Can you not leave php hanging and not even give it a basic cert authority?
The main php.ini should have
openssl.capath = /path/to/cacert.pem or otherwise
/etc/ssl/cert.pem on macOS.
Currently using 5.10.3 and can’t get php to curl anything without screaming about being unable to get crypto going.