diff --git a/www/docs/static/run b/www/docs/static/run
index 34b6d120c4c..482ec053494 100755
--- a/www/docs/static/run
+++ b/www/docs/static/run
@@ -31,11 +31,13 @@ export TAR_FILE="$TMPDIR/${FILE_BASENAME}_$(uname -s)_$(uname -m).tar.gz"
 		"$RELEASES_URL/download/$VERSION/${FILE_BASENAME}_$(uname -s)_$(uname -m).tar.gz"
 	curl -sfLo "checksums.txt" "$RELEASES_URL/download/$VERSION/checksums.txt"
 	curl -sfLo "checksums.txt.sig" "$RELEASES_URL/download/$VERSION/checksums.txt.sig"
+	curl -sfLo "checksums.txt.pem" "$RELEASES_URL/download/$VERSION/checksums.txt.pem"
 	echo "Verifying checksums..."
 	sha256sum --ignore-missing --quiet --check checksums.txt
 	if command -v cosign >/dev/null 2>&1; then
 		echo "Verifying signatures..."
 		COSIGN_EXPERIMENTAL=1 cosign verify-blob \
+			--cert checksums.txt.pem \
 			--signature checksums.txt.sig \
 			checksums.txt
 	else