Here is the suggestion from JFrog Support:
The user mentioned that downloading with curl works for him and does not result certs issue, therefore we suspect that the issue is with the user JAVA keystore, as Gradle use the JAVA keystore as far as we know, you may know better.
It could be that his JAVA version keystore has an old “*.cloudfront.net” cert cached.
We would suggest to try and upgrade the JAVA version and to check if this resolves the issue or to try the gradle build from a different host that has newer JAVA version.
If we may ask, are you getting the same issue as well when pulling packages?If upgrading JAVA does not resolve the issue, he may share with us an example project that we could run gradle build on, that reproduces the issue on his end, although its unlikely that the same issue will be reproduced on our environment, as it seems like an environment issue, but still we would try to make sure its an environment issue on the user end.