diff --git a/pkg/crypto/mdmcertutil/certutil.go b/pkg/crypto/mdmcertutil/certutil.go
index ac834e4a..430165e9 100644
--- a/pkg/crypto/mdmcertutil/certutil.go
+++ b/pkg/crypto/mdmcertutil/certutil.go
@@ -73,7 +73,7 @@ func (p *PushCertificateRequest) Encode() ([]byte, error) {
 
 const (
 	wwdrIntermediaryURL = "https://www.apple.com/certificateauthority/AppleWWDRCAG3.cer"
-	appleRootCAURL      = "http://www.apple.com/appleca/AppleIncRootCertificate.cer"
+	appleRootCAURL      = "https://www.apple.com/appleca/AppleIncRootCertificate.cer"
 )
 
 // CreatePushCertificateRequest creates a request structure required by identity.apple.com.