<network-security-config>
<!-- Trust user added CAs while debuggable only -->
<certificates src="user" />
<certificates src="system" />
<base-config cleartextTrafficPermitted="true">
<certificates src="system" />
<!-- Make sure your URL Server here -->
<domain includeSubdomains="true">your_production_domain</domain>
<certificates src="user"/>
<certificates src="system"/>
</network-security-config>