NODE_EXTRA_CA_CERTS

A Claude Code environment variable, read out of the shipped bundle. It has been in the build since v2.1.138, including the newest one read.

Releases whose published page names NODE_EXTRA_CA_CERTS.

1. v2.1.305 20 Oct 2026
   Certificates that don't chain to a trusted root are now dropped

   Claude Code now discards CA certificates whose issuer isn't in its certificate list, unless CLAUDE_CODE_CLIENT_CERT is set

   found in this entry's text

2. v2.1.305 20 Oct 2026
   Gateway now refuses to start when no CA certificate can be loaded

   The gateway now passes an explicit certificate list on its connections and stops at startup if none can be loaded

   found in this entry's text, named in this entry

3. v2.1.303 18 Oct 2026
   Claude Code now refuses to trust a short built-in list of blocked root certificates

   Certificates on a built-in deny list are now dropped from every certificate source, including a NODE_EXTRA_CA_CERTS file

   found in this entry's text

4. v2.1.303 18 Oct 2026
   Claude Code now records where each trusted certificate came from

   Each root certificate Claude Code loads is now labelled as bundled, from the system store, or from NODE_EXTRA_CA_CERTS

   found in this entry's text

5. v2.1.303 18 Oct 2026
   Blocked root certificates are dropped, and a missing system store falls back to bundled ones

   Claude Code drops four blocked root certificates from all sources and uses its bundled roots when the system store is unavailable

   found in this entry's text

6. v2.1.303 18 Oct 2026
   Claude Code keeps track of which extra certificates it has already warned about

   Claude Code now remembers which NODE_EXTRA_CA_CERTS certificates it has warned about, so the warning can be shown once

   found in this entry's text

7. v2.1.283 25 Sep 2026
   CLAUDE_CODE_GB_BASE_URL gets the same settings checks as the proxy variables

   CLAUDE_CODE_GB_BASE_URL joins the proxy, certificate and bridge variables that Claude Code checks when it cleans a settings file

   found in this entry's text

8. v2.1.275 17 Sep 2026
   CA-cert troubleshooting message now lists concrete env vars

   SSL certificate error message now lists the specific env var to check per tool

   found in this entry's text, named in this entry

9. v2.1.273 15 Sep 2026
   SSL certificate errors now include a docs link and a plainer explanation

   SSL certificate errors now explain the likely corporate-proxy cause and link to setup docs

   found in this entry's text, named in this entry

10. v2.1.248 27 Aug 2026
    Custom CA no longer misreported for local agent runs

    Inherited certificate settings are no longer reported as your own custom CA in local agent runs.

    named in this entry, found in this entry's text

11. v2.1.232 13 Aug 2026
    Session state moved into named stores and environment reads centralised

    Session reset and model fallback use named stores, and cert env vars go through one accessor.

    found in this entry's text

12. v2.1.195 26 Jun 2026
    Cloud Gateway OAuth Login

    found in this entry's text

13. v2.1.73 11 Mar 2026

    found in this entry's text

14. v2.1.70 6 Mar 2026
    CA Certificate Configuration from Settings

    found in this entry's text

15. v2.1.9 15 Jan 2026
    SSL/TLS Certificate Telemetry

    found in this entry's text

16. v1.0.40 1 Jul 2025
    Improved SSL/TLS Certificate Handling

    found in this entry's text

17. v1.0.36 27 Jun 2025
    mTLS (Mutual TLS) Support

    found in this entry's text

The earliest release whose published evidence quoted NODE_EXTRA_CA_CERTS was v2.1.70, 6 Mar 2026. That is the oldest release this project wrote about it, so it is a floor on the name's age and not the release that introduced it. It is not a presence reading: which builds carried the name is the table below.

One row per release since the first build this name was read out of. Absent means the build was read and the name was not in it, never mined means no bundle for that release was ever archived, and a declared type or a default is only ever what that release's own bundle stated.

Read out of the published npm bundle release by release, and out of Anthropic's own documentation as this site captured it. Nothing on this page is a description anybody here wrote about what the environment variable does. All environment variables.