Jenkins plugin site to ignore certificates
Following your comment confirming you can use your own signed certificates internally.

One solution would be to replace the current certificate on your repo with a new one holding updates.jenkins-ci.org as an alias. This response on stackoverflow has the necessary info to get you going.

Meanwhile, the plugin higlighted above by @casey vega in the comments (which I didn't know) seems to be a solution much easier to manage.