Suffice it to say that I'm against TLS interception as part of corporate security.. but we often have to live with it.
Here's some quick notes on adding your corporate root CA so ruby works on-VPN or at the office... on Windows, of course.
Where is your ruby environment installed?
gem which ruby gems
will yeild a path. Go there, then into rubygems, ssl_certs and rubygems.org folders. For me it's:
C:\Ruby31-x64\lib\ruby\3.1.0\rubygems\ssl_certs\rubygems.org
This is where you copy your root CA file in PEM format, and with the pem extension.
How to get that file or convert it if needed is something for another time.