CURLOPT_SSL_VERIFYHOST should be set to value 2, otherwise it's a security problem (possible MITM attack)
Use CA certificate from Mozzila.org in CURL call.