# HTTP 421 Misdirected Request — Meaning, Causes & Fixes

> The request went to a server that can't produce a response for that hostname.

421 shows up with HTTP/2 and HTTP/3 connection reuse. Browsers reuse one TLS connection for several hostnames when the certificate covers them all and they resolve to the same IP. If the server on that connection isn't actually configured for one of those hostnames, it answers 421, and the browser retries on a fresh connection.

- Class: 4xx Client Error
- Retry: Yes — safe to retry
- Cacheable by default: no
- Defined in: [RFC 9110 §15.5.20 — 421 Misdirected Request](https://www.rfc-editor.org/rfc/rfc9110.html#section-15.5.20)

## Example response

```http
HTTP/1.1 421 Misdirected Request
Content-Type: application/json
Content-Length: 31

{"error":"Misdirected Request"}
```

## Common causes

- A wildcard or multi-domain certificate shared by virtual hosts with different TLS settings.
- Reverse proxies where the SNI from the TLS handshake doesn't match the `Host` header.

## How to fix it

1. Usually nothing — browsers retry on a new connection automatically.
2. If users do see it, give virtual hosts that share a certificate identical TLS settings, or a certificate each.

## FAQ

### Why do only some browsers hit 421?

It depends on connection coalescing. Browsers that reuse HTTP/2 connections across hostnames reach the misconfigured host; others open a new connection per host and never notice.

## Related status codes

- [400 Bad Request](https://www.devkult.com/http/400.md)
- [505 HTTP Version Not Supported](https://www.devkult.com/http/505.md)
- [502 Bad Gateway](https://www.devkult.com/http/502.md)

Open the interactive page: https://www.devkult.com/http/421