CRW 2.5 workspace has "unable to get local issuer certificate" pulling from DevFile registry

Issue

Symptoms:
Couldn't import https://devfile-registry-crw-common.apps.xxxxx.com/resources/spring-boot-http-booster-spring-boot-http-booster-sb-2.3.x.zip:
curl: (60) SSL certificate problem: unable to get local issuer certificate More details here: https://curl.haxx.se/docs/sslcerts.html
curl failed to verify the legitimacy of the server and therefore could not establish a secure connection to it. To learn more about this situation and how to fix it, please visit the web page mentioned above.