Hi, We had a similar problem. The only difference was that our infrastructure was set up a little differently. I found out that certificates aren't loaded from /etc/cacerts.pem, but via a different path. The Path wich is working for us is: $PHANTOMHOME/usr/lib/platform/lib/python3.13/site-packages/certifi/cacert.pem Since there is a deep connection to python venv and the plugin certifi, there must be a misconfiguration in the script you should use to update Certificates. Also the official documation metions that you have to use phenv python3 $PHANTOMHOME/bin/import_cert.py. If you want to know which certs got loaded from SOAR you can check it via: phenv python3 -c "import requests; print(requests.certs.where())" After we uploaded our root and intermediate CA it worked for us. I hope this helps. Regards Tobi
... View more