# Http client did not trust this server's certificate from the browser
**URL:** https://discuss.elastic.co/t/http-client-did-not-trust-this-servers-certificate-from-the-browser/200254
**Category:** Elasticsearch
**Tags:** elastic-stack-security
**Created:** [September 19, 2019, 3:30pm UTC](https://discuss.elastic.co/t/http-client-did-not-trust-this-servers-certificate-from-the-browser/200254 "2019-09-19T15:30:55Z")
**Posts on this page:** 4
**Page:** 1
### Author:  [@NNN](https://discuss.elastic.co/u/NNN)
#### Post date: [September 19, 2019, 3:30pm UTC](https://discuss.elastic.co/t/http-client-did-not-trust-this-servers-certificate-from-the-browser/200254/1 "2019-09-19T15:30:55Z")
Hello,
SSL does not work when I try to access [https://localhost:9200](https://localhost:9200) from the browser
I get
: http client did not trust this server's certificate, closing connection
my elasticsearch.yml
xpack.security.enabled : true
xpack.security.transport.ssl.enabled: true
xpack.security.transport.ssl.verification\_mode: certificate
xpack.security.transport.ssl.key: instance.key
xpack.security.transport.ssl.certificate: instance.crt
xpack.security.transport.ssl.certificate\_authorities: ["ca.crt"]
xpack.security.http.ssl.enabled: true
xpack.security.http.ssl.key: instance.key
xpack.security.http.ssl.certificate: instance.crt
xpack.security.http.ssl.certificate\_authorities: ["ca.crt"]
I generated the certificates with .elasticsearch-certutil (pem format)
---
### Author:  [@MiTschMR](https://discuss.elastic.co/u/MiTschMR)
#### Post date: [September 23, 2019, 7:19am UTC](https://discuss.elastic.co/t/http-client-did-not-trust-this-servers-certificate-from-the-browser/200254/2 "2019-09-23T07:19:34Z")
Hi @NNN
First of all, what version of Elasticsearch are you using? Then, did you include "localhost" as a SAN (Subject Alternative Name) when you created the certificate?
MiTschMR
---
### Author:  [@ikakavas](https://discuss.elastic.co/u/ikakavas)
#### Post date: [September 23, 2019, 10:27am UTC](https://discuss.elastic.co/t/http-client-did-not-trust-this-servers-certificate-from-the-browser/200254/3 "2019-09-23T10:27:20Z")
> [@NNN](#):
>
> SSL does not work when I try to access [https://localhost:9200](https://localhost:9200) from the browser
> I get
> : http client did not trust this server's certificate, closing connection
This is expected. You are using an SSL certificate that was generated with `elasticsearch-certutil` and singed by a custom local CA which, as expected, is not trusted by your browser. Most browsers will allow you to add an exception for this certificate so that you can bypass this warning and access your Elasticsearch node on localhost over https.
This is fine for a dev environment on localhost.
---
### Author:  [@system](https://discuss.elastic.co/u/system)
#### Post date: [October 21, 2019, 10:27am UTC](https://discuss.elastic.co/t/http-client-did-not-trust-this-servers-certificate-from-the-browser/200254/4 "2019-10-21T10:27:20Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.