{"version":"2.1.309","anchor":"ca-certificate-bundles-drop-certs-that-do-not-chain-to-a-ro","canonical_anchor":"ca-certificate-bundles-drop-certs-that-do-not-chain-to-a-ro","heading":"Certificates that do not lead to a root in their bundle are now dropped","tier":"notice","area":"Certificates","scope":"both","heads_up":true,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.309\/e\/ca-certificate-bundles-drop-certs-that-do-not-chain-to-a-ro","release_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.309","markdown":"### Certificates that do not lead to a root in their bundle are now dropped\n\nClaude Code now drops certificates in a CA bundle file that do not chain to a root certificate in that file, and logs how many it dropped\n\n**What**\n\nA CA certificate bundle is a file of certificates used to decide which secure connections to trust. A root certificate is the top-level certificate the others depend on. When Claude Code reads such a file, it now drops any certificate that does not lead back to a root certificate in the same file. It writes a log line saying how many it dropped and from which file.\n\n**Why**\n\nIf you use a custom certificate bundle, stray certificates in it are now ignored. The log line shows when that happens.\n\n- Area: Certificates\n- Tier: You'll notice\n- Useful: 2\/5\n- Signal: 1\/5\n- Scope: both\n- Heads-up: yes"}