# Certificate is NOT trusted when installing Jenkins

**URL:** <https://community.jenkins.io/t/certificate-is-not-trusted-when-installing-jenkins/1255>\
**Category:** Ask a question\
**Tags:** question\
**Created:** [January 14, 2022, 11:26pm UTC](https://community.jenkins.io/t/certificate-is-not-trusted-when-installing-jenkins/1255 "2022-01-14T23:26:40Z")\
**Posts on this page:** 1\
**Showing post:** 7

<div class="post-metadata">

**Author:** ![rburchdish](https://dub1.discourse-cdn.com/flex013/user_avatar/community.jenkins.io/rburchdish/32/818_2.png) [@rburchdish](https://community.jenkins.io/u/rburchdish)\
**Post date:** [January 15, 2022, 12:17am UTC](https://community.jenkins.io/t/certificate-is-not-trusted-when-installing-jenkins/1255/7 "2022-01-15T00:17:07Z")

</div>

@halkeye

I recreated the ca-cert  
`sudo update-ca-certificates -f`

It looks like I received the same output when attempting to connect to [jenkins.io](http://jenkins.io)

```auto
curl -v https://pkg.jenkins.io/ >/dev/null
  % Total % Received % Xferd Average Speed Time Time Time Current
                                 Dload Upload Total Spent Left Speed
  0 0 0 0 0 0 0 0 --:--:-- --:--:-- --:--:-- 0* Trying 151.101.2.133:443...
* TCP_NODELAY set
* Connected to pkg.jenkins.io (151.101.2.133) port 443 (#0)
* ALPN, offering h2
* ALPN, offering http/1.1
* successfully set certificate verify locations:
* CAfile: /etc/ssl/certs/ca-certificates.crt
  CApath: /etc/ssl/certs
} [5 bytes data]
* TLSv1.3 (OUT), TLS handshake, Client hello (1):
} [512 bytes data]
* TLSv1.3 (IN), TLS handshake, Server hello (2):
{ [106 bytes data]
* TLSv1.2 (IN), TLS handshake, Certificate (11):
{ [4020 bytes data]
* TLSv1.2 (IN), TLS handshake, Server key exchange (12):
{ [300 bytes data]
* TLSv1.2 (IN), TLS handshake, Server finished (14):
{ [4 bytes data]
* TLSv1.2 (OUT), TLS handshake, Client key exchange (16):
} [37 bytes data]
* TLSv1.2 (OUT), TLS change cipher, Change cipher spec (1):
} [1 bytes data]
* TLSv1.2 (OUT), TLS handshake, Finished (20):
} [16 bytes data]
* TLSv1.2 (IN), TLS handshake, Finished (20):
{ [16 bytes data]
* SSL connection using TLSv1.2 / ECDHE-RSA-AES128-GCM-SHA256
* ALPN, server accepted to use h2
* Server certificate:
* subject: CN=pkg.jenkins.io
* start date: Dec 13 11:47:49 2021 GMT
* expire date: Mar 13 11:47:48 2022 GMT
* subjectAltName: host "pkg.jenkins.io" matched cert's "pkg.jenkins.io"
* issuer: C=US; O=Let's Encrypt; CN=R3
* SSL certificate verify ok.
* Using HTTP2, server supports multi-use
* Connection state changed (HTTP/2 confirmed)
* Copying HTTP/2 data in stream buffer to connection buffer after upgrade: len=0
} [5 bytes data]
* Using Stream ID: 1 (easy handle 0x564a14e8edb0)
} [5 bytes data]
> GET / HTTP/2
> Host: pkg.jenkins.io
> user-agent: curl/7.68.0
> accept: */*
> 
{ [5 bytes data]
* Connection state changed (MAX_CONCURRENT_STREAMS == 100)!
} [5 bytes data]
< HTTP/2 200 
< server: Apache/2.4.29 (Ubuntu)
< content-type: text/html;charset=UTF-8
< accept-ranges: bytes
< date: Sat, 15 Jan 2022 00:14:51 GMT
< via: 1.1 varnish
< age: 506
< x-served-by: cache-mdw17348-MDW
< x-cache: HIT
< x-cache-hits: 1
< x-timer: S1642205692.906762,VS0,VE1
< vary: Accept-Encoding
< strict-transport-security: max-age=300
< content-length: 3329
< 
{ [1161 bytes data]
100 3329 100 3329 0 0 26212 0 --:--:-- --:--:-- --:--:-- 26212
* Connection #0 to host pkg.jenkins.io left intact

```

Excuse me for not knowing, but how would I update my local certs?

---

_[View the full topic](https://community.jenkins.io/t/certificate-is-not-trusted-when-installing-jenkins/1255)._