Recommended Approach: Trust the Root CA Certificate
Step 1: Identify the Certificate Chain Issue
First, diagnose what's actually missing:
openssl s_client -showcerts -connect git.example.internal:443 </dev/null 2>/dev/null
Look for the entire certificate…