> For the complete documentation index, see [llms.txt](https://doc.duaer.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://doc.duaer.com/troubleshooting/http-request-ssl-certificate-error.md).

# Fix Duaer HTTP Request certificate errors such as self-signed certificate

When Duaer HTTP Request calls an internal or test service and fails with self-signed certificate or unable to verify the first certificate, the server certificate is not trusted.
## Certificate errors in Duaer

- self-signed certificate, self-signed certificate in certificate chain: the server uses a self-signed cert or an internal CA.
- unable to verify the first certificate: the server does not send its intermediate certificate. The browser works and Duaer fails, usually for this reason.
- certificate has expired: the certificate expired.
- Hostname/IP does not match certificate's altnames: you call an IP or alias that is not on the certificate.

## Fix in this order

1. Fix the server when you can: renew, serve the full chain (server plus intermediate), and call the name on the certificate. Only this keeps full security.
2. Self-hosted Duaer calling services signed by an internal CA: mount the CA certificate, set NODE_EXTRA_CA_CERTS to its path, and restart.
3. Short internal tests only: turn on Ignore SSL Issues (Insecure) under [HTTP Request](/build/http-request.md) Options. Certificates are no longer checked, so avoid it for public endpoints and sensitive data.
## Questions

### Why does Duaer HTTP Request fail on a URL the browser opens fine?

Browsers fill in a missing intermediate certificate, Duaer HTTP Request does not. Have the server send the full chain.

### Can I use NODE_EXTRA_CA_CERTS on Duaer Cloud?

No. It is an environment variable for self-hosted Duaer. Services called from Duaer Cloud need a publicly trusted certificate.

## Related

- [Call an API with HTTP Request in Duaer](https://doc.duaer.com/build/http-request.md)
- [Environment variables for Duaer](https://doc.duaer.com/hosting/configuration/environment-variables.md)
- [Handle errors gracefully in Duaer](https://doc.duaer.com/flow-logic/error-handling.md)