diff --git a/src/components/cronet/cronet_context.cc b/src/components/cronet/cronet_context.cc
index 29a36df65c..a849448e4c 100644
--- a/src/components/cronet/cronet_context.cc
+++ b/src/components/cronet/cronet_context.cc
@@ -247,6 +247,10 @@ CronetContext::NetworkTasks::~NetworkTasks() {
 
   if (net::NetworkChangeNotifier::AreNetworkHandlesSupported())
     net::NetworkChangeNotifier::RemoveNetworkObserver(this);
+
+  if (default_cert_net_fetcher_) {
+    default_cert_net_fetcher_->Shutdown();
+  }
 }
 
 void CronetContext::InitRequestContextOnInitThread() {
@@ -422,6 +426,9 @@ CronetContext::NetworkTasks::BuildDefaultURLRequestContext(
         g_net_log.Get().net_log(), &context_builder);
   }
 
+  default_cert_net_fetcher_ = base::MakeRefCounted<net::CertNetFetcherURLRequest>();
+  context_builder.SetCertVerifier(net::CertVerifier::CreateDefault(default_cert_net_fetcher_));
+
   auto context = context_builder.Build();
 
   // Set up host cache persistence if it's enabled. Happens after building the
@@ -433,6 +440,8 @@ CronetContext::NetworkTasks::BuildDefaultURLRequestContext(
         g_net_log.Get().net_log());
   }
 
+  default_cert_net_fetcher_->SetURLRequestContext(context.get());
+
   SetSharedURLRequestContextConfig(context.get());
   return context;
 }
diff --git a/src/components/cronet/cronet_context.h b/src/components/cronet/cronet_context.h
index 40f19f039e..e197b5e4a5 100644
--- a/src/components/cronet/cronet_context.h
+++ b/src/components/cronet/cronet_context.h
@@ -20,6 +20,7 @@
 #include "base/values.h"
 #include "components/prefs/json_pref_store.h"
 #include "net/base/network_change_notifier.h"
+#include "net/cert_net/cert_net_fetcher_url_request.h"
 #include "net/nqe/effective_connection_type.h"
 #include "net/nqe/effective_connection_type_observer.h"
 #include "net/nqe/network_quality_estimator.h"
@@ -334,6 +335,9 @@ class CronetContext {
     base::flat_map<net::NetworkChangeNotifier::NetworkHandle,
                    std::unique_ptr<net::URLRequestContext>>
         contexts_;
+
+    scoped_refptr<net::CertNetFetcherURLRequest> default_cert_net_fetcher_;
+
     // Shorthand for the default context (needed by
     // components/cronet/android/test/cronet_test_util.cc).
     raw_ptr<net::URLRequestContext> default_context_;