ERR_SSL_KEY_USAGE_INCOMPATIBLE error Google Chrome—This site can't be reached might be temporarily down or it may have moved permanently to a new web

Question

Today I encountered ERR_SSL_KEY_USAGE_INCOMPATIBLE error:

This site can't be reached
The webpage at https://... might be temporarily down or it may have moved permanently to a new web address.
ERR_SSL_KEY_USAGE_INCOMPATIBLE

Why is this happening? How can I solve it?

Answer 1

To create a self-signed certificate for *.xxx.com for 10 years, do the following:

1. Run powershell as admin
2. New-SelfSignedCertificate -CertStoreLocation cert:\LocalMachine\My -DnsName *.xxx.com -NotAfter (Get-Date).AddYears(10) -FriendlyName '*.xxx.com (self-signed certificate for 10 years)'
3. Select cert in IIS: Site -> [Bindings...]

Answer 2

The equivalent Edge registry setting since Edge 121 now enforces the check is to create a DWORD in:

Windows Registry Editor Version 5.00
   
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge]
"RSAKeyUsageForLocalAnchorsEnabled"=dword:00000000