//cetrtificates.pem consists of at the beginning put: Intermediate certification and after that Stop-consumer certification I'd the same trouble on OSX OpenSSL one.0.1i from Macports, and likewise needed to specify CApath to be a workaround (and as mentioned inside the Ubuntu bug report, even an invalid My solution was to locate https://heywoodj428hte7.wikilowdown.com/user