diff --git a/docs/install.sh b/docs/install.sh
index 6784f2f..49f21e0 100644
--- a/docs/install.sh
+++ b/docs/install.sh
@@ -525,6 +525,11 @@ EOF
     echo "Setting up cache."
     chown www-data:www-data /var/www/cp/cache
 
+    echo "Downloading ICANN TMCH certificate data."
+    curl -o /etc/ssl/certs/tmch.pem https://ca.icann.org/tmch.crt
+    curl -o /etc/ssl/certs/tmch_pilot.pem https://ca.icann.org/tmch_pilot.crt
+    chmod 644 /etc/ssl/certs/tmch.pem /etc/ssl/certs/tmch_pilot.pem
+
     echo -e "Installation complete!\n"
     echo -e "Next steps:\n"
     echo -e "1. Configure each component by editing their respective configuration files."
diff --git a/docs/update1021.sh b/docs/update1021.sh
index ca753f0..2eec7cb 100644
--- a/docs/update1021.sh
+++ b/docs/update1021.sh
@@ -164,6 +164,11 @@ systemctl restart ${PHP_VERSION}-fpm
 
 wget "http://www.adminer.org/latest.php" -O /usr/share/adminer/latest.php
 
+echo "Downloading ICANN TMCH certificate data."
+curl -o /etc/ssl/certs/tmch.pem https://ca.icann.org/tmch.crt
+curl -o /etc/ssl/certs/tmch_pilot.pem https://ca.icann.org/tmch_pilot.crt
+chmod 644 /etc/ssl/certs/tmch.pem /etc/ssl/certs/tmch_pilot.pem
+
 # Start services
 echo "Starting services..."
 systemctl start epp