Hi, the [CA bundle file](https://github.com/cloudflare/cfssl_trust/blob/086bfd7dd73911513bb5a771d994e7fc8e257fc8/ca-bundle.crt) seems to be missing the GTS root CAs: https://pki.goog/repository/#root-cas (GTS Root R1 to R4) For comparison, Mozilla's CA cert store has them: https://curl.se/docs/caextract.html