diff --git a/lambda_functions/va_profile/va_profile_opt_in_out_lambda.py b/lambda_functions/va_profile/va_profile_opt_in_out_lambda.py
index fc6fda04d2..50ae8c51d2 100644
--- a/lambda_functions/va_profile/va_profile_opt_in_out_lambda.py
+++ b/lambda_functions/va_profile/va_profile_opt_in_out_lambda.py
@@ -125,6 +125,7 @@
         # ssl_context = ssl.create_default_context(capath=CA_PATH)
         # TODO - This is a workaround.  The capath approach doesn't seem to load anything.
         ssl_context = ssl.create_default_context(cafile=f"{CA_PATH}VA-Internal-S2-ICA11.cer")
+        ssl_context.load_verify_locations(cafile=f"{CA_PATH}VA-Internal-S2-RCA2.cer")
 
         with NamedTemporaryFile() as f:
             f.write(acm_response["Certificate"].encode())