postman-app-support
postman-app-support copied to clipboard
Chrome limits certificate validity period, causing NET::ERR_CERT_INVALID error on Postman
Is there an existing issue for this?
- [X] I have searched the tracker for existing similar issues and I know that duplicates will be closed
Describe the Issue
When using Postman to capture network traffic, the generated certificate exceeds the maximum validity period of 398 days set by Chrome, resulting in a NET::ERR_CERT_INVALID error message. Note that the Postman-generated certificate has been added to the trusted certificates in the system.
Steps To Reproduce
- Use Postman to capture network traffic and generate a certificate.
- Add the Postman-generated certificate to the trusted certificates in the system.
- Attempt to use the generated certificate in Chrome, resulting in a NET::ERR_CERT_INVALID error message.
Screenshots or Videos
when I use Postman,

but, when I use whistle,

Operating System
macOS
Postman Version
10.13.4
Postman Platform
Postman App
User Account Type
Signed In User
Additional Context?
Chrome limits certificate validity period to improve network security, but Postman generates certificates that exceed this limit, causing errors when capturing network traffic. Although the Postman-generated certificate has been added to the trusted certificates in the system, the error message still appears in Chrome. It is recommended that Postman adheres to Chrome's limitations when generating certificates to facilitate better network operations.
https://chromium.googlesource.com/chromium/src/+/HEAD/net/docs/certificate_lifetimes.md
@evibhm Could you check if this issue is still reproducible with latest version of App? (i.e. v11).
If yes, you can follow below steps to regenerate the expired certificate forcefully.
- Quit Postman App if open.
- Head over to
/Users/{{YourUserName}}/Library/Application Support/Postman/proxy - Delete
postman-proxy-ca.crtandpostman-proxy-ca.keyfiles. - Reopen Postman app and start the proxy session.
@evibhm We're closing this issue but feel free to reopen it if you face any further problems.