diff --git a/src/azure-cli/azure/cli/command_modules/resource/_bicep.py b/src/azure-cli/azure/cli/command_modules/resource/_bicep.py
index ca6872f8eb7..55c139b8b56 100644
--- a/src/azure-cli/azure/cli/command_modules/resource/_bicep.py
+++ b/src/azure-cli/azure/cli/command_modules/resource/_bicep.py
@@ -109,8 +109,8 @@ def ensure_bicep_installation(release_tag=None, target_platform=None, stdout=Tru
                 print(f"Installing Bicep CLI {release_tag}...")
             else:
                 print("Installing Bicep CLI...")
-        ca_file = certifi.where()
-        request = urlopen(_get_bicep_download_url(system, release_tag, target_platform=target_platform), cafile=ca_file)
+        os.environ.setdefault("CURL_CA_BUNDLE", certifi.where())
+        request = urlopen(_get_bicep_download_url(system, release_tag, target_platform=target_platform))
         with open(installation_path, "wb") as f:
             f.write(request.read())
 
@@ -143,8 +143,8 @@ def is_bicep_file(file_path):
 
 def get_bicep_available_release_tags():
     try:
-        ca_file = certifi.where()
-        response = requests.get("https://aka.ms/BicepReleases", verify=ca_file)
+        os.environ.setdefault("CURL_CA_BUNDLE", certifi.where())
+        response = requests.get("https://aka.ms/BicepReleases")
         return [release["tag_name"] for release in response.json()]
     except IOError as err:
         raise ClientRequestError(f"Error while attempting to retrieve available Bicep versions: {err}.")
@@ -152,8 +152,8 @@ def get_bicep_available_release_tags():
 
 def get_bicep_latest_release_tag():
     try:
-        ca_file = certifi.where()
-        response = requests.get("https://aka.ms/BicepLatestRelease", verify=ca_file)
+        os.environ.setdefault("CURL_CA_BUNDLE", certifi.where())
+        response = requests.get("https://aka.ms/BicepLatestRelease")
         response.raise_for_status()
         return response.json()["tag_name"]
     except IOError as err: