diff --git a/etc/mtree/BSD.root.dist b/etc/mtree/BSD.root.dist
index c6b73e648209..a85ce552589c 100644
--- a/etc/mtree/BSD.root.dist
+++ b/etc/mtree/BSD.root.dist
@@ -1,137 +1,141 @@
 #
 # Please see the file src/etc/mtree/README before making changes to this file.
 #
 
 /set type=dir uname=root gname=wheel mode=0755
 .
     bin
     ..
     boot
         defaults
         ..
         dtb
             allwinner             tags=package=runtime
             ..
             overlays              tags=package=runtime
             ..
             rockchip              tags=package=runtime
             ..
         ..
         efi
         ..
         firmware
         ..
         loader.conf.d             tags=package=bootloader
         ..
         lua
         ..
         kernel
         ..
         modules
         ..
         uboot
         ..
         zfs
         ..
     ..
     dev             mode=0555
     ..
     etc
         X11
         ..
         authpf
         ..
         autofs
         ..
         bluetooth
         ..
         cron.d
         ..
         defaults
         ..
         devd
         ..
         dma
         ..
         gss
         ..
         jail.conf.d
         ..
         kyua             tags=package=tests
         ..
         mail
         ..
         mtree
         ..
         newsyslog.conf.d
         ..
         ntp             mode=0700
         ..
         pam.d
         ..
         periodic
             daily
             ..
             monthly
             ..
             security
             ..
             weekly
             ..
         ..
         pkg
         ..
         ppp
         ..
         profile.d
         ..
         rc.conf.d
         ..
         rc.d
         ..
         security
         ..
         ssh
         ..
         ssl
+            certs
+            ..
+            untrusted
+            ..
         ..
 	sysctl.kld.d
 	..
         syslog.d
         ..
         zfs
             compatibility.d
             ..
         ..
     ..
     lib
         geom
         ..
         nvmecontrol
         ..
     ..
     libexec
         resolvconf
         ..
     ..
     media
     ..
     mnt
     ..
     net
     ..
     proc            mode=0555
     ..
     rescue
     ..
     root            mode=0750
     ..
     sbin
     ..
     tmp             mode=01777
     ..
     usr
     ..
     var
     ..
 ..