diff --git a/unbound.conf b/unbound.conf
index f0220582..d39fd577 100644
--- a/unbound.conf
+++ b/unbound.conf
@@ -24,6 +24,7 @@ server:
   hide-version: yes
   
   # security
+  tls-cert-bundle: "/etc/ssl/certs/ca-certificates.crt"
   root-hints: "/etc/unbound/root.hints"
   trust-anchor-file: "/etc/unbound/root.key"
   harden-below-nxdomain: yes