diff --git a/plist b/plist
index 8e69a8c8f..8eb4772ff 100644
--- a/plist
+++ b/plist
@@ -1137,6 +1137,7 @@
 /usr/local/opnsense/scripts/syslog/logformats/syslog.py
 /usr/local/opnsense/scripts/syslog/queryLog.py
 /usr/local/opnsense/scripts/system/activity.py
+/usr/local/opnsense/scripts/system/certctl.py
 /usr/local/opnsense/scripts/system/list_interrupts.py
 /usr/local/opnsense/scripts/system/nameservers.php
 /usr/local/opnsense/scripts/system/remote_backup.php
@@ -2046,7 +2047,6 @@
 /usr/local/opnsense/www/themes/opnsense/build/images/favicon.png
 /usr/local/opnsense/www/themes/opnsense/build/images/icon-logo.svg
 /usr/local/sbin/carp_service_status
-/usr/local/sbin/certctl.py
 /usr/local/sbin/configctl
 /usr/local/sbin/ifctl
 /usr/local/sbin/opnsense-beep
diff --git a/src/etc/inc/system.inc b/src/etc/inc/system.inc
index 82d1472bb..826bb97cb 100644
--- a/src/etc/inc/system.inc
+++ b/src/etc/inc/system.inc
@@ -948,7 +948,7 @@ function system_trust_configure($verbose = false)
     service_log("done.\n", $verbose);
 
     /* collects all trusted certificates into /etc/ssl/certs directory */
-    passthru('/usr/local/sbin/certctl.py rehash');
+    passthru('/usr/local/opnsense/scripts/system/certctl.py rehash');
 
     service_log('Writing trust bundles...', $verbose);
 
diff --git a/src/sbin/certctl.py b/src/opnsense/scripts/system/certctl.py
similarity index 100%
rename from src/sbin/certctl.py
rename to src/opnsense/scripts/system/certctl.py