Foreman 1.20.1/Puppet v5 - not able to install modules from puppetforge

Problem:
I am not able to install puppet modules from puppetforge due to SSL validation:

# puppet module install AlexCline-dirtree --version 0.2.1 --debug
Debug: Runtime environment: puppet_version=5.5.10, ruby_version=2.4.5, run_mode=user, default_encoding=UTF-8
Notice: Preparing to install into /etc/puppetlabs/code/environments/production/modules ...
Debug: Facter: searching for custom fact "fips_enabled".
Debug: Facter: searching for fips_enabled.rb in /opt/puppetlabs/puppet/cache/lib/facter.
Debug: Facter: searching for fips_enabled.rb in /opt/puppetlabs/puppet/cache/facts.
Debug: Facter: fact "facterversion" has resolved to "3.11.7".
Debug: Facter: fact "aio_agent_version" has resolved to "5.5.10".
Debug: Facter: searching "/opt/puppetlabs/facter/facts.d" for external facts.
Debug: Facter: skipping external facts for "/etc/facter/facts.d": No such file or directory
Debug: Facter: skipping external facts for "/etc/puppetlabs/facter/facts.d": No such file or directory
Debug: Facter: no external facts were found.
Debug: Facter: resolving fips facts.
Debug: Facter: fact "fips_enabled" has resolved to false.
Notice: Downloading from https://forgeapi.puppet.com ...
Debug: Evicting cache entry for environment 'production'
Debug: Deleted text domain :production: false
Debug: Caching environment 'production' (ttl = 0 sec)
Debug: Failed to load library 'pe_license' for feature 'pe_license': cannot load such file -- pe_license
Debug: HTTP GET https://forgeapi.puppet.com/v3/releases?module=AlexCline-dirtree&sort_by=version&exclude_fields=readme%2Cchangelog%2Clicense%2Curi%2Cmodule%2Ctags%2Csupported%2Cfile_size%2Cdownloads%2Ccreated_at%2Cupdated_at%2Cdeleted_at
Error: Could not connect via HTTPS to ...
  Unable to verify the SSL certificate
    The certificate may not be signed by a valid CA
    The CA bundle included with OpenSSL may not be valid or up to date

But it works when using wget command:

# wget https://forgeapi.puppet.com
...
Connecting to forgeapi.puppet.com (forgeapi.puppet.com)|52.10.130.237|:443... connected.
2019-03-04 16:59:39 (200 MB/s) - ‘index.html’ saved [974/974]

Expected outcome:

Foreman and Proxy versions:
Foreman 1.20.1

Foreman and Proxy plugin versions:
Katello 3.9.1