I have an online installer made using the framework. On launch, when it tries to retrieve data from <companyUrl>, it fails with "Cannot retrieve remote tree". When invoked through the CLI we see 

[886] Warning: SSL error: "The issuer certificate of a locally looked up certificate could not be found"
[887] Warning: Network error while downloading 'https://<url>/repo/Updates.xml?1081891843': SSL handshake failed: The issuer certificate of a locally looked up certificate could not be found.
[911] Warning: Cannot retrieve remote tree .

I can bypass this error by opening up <url> in a browser, downloading/installing the certificate, and when the installer is opened the second time, it works.

This workaround is obviously not something we want to force on every user