diff --git a/mercurial/sslutil.py b/mercurial/sslutil.py
index 918dce4b8c26efebc40853d39a121e9174f3f3d8_bWVyY3VyaWFsL3NzbHV0aWwucHk=..53b7fc7cc2bbbcd1c344ce50519a868cac7ed9ac_bWVyY3VyaWFsL3NzbHV0aWwucHk= 100644
--- a/mercurial/sslutil.py
+++ b/mercurial/sslutil.py
@@ -195,7 +195,7 @@
                 if not os.path.exists(cafile):
                     raise error.Abort(_('could not find web.cacerts: %s') %
                                       cafile)
-            else:
+            elif s['allowloaddefaultcerts']:
                 # CAs not defined in config. Try to find system bundles.
                 cafile = _defaultcacerts(ui)
                 if cafile: