Use the -k switch on curl to skip certificate verification. Use a phone, or a phone call to a trusted friend, to verify the signature of the certificate. Obvi

Use the -k switch on curl to skip certificate verification. Use a phone, or a phone call to a trusted friend, to verify the signature of the certificate. Obviously not instructions you can give to an ordinary user, but that line was crossed at curl.