This seems like it... works exactly as intended? If you decide you trust that certificate (which can be a legitimate thing to do - the cert signature could be

This seems like it... works exactly as intended? If you decide you trust that certificate (which can be a legitimate thing to do - the cert signature could be communicated to you via out-of-band trusted mechanisms) then https://curl.se/docs/sslcerts.html https://curl.se/docs/sslcerts.html explains how to trust it.