diff --git a/external/libromfs b/external/libromfs
index 5b79535ee..0842d22de 160000
--- a/external/libromfs
+++ b/external/libromfs
@@ -1 +1 @@
-Subproject commit 5b79535ee0fa53da7ffbaef4f37842651f7d2e65
+Subproject commit 0842d22deb13e036eb1fb15df368b6cad552abfe
diff --git a/plugins/libimhex/source/helpers/net.cpp b/plugins/libimhex/source/helpers/net.cpp
index b056e7fea..c1b5dc567 100644
--- a/plugins/libimhex/source/helpers/net.cpp
+++ b/plugins/libimhex/source/helpers/net.cpp
@@ -56,8 +56,8 @@ namespace hex {
         static mbedtls_x509_crt crt;
         mbedtls_x509_crt_init(&crt);
 
-        auto cacert = romfs::get("cacert.pem");
-        mbedtls_x509_crt_parse(&crt, reinterpret_cast<const u8*>(cacert.data()), cacert.size() + 1);
+        auto cacert = romfs::get("cacert.pem").string();
+        mbedtls_x509_crt_parse(&crt, reinterpret_cast<const u8*>(cacert.data()), cacert.size());
 
         mbedtls_ssl_conf_ca_chain(cfg, &crt, nullptr);