If you cannot log in, try running sudo cert-sync /etc/ssl/certs/ca-certificates.crt or sudo cert-sync /etc/pki/tls/certs/ca-bundle.crt.
sudo cert-sync /etc/ssl/certs/ca-certificates.crt
sudo cert-sync /etc/pki/tls/certs/ca-bundle.crt