Certificates

Postman’s native apps provide a way to view and set SSL certificates on a per domain basis.

To manage your client certificates, click the wrench icon on the right side of the header toolbar, choose “Settings”, and select the Certificates tab.

certificates tab

Adding a Client Certificate

To add a new client certificate, click the Add Certificate link.

In the Host field, enter the domain (without protocol) of the request URL for which you want to use the certificate, for example, echo.getpostman.com

You can also specify a custom port to associate with this domain in the Port field. This is optional. If left empty, the default HTTPS port (443) will be used.

Choose your client certificate file in the CRT file field. Currently, we only support the CRT format. Support for other formats (like PFX) will come soon.

Choose your client certificate key file in the KEY file field.

If you used a passphrase while generating the client certificate, you’ll need to supply the passphrase in the Passphrase field. Otherwise, leave it blank.

add certificate

Once your certificate is added, it should appear in the client certificates list.

client certificates list

NOTE: You should not have multiple certificates set for the same domain. If you have multiple ones set, only the last one added will be used.

Using a Certificate

You do not have to perform any extra steps to use a client certificate if it has been added. If you make a request to a configured domain, the certificate will automatically be sent with the request, provided you make the request over HTTPS.

You can verify this. To do so, open up your Postman console (CMD/CTRL + ALT + C). You can read more about the Postman Console. A new window will open up.

Now, send a request to https://echo.getpostman.com/get, keeping the Postman Console open. Notice we’re using https to make sure the certificate is sent. Once the response arrives, switch over to the Postman console to see your request. If you expand your request, you will be able to see which certificate was sent along with the request.

Postman console view

Removing a Certificate

To remove a certificate, use the Remove link next to the certificate under the Certificates tab in the Settings.

remove certificate

Editing a Certificate

You cannot edit a certificate after it has been created. To make changes to it, you will need to remove the certificate and create a new one.