diff --git a/templates/gitlab-ci-semrel.yml b/templates/gitlab-ci-semrel.yml
index b86a171fd05675692ff4e7aef6392e872d8f6b9f..1acc8f0e86057c63e86b2c3135511f2b7eb4b21c 100644
--- a/templates/gitlab-ci-semrel.yml
+++ b/templates/gitlab-ci-semrel.yml
@@ -834,9 +834,9 @@ stages:
       command: ["--service", "semrel", "3.14.0"]
   before_script:
     - !reference [.semrel-scripts]
-    - install_ca_certs "${CUSTOM_CA_CERTS:-$DEFAULT_CA_CERTS}"
     # install git and OpenSSH
     - maybe_install_packages ca-certificates git openssh-client gpg gpg-agent
+    - install_ca_certs "${CUSTOM_CA_CERTS:-$DEFAULT_CA_CERTS}"
     - maybe_install_yq
     - cd "${SEMREL_CONFIG_DIR}"
     - prepare_semantic_release