We are supposed to have valid certificates and if really needed, slapos.recipe.build:gitclone can ignore it.