diff --git a/util/certificates.go b/util/certificates.go
index c8af7e3..307a135 100644
--- a/util/certificates.go
+++ b/util/certificates.go
@@ -8,7 +8,7 @@ import (
 )
 
 const (
-	defaultDownloadURL = "https://github.com/mozilla/gecko-dev/blob/master/security/nss/lib/ckfw/builtins/certdata.txt?raw=true"
+	defaultDownloadURL = "https://raw.githubusercontent.com/mozilla/gecko-dev/refs/heads/master/security/nss/lib/ckfw/builtins/certdata.txt"
 )
 
 // LoadCACerts loads the certdata from Mozilla and parses it into a CertPool.