diff --git a/sdk_container/src/third_party/coreos-overlay/app-misc/ca-certificates/ca-certificates-3.27.1-r2.ebuild b/sdk_container/src/third_party/coreos-overlay/app-misc/ca-certificates/ca-certificates-3.27.1-r3.ebuild
similarity index 100%
rename from sdk_container/src/third_party/coreos-overlay/app-misc/ca-certificates/ca-certificates-3.27.1-r2.ebuild
rename to sdk_container/src/third_party/coreos-overlay/app-misc/ca-certificates/ca-certificates-3.27.1-r3.ebuild
diff --git a/sdk_container/src/third_party/coreos-overlay/app-misc/ca-certificates/files/certdata2pem.py b/sdk_container/src/third_party/coreos-overlay/app-misc/ca-certificates/files/certdata2pem.py
index bf73757639..d8e9d51996 100644
--- a/sdk_container/src/third_party/coreos-overlay/app-misc/ca-certificates/files/certdata2pem.py
+++ b/sdk_container/src/third_party/coreos-overlay/app-misc/ca-certificates/files/certdata2pem.py
@@ -124,7 +124,8 @@ for obj in objects:
             fname = fname.encode('latin1').decode('unicode_escape').encode('latin1').decode('utf8')
         except (UnicodeEncodeError, UnicodeDecodeError):
             pass
-        f = open(fname, 'w')
+
+        f = open(fname.encode(encoding=sys.getfilesystemencoding(), errors="ignore"), 'w')
         f.write("-----BEGIN CERTIFICATE-----\n")
         # obj['CKA_VALUE'] is a string of octals like '\060\311…',
         # with a number not greater than octal 377 (which is 255,