原来一开始查询不包含g2证书，update ca-certificates更新证书之后，执行grep "DigiCert Global Root" /etc/pki/tls/certs/ca-bundle.crt命令显示如下，麻烦确认一下，这样是不是就包含了g2证书 Issuer: C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Global Root CA         Subject: C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Global Root CA         Issuer: C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Global Root G2         Subject: C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Global Root G2         Issuer: C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Global Root G3         Subject: C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Global Root G3