diff --git a/src/opnsense/scripts/system/certctl.py b/src/opnsense/scripts/system/certctl.py
index fbbf426c2..a5c9ec639 100755
--- a/src/opnsense/scripts/system/certctl.py
+++ b/src/opnsense/scripts/system/certctl.py
@@ -37,8 +37,8 @@ import OpenSSL.crypto
 from cryptography import x509
 from cryptography.hazmat.primitives import serialization
 
-TRUSTPATH = ['/usr/share/certs/trusted', '/usr/local/share/certs', '/usr/local/etc/ssl/certs']
-UNTRUSTEDPATH = ['/usr/share/certs/untrusted', '/usr/local/etc/ssl/untrusted', '/usr/local/etc/ssl/blacklisted']
+TRUSTPATH = ['/usr/share/certs/trusted', '/usr/local/share/certs']
+UNTRUSTEDPATH = ['/usr/share/certs/untrusted', '/usr/local/share/certs/untrusted']
 CERTDESTDIR = '/etc/ssl/certs'
 UNTRUSTDESTDIR = '/etc/ssl/untrusted'