You're probably missing SPI's root certificate, which is available from http://www.spi-inc.org/ca/, or if you're using a Debian system, from the ca-certificates package.

There is also the HTTP version available at: http://lists.debian.org/debian-devel-announce/2013/04/msg000...