diff --git a/src/filters/oidc/jwks_resolver.cc b/src/filters/oidc/jwks_resolver.cc
index 598b4490..0732e73e 100644
--- a/src/filters/oidc/jwks_resolver.cc
+++ b/src/filters/oidc/jwks_resolver.cc
@@ -37,6 +37,7 @@ void DynamicJwksResolverImpl::JwksFetcher::request(
     const boost::system::error_code&) {
   boost::asio::spawn(ioc_, [this](boost::asio::yield_context yield) {
     common::http::TransportSocketOptions opt;
+    opt.ca_cert_ = idp_config_.trusted_certificate_authority();
     opt.verify_peer_ = verify_peer_cert_;
     auto resp = http_ptr_->Get(jwks_uri_, {}, "", opt, "", ioc_, yield);
     auto next_schedule_interval = periodic_fetch_interval_sec_;