diff --git a/configs/common/main-router b/configs/common/main-router
index 1dc93cc..0a619a5 100644
--- a/configs/common/main-router
+++ b/configs/common/main-router
@@ -55,6 +55,7 @@ CONFIG_PACKAGE_qrencode=y
 
 CONFIG_PACKAGE_unbound-daemon=y
 CONFIG_PACKAGE_luci-app-unbound=y
+CONFIG_PACKAGE_ca-certificates=y
 
 # collecd
 CONFIG_PACKAGE_luci-app-statistics=y
diff --git a/configs/common/parents b/configs/common/parents
index 2421061..6d84e6d 100644
--- a/configs/common/parents
+++ b/configs/common/parents
@@ -39,6 +39,7 @@ CONFIG_PACKAGE_luci-proto-wireguard=y
 ## https dns
 CONFIG_PACKAGE_unbound-daemon=y
 CONFIG_PACKAGE_luci-app-unbound=y
+CONFIG_PACKAGE_ca-certificates=y
 
 # collecd
 CONFIG_PACKAGE_luci-app-statistics=y
diff --git a/configs/common/parents-minimal b/configs/common/parents-minimal
index f7bf3bc..2d0fb7c 100644
--- a/configs/common/parents-minimal
+++ b/configs/common/parents-minimal
@@ -32,6 +32,7 @@ CONFIG_PACKAGE_owut=y
 ## https dns
 CONFIG_PACKAGE_unbound-daemon=y
 CONFIG_PACKAGE_luci-app-unbound=y
+CONFIG_PACKAGE_ca-certificates=y
 
 # collecd
 CONFIG_PACKAGE_luci-app-statistics=y
diff --git a/openwrt-configure.sh b/openwrt-configure.sh
index 09c73ee..f4d05e2 100755
--- a/openwrt-configure.sh
+++ b/openwrt-configure.sh
@@ -76,7 +76,7 @@ if [[ "$DEVICE" =~ Main|main ]]; then
         PACKAGES="$PACKAGES dnscrypt-proxy2"
     fi
     if [[ "$INSTALL_UNBOUND" =~ True|true ]]; then
-        PACKAGES="$PACKAGES unbound-daemon luci-app-unbound"
+        PACKAGES="$PACKAGES unbound-daemon luci-app-unbound ca-certificates"
     fi
 fi