Browser shows website as insecure (NET::ERR_SSL_OBSOLETE_VERSION | TLS 1.0 & 1.1)

Question

Why does my website show insecure in browsers when my certificate is valid?

Answer

If you have a server which uses outdated ciphers and TLS 1.0 or 1.1 then you will begin seeing that your website will be reported as insecure by the browser.

Google announced that on July 2020, the new versions of Google Chrome will remove support for TLS 1.0 and TLS 1.1. As such any websites which have not yet updated to use newer and more secure protocols will be presented with the following message from Google Chrome:

NET::ERR_SSL_OBSOLETE_VERSION

 Whilst you are able to bypass this message, the browser will continue to mark the website as insecure for any visitor that goes to your website, as such we recommend that you upgrade your application and websites to support at least TLS 1.2.

This may also affect access to the cPanel & WHM interface. If you face this issue, please refer to the following article.