Your connection is not private
-
I have a site that is not supposed to have a security certificate but if I go to https://www.mysite.com I get the message below
Your connection is not private
Attackers might be trying to steal your information from www.mysite.com (for example, passwords, messages, or credit cards).
NET::ERR_CERT_COMMON_NAME_INVALID_<label>Automatically report details of possible security incidents to Google. </label>_
-
That's a pretty typical message a browser will display when a security certificate is either set up incorrectly or it expired. A big reason why these messages are shown are because of phishing scams that typically happen from sites attempting to display security to a user when in fact they are only looking to steal info. Not all sites are like that, but it is a concern.
_NET::ERR_CERT_COMMON_NAME_INVALID _means the certificate is not registered with a valid authority. Check where the certificate was registered and make sure it's valid. If it's self signed, i'm not sure what steps you would need to take to get that resolved... I'll do some googling, but someone with a little more experience should chime in to help
Update: Found this google product forum thread which might help - https://productforums.google.com/forum/#!msg/chrome/95NrJOxJKSg/0KyeuTNlbj0J
-
Maybe your hosting also include certificate for your site and support secure connection too. But since you didn't enable this visitors may get other site (yeah, that's right!) and also invalid certificate (because certificate mismatch with domain).
Isn't great situation, but you can check your site with https:// and disable it on your hosting control panel.