diff --git a/zcutil/fetch-params.sh b/zcutil/fetch-params.sh
index 46be96a85..04e25cfda 100755
--- a/zcutil/fetch-params.sh
+++ b/zcutil/fetch-params.sh
@@ -21,7 +21,14 @@ function fetch_params {
     if ! [ -f "$filename" ]
     then
         echo "Retrieving: $url"
-        wget --progress=dot:giga "$url"
+        # Note: --no-check-certificate should be ok, since we rely on
+        # sha256 for integrity, and there's no confidentiality requirement.
+        # Our website uses letsencrypt certificates which are not supported
+        # by some wget installations, so we expect some cert failures.
+        wget \
+            --progress=dot:giga \
+            --no-check-certificate \
+            "$url"
     fi
 }