diff --git a/usr.sbin/bsdinstall/scripts/config b/usr.sbin/bsdinstall/scripts/config
index cdc307176ea3..5b3ef996251a 100755
--- a/usr.sbin/bsdinstall/scripts/config
+++ b/usr.sbin/bsdinstall/scripts/config
@@ -55,6 +55,9 @@ cp $BSDINSTALL_TMPBOOT/* $BSDINSTALL_CHROOT/boot
 
 # Set up other things from installed config
 chroot $BSDINSTALL_CHROOT /usr/bin/newaliases > /dev/null 2>&1
+if [ -x $BSDINSTALL_CHROOT/usr/sbin/certctl ]; then
+	chroot $BSDINSTALL_CHROOT /usr/sbin/certctl rehash
+fi
 
 exit 0