# WSL SSL certificate problem: unable to get local issuer certificat

**URL:** <https://openziti.discourse.group/t/wsl-ssl-certificate-problem-unable-to-get-local-issuer-certificat/5001>\
**Category:** Ziti Overlay\
**Created:** [August 13, 2025, 5:55pm UTC](https://openziti.discourse.group/t/wsl-ssl-certificate-problem-unable-to-get-local-issuer-certificat/5001 "2025-08-13T17:55:59Z")\
**Posts on this page:** 1\
**Showing post:** 3

<div class="post-metadata">

**Author:** ![brandi](https://avatars.discourse-cdn.com/v4/letter/b/45deac/32.png) [@brandi](https://openziti.discourse.group/u/brandi)\
**Post date:** [August 13, 2025, 6:24pm UTC](https://openziti.discourse.group/t/wsl-ssl-certificate-problem-unable-to-get-local-issuer-certificat/5001/3 "2025-08-13T18:24:53Z")

</div>

The certificate is a Let’s encrypt generated one.

When I try to get the certificate using open ssl, It’s not finding any:

```auto
❯ openssl s_client -connect git.lan.example.com:443 -showcerts | grep -E "(BEGIN|END) CERTIFICATE"
depth=0 CN = git.lan.example.com
verify error:num=20:unable to get local issuer certificate
verify return:1
depth=0 CN = git.lan.example.com
verify error:num=21:unable to verify the first certificate
verify return:1
-----BEGIN CERTIFICATE-----
-----END CERTIFICATE-----

```

I guess that’s not really an Openziti issue, but something might be wrong on my WSL. I’ve already tried gpt and looked into this [Intercept DNS names are not resolving in WSL](https://openziti.discourse.group/t/intercept-dns-names-are-not-resolving-in-wsl/3923) But nothing worked so far 😕

---

_[View the full topic](https://openziti.discourse.group/t/wsl-ssl-certificate-problem-unable-to-get-local-issuer-certificat/5001)._