Base44 deployment

SSL Certificate Errors on Base44 Published App

Your published Base44 app shows SSL certificate warnings in the browser. Users see "Not Secure" in the address bar, a certificate error page they must click through, or mixed content warnings where some resources load over HTTP instead of HTTPS.

SSL issues erode user trust and can prevent some browsers from loading the app at all. Modern browsers increasingly block mixed content and show prominent warnings for certificate issues, making this a critical problem for any production app.

The issue may affect only your custom domain while the default Base44 URL works fine with SSL, or it may manifest as intermittent certificate errors that come and go.

Error Messages You Might See

Your connection is not private NET::ERR_CERT_COMMON_NAME_INVALID Mixed Content: The page was loaded over HTTPS but requested an insecure resource This site's security certificate is not trusted
Your connection is not privateNET::ERR_CERT_COMMON_NAME_INVALIDMixed Content: The page was loaded over HTTPS but requested an insecure resourceThis site's security certificate is not trusted

Common Causes

  1. The SSL certificate for a custom domain has not been provisioned or has expired
  2. Mixed content: some images, scripts, or API calls use HTTP instead of HTTPS
  3. The app references hardcoded HTTP URLs in custom code or embedded content
  4. DNS changes disrupted the SSL certificate renewal process

How to Fix It

If using a custom domain, check whether the SSL certificate has been provisioned by visiting the domain and inspecting the certificate in your browser. If it hasn't been provisioned, re-verify your DNS settings and trigger a re-provisioning if Base44 offers that option.

For mixed content warnings, search your app's custom code and component settings for any http:// URLs and change them to https://. Embedded iframes, images, and external scripts are common culprits.

Persistent SSL issues, especially on custom domains, may require developer intervention to properly configure the certificate chain and ensure all resources are served securely.

Real developers can help you.

Nam Tran Nam Tran 10 years as fullstack developer ISHANTDEEP SINGH ISHANTDEEP SINGH Senior Software Engineer with 7+ years of experience in React, JavaScript, TypeScript, Next.js, and Node.js. I’ve also worked as a tech lead for startups, owning end-to-end technical execution including architecture, development, scaling, and delivery. I bring a strong mix of hands-on coding, product thinking, and technical leadership, and I’m comfortable building products from scratch as well as improving and scaling existing systems. Rudra Bhikadiya Rudra Bhikadiya I build and fix web apps across Next.js, Node.js, and DBs. Comfortable jumping into messy code, broken APIs, and mysterious bugs. If your project works in theory but not in reality, I help close that gap. Jacek Rozanski Jacek Rozanski Senior PHP/Symfony developer and DevOps engineer with 20+ years of professional experience, running opcode.pl (web development agency, est. 2004). Day job: I'm the sole backend developer at merketing company where I own and maintain 11 PHP/Symfony microservices on AWS (ECS Fargate, RDS, S3, CloudFront), handle the full CI/CD pipeline (Bitbucket Pipelines, Docker), and manage monitoring with Sentry and CloudWatch. These services handle high request volumes in production every month. What I bring to AI-built apps: - I audit and fix security issues (OWASP methodology), performance bottlenecks, and architectural problems in codebases generated by Cursor, Claude Code, Lovable, Bolt, and v0 - I refactor AI-generated prototypes into production-grade applications with proper error handling, testing, and clean architecture (SOLID, DDD, hexagonal architecture) - I set up the infrastructure AI tools don't touch: AWS hosting, CI/CD pipelines, automated deployments, database optimization, monitoring, and alerting - I integrate external services: payment providers, email systems, partner APIs, SSO/auth Tech stack: PHP 8.x, Symfony, React, Next.js, PostgreSQL, MySQL, Docker, AWS (ECS, RDS, S3, SQS/SNS, CloudFront), Terraform, Supabase. I also use AI tools daily (Claude Code, Cursor) in my own workflow, so I understand both the strengths and the gaps in AI-generated code. Based in Poland (CET timezone). Available for async work and calls during EU/US business hours. Dor Yaloz Dor Yaloz SW engineer with 6+ years of experience, I worked with React/Node/Python did projects with React+Capacitor.js for ios Supabase expert Yovel Cohen Yovel Cohen I got a lot of experience in building Long-horizon AI Agents in production, Backend apps that scale to millions of users and frontend knowledge as well. PawelPloszaj PawelPloszaj I'm fronted developer with 10+ years of experience with big projects. I have small backend background too Jen Jacobsen Jen Jacobsen I’m a Full-Stack Developer with over 10 years of experience building modern web and mobile applications. I enjoy working across the full product lifecycle — turning ideas into real, well-built products that are intuitive for users and scalable for businesses. I particularly enjoy building mobile apps, modern web platforms, and solving complex technical problems in a way that keeps systems clean, reliable, and easy to maintain. Stanislav Prigodich Stanislav Prigodich 15+ years building iOS and web apps at startups and enterprise companies. I want to use that experience to help builders ship real products - when something breaks, I'm here to fix it. David Olverson David Olverson Solo dev shipping production apps with AI-assisted development. I specialize in rescuing broken Lovable/Bolt/Cursor builds and taking them to production. 10+ apps shipped including SaaS CRMs, gaming platforms, real estate tools, and Discord bots. Stack: Next.js 16, TypeScript, Tailwind CSS, FastAPI, PostgreSQL, Prisma. I use Claude Code with 50+ custom skills for rapid delivery. Average turnaround: 2-4 weeks from broken prototype to production.

You don't need to be technical. Just describe what's wrong and a verified developer will handle the rest.

Get Help

Frequently Asked Questions

Why does my Base44 app show 'Not Secure'?

This usually means the SSL certificate isn't properly configured or there's mixed content (some resources loading over HTTP). Check your custom domain SSL settings and search for any hardcoded HTTP URLs.

How do I fix mixed content warnings in Base44?

Find any images, scripts, or API calls that use http:// URLs and change them to https://. This includes embedded content, external scripts, and image URLs in your database.

Related Base44 Issues

Can't fix it yourself?
Real developers can help.

You don't need to be technical. Just describe what's wrong and a verified developer will handle the rest.

Get Help