diff --git a/linux/build-nzbget b/linux/build-nzbget
index 3522984a..5ecad36e 100755
--- a/linux/build-nzbget
+++ b/linux/build-nzbget
@@ -184,6 +184,8 @@ UpdateFromRepository()
         echo "Updating root certificates"
         cd ../setup
         curl --remote-name --time-cond cacert.pem https://curl.se/ca/cacert.pem
+        # remove expired DST Root CA X3 certificate
+        sed '/^DST Root CA X3$/,/^-----END CERTIFICATE-----$/d;' -i cacert.pem
         cd $BUILDDIR
     fi
 }
diff --git a/windows/build-nzbget.bat b/windows/build-nzbget.bat
index 29bc0206..5913aa78 100644
--- a/windows/build-nzbget.bat
+++ b/windows/build-nzbget.bat
@@ -95,6 +95,8 @@ echo Updating root certificates
 cd image
 %CURL% --remote-name --time-cond cacert.pem https://curl.se/ca/cacert.pem
 if errorlevel 1 goto BUILD_FAILED
+rem remove expired DST Root CA X3 certificate
+%SED% -e "/^DST Root CA X3$/,/^-----END CERTIFICATE-----$/d;" -i cacert.pem
 cd ..
 
 cd tmp\nzbget-%VERSION%