If the system's time and/or date of the device you are using to browse the website is miss-configured, you can see a valid certificate shown as invalid. This can happen in two possible scenarios:
The system's date is before the "Not valid before" value of the
The system's date is after the "Not valid after" value of ...
This may be available in Chrome Development Tools Network.SecurityDetails.
which provides security details about the request.
I think Browser Extensions have risks associated with them that are documented in other places. From what I understand, the question is specifically about this API that Browser Extensions may use. If I understand the question correctly, it is not that they deny access to these headers, it is a question of why. With those things in mind, let's skip over ...