being productive.
- What You Get: Anker USB-C Hub (7-in-1), welcome guide, 18-month warranty, and our friendly customer service.
A page that loads on your workstation may still fail in a remote renderer because it can use a different trust store, network path, proxy, or authentication context. Use provider render logs or target-page status if available. The right fix is to correct the target’s certificate or establish trust in the renderer through a provider-supported configuration—not to assume the caller’s machine and the remote browser share settings.
Separate mutual TLS from server-certificate trust
Some internal sites require mutual TLS (mTLS): the target server asks the client to present a certificate. This is distinct from trusting the server’s certificate. First establish whether the target actually requests a client certificate; then check whether your screenshot provider supports sending one. A hosted service may not expose this capability.
Rank #4
- Dual Converters, Infinite Potential：Includes 2× USB C male to USB A female adapters and 2× USB A male to USB C female adapters. Perfect for a wide range of uses—tablets with Bluetooth keyboards, expand USB ports on macbook, and more. Two different converters for all your daily needs
- Next-Level 10Gbps & 3A Charging: No more slow 480Mbps, this usb to usb c adapter has a transfer speed of up to 10Gbps, allowing you to do more transferring in less time. This usb adapter fits both USB A and USB C charger, supporting up to 3A fast charging
- Upgraded Exquisite Craftsmanship: With an aluminum alloy housing and metal connector, the usbc to usb adapter is extremely durable and sturdy. Rigorously tested to withstand more than 10,000 times of plugging and unplugging, ensuring long-lasting performance
- Broad Compatible: The usb c to usb adapter widely supports all USB C/ USB A devices like laptops, tablets, cellphones, car chargers, and phone chargers. Such as compatible with MacBook Pro/Air 2023/2022, Thunderbolt 4/3 Devices,Apple MagSafe Watch 9/8/7/SE/Ultra, iPad Pro 2022/2021, Samsung Galaxy S23/S20/S10, and iPhone 17/16/15 Pro. Plug and play
- Please Note: To reach 10Gbps speed, keep the cable under 3.3 ft. For USB A Male to USB C adapters, try flipping the USB C connector. USB C Male to USB A adapters support bidirectional 10Gbps transfer within 3.3 ft
For a browser you control, Playwright supports origin-specific client certificate configuration using PEM or PFX material. See Playwright’s client certificate options. Configuring a client certificate does not by itself fix an untrusted server certificate.
Check local Chrome issues only when the browser is local
If you are troubleshooting a local Chrome session, Chrome Help suggests signing in to a Wi-Fi captive portal and testing in Incognito or considering whether extensions are involved. These checks may help explain a local browsing error, but they may not apply to a hosted screenshot service whose browser runs on a provider’s infrastructure.
Best Value
- 5-in-1 Connectivity: Equipped with a 4K HDMI port, a 5 Gbps USB-C data port, two 5 Gbps USB-A ports, and a USB C 100W PD-IN port. Note: The USB C 100W PD-IN port supports only charging and does not support data transfer devices such as headphones or speakers.
- Powerful Pass-Through Charging: Supports up to 85W pass-through charging so you can power up your laptop while you use the hub. Note: Pass-through charging requires a charger (not included). Note: To achieve full power for iPad, we recommend using a 45W wall charger.
- Transfer Files in Seconds: Move files to and from your laptop at speeds of up to 5 Gbps via the USB-C and USB-A data ports. Note: The USB C 5Gbps Data port does not support video output.
- HD Display: Connect to the HDMI port to stream or mirror content to an external monitor in resolutions of up to 4K@30Hz. Note: The USB-C ports do not support video output.
- What You Get: Anker 332 USB-C Hub (5-in-1), welcome guide, our worry-free 18-month warranty, and friendly customer service.
Retest without bypassing certificate verification
After correcting the relevant trust store, proxy CA, target certificate, or client authentication, repeat the same request with certificate verification enabled. Do not make --ignore-certificate-errors or an equivalent bypass the normal fix: skipping validation removes protection against connecting to an impostor or an intercepted endpoint. If a temporary diagnostic exception is unavoidable in a controlled test, do not ship it as production configuration.
Common errors and what to do
| Observed symptom | Likely area to investigate | Next action |
|---|---|---|
self signed certificate in certificate chain during Playwright browser download |
Node/Playwright installation behind an intercepting proxy with an untrusted custom CA | Configure the organization’s root certificate through NODE_EXTRA_CA_CERTS before browser installation, following Playwright’s proxy guidance. |
NET::ERR_CERT_AUTHORITY_INVALID |
The renderer does not trust the certificate chain presented by the target, or TLS interception is involved | Check the chain and the relevant renderer or client trust configuration. |
ERR_CERT_COMMON_NAME_INVALID |
The requested hostname may not match the certificate identity | Verify the target hostname and certificate names. |
| The API returns JSON or another non-image body | The API may have returned an error; it is not necessarily an image response | Inspect HTTP status, content type, body, and provider diagnostics before decoding or saving it as an image. |
| The page opens locally but capture fails | The remote renderer may have a different trust store, network, proxy, or client-authentication context | Check provider render logs and target-page status; ask the provider about supported trust or mTLS configuration. |
Or skip the browser setup
If you want to isolate capture workflow issues from managing a browser installation, ScreenshotNeo is a screenshot API and MCP server for developers. Its API accepts one GET request with a URL and returns an image or PDF. This example requests a WebP screenshot of Stripe; replace the target URL with the page you are authorized to capture.
curl -G "https://api.screenshotneo.com/v1/shot" -d access_key=YOUR_API_KEY --data-urlencode url=https://stripe.com -o shot.webpSee the ScreenshotNeo API documentation for the request options and response details. Its pre-capture cleanup accepts cookie or consent banners and removes more than 60 known consent platforms, newsletter popups, and chat widgets; each cleanup step can be turned off. Bot checks and CAPTCHAs, blank pages, timeouts, failed loads, and cache hits are not billed, and responses indicate page verdict and billing status in headers. An MCP server offers take_screenshot, get_page_info, and capture_pdf tools for Claude, Cursor, and other MCP clients. The Free plan includes 1,000 screenshots per month with no card required; paid plans start at $5 for 3,000 screenshots.
Sign up for ScreenshotNeo’s free plan to try it with 1,000 screenshots per month and no card.
Do these 3 things before closing this tab:
1Clear out junk files and repair common Windows errors2Scan for outdated or missing drivers - takes under a minute3Repair Windows errors before they cause bigger problemsFrequently Asked Questions
Does a 401 or 403 from a screenshot request always mean the API key is wrong?
No. Depending on the provider, that status can describe the rendered target page, such as a login or error page. Check the response details and provider diagnostics to distinguish it from API authentication.
Will configuring NODE_EXTRA_CA_CERTS fix a hosted screenshot service?
Not necessarily. The documented setting applies to the Node/Playwright browser-download scenario; a hosted service’s remote renderer has separate trust configuration.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
