title: SSL certificate verify result: unable to get local issuer certificate (20)
body: <p>I am trying to add SSL certificate on Heroku using windows 8. I am referring <a href="https://devcenter.heroku.com/articles/ssl-endpoint" rel="noreferrer">Heroku's ssl-endpoint article</a> to add it. Everything is working fine till last step, but when I enter </p>
  
  <pre><code>curl -kvI https://www.example.com
  </code></pre>
  
  <p>It says </p>
  
  <pre><code>SSL certificate verify result: unable to get local issuer certificate (20), continuing anyway.
  </code></pre>
  
  <p>Here is the complete output:</p>
  
  <pre><code>* Adding handle: conn: 0x606458
  * Adding handle: send: 0
  * Adding handle: recv: 0
  * Curl_addHandleToPipeline: length: 1
  * - Conn 0 (0x606458) send_pipe: 1, recv_pipe: 0
  * About to connect() to www.example.com port 443 (#0)
  *   Trying 107.21.111.209...
  * Connected to www.example.com (107.21.111.209) port 443 (#0)
  * SSLv3, TLS handshake, Client hello (1):
  * SSLv3, TLS handshake, Server hello (2):
  * SSLv3, TLS handshake, CERT (11):
  * SSLv3, TLS handshake, Server key exchange (12):
  * SSLv3, TLS handshake, Server finished (14):
  * SSLv3, TLS handshake, Client key exchange (16):
  * SSLv3, TLS change cipher, Client hello (1):
  * SSLv3, TLS handshake, Finished (20):
  * SSLv3, TLS change cipher, Client hello (1):
  * SSLv3, TLS handshake, Finished (20):
  * SSL connection using DHE-RSA-AES128-SHA
  * Server certificate:
  *        subject: C=US; ST=California; L=San Francisco; O=Heroku, Inc.; CN=*.her
  okuapp.com
  *        start date: 2014-01-21 00:00:00 GMT
  *        expire date: 2017-05-19 12:00:00 GMT
  *        issuer: C=US; O=DigiCert Inc; OU=www.digicert.com; CN=DigiCert SHA2 Hig
  h Assurance Server CA
  *        SSL certificate verify result: unable to get local issuer certificate (
  20), continuing anyway.
  &gt; HEAD / HTTP/1.1
  &gt; User-Agent: curl/7.30.0
  &gt; Host: www.example.com
  &gt; Accept: */*
  &gt;
  &lt; HTTP/1.1 200 OK
  HTTP/1.1 200 OK
  * Server Cowboy is not blacklisted
  &lt; Server: Cowboy
  Server: Cowboy
  &lt; Connection: keep-alive
  Connection: keep-alive
  &lt; X-Powered-By: Express
  X-Powered-By: Express
  &lt; Accept-Ranges: bytes
  Accept-Ranges: bytes
  &lt; Date: Thu, 02 Apr 2015 05:14:25 GMT
  Date: Thu, 02 Apr 2015 05:14:25 GMT
  &lt; Cache-Control: public, max-age=0
  Cache-Control: public, max-age=0
  &lt; Last-Modified: Tue, 31 Mar 2015 14:21:19 GMT
  Last-Modified: Tue, 31 Mar 2015 14:21:19 GMT
  &lt; Etag: W/"9e3-2781781373"
  Etag: W/"9e3-2781781373"
  &lt; Content-Type: text/html; charset=UTF-8
  Content-Type: text/html; charset=UTF-8
  &lt; Content-Length: 2531
  Content-Length: 2531
  &lt; Set-Cookie: connect.sid=s%3AiRH8B-WEim3II5fgpXfF1otZXeqvmdMi.ibAcnpY2ATqERWyMJ
  3c%2BptFMqgQLwrFQvAoOW6zh9HM; Path=/; HttpOnly
  Set-Cookie: connect.sid=s%3AiRH8B-WEim3II5fgpXfF1otZXeqvmdMi.ibAcnpY2ATqERWyMJ3c
  %2BptFMqgQLwrFQvAoOW6zh9HM; Path=/; HttpOnly
  &lt; Via: 1.1 vegur
  Via: 1.1 vegur
  
  &lt;
  * Connection #0 to host www.example.com left intact
  </code></pre>
  
  <p>What's wrong here? Thank you in advance.</p>