diff --git a/CHANGELOG.md b/CHANGELOG.md
index 10e2d38..2c962eb 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -4,6 +4,7 @@
 # 5.0.0
 
 * Change the default value of ``PHP_MAX_MEMORY`` from 256M (256 Mb) to 2G (2 Gb).
+* Fix `/etc/ssl/cert.pem` not in `open_basedir`
 
 # 4.7.0
 
diff --git a/src/init/prepare.sh b/src/init/prepare.sh
index 284036e..52279ca 100755
--- a/src/init/prepare.sh
+++ b/src/init/prepare.sh
@@ -291,7 +291,8 @@ phpConf() {
     sed -i -e "s/%PHP_MAX_EXECUTION_TIME%/${php_max_execution_time}/" $f
 
     # production open_basedir conf value
-    open_basedir="/.dockerenv:/elabftw/:/tmp/:/usr/bin/unzip"
+    # /etc/ssl/cert.pem is for openssl and timestamp related functions
+    open_basedir="/.dockerenv:/elabftw/:/tmp/:/usr/bin/unzip:/etc/ssl/cert.pem"
     # DEV MODE
     if ($dev_mode); then
         # we don't want to use opcache as we want our changes to be immediately visible