It’s disappointing to see that there is no reaction to this issue. It’s now two weeks later and plugins.gradle.org still relocates to a cloudfront.net server that issues these distrusted TLS certificate - I’m still getting the exact same error.
Shouldn’t you Gradle guys not be interested in having your services (Gradle enterprise plugin) be usable?