1. /ip dns set servers=1.1.1.1,1.0.0.1 # CA certificates extracted from DigiCert 2. /tool fetch https://cacerts.digicert.com/DigiCertGlobalRootCA.crt.pem # Import CA ...