By default every OS comes with a store of public CA's to perform this validation. However, we have found that the cURL libraries commonly used on Windows machines are often missing the necessary CA certificates. However, you could potentially run into this issue on any system.
If your system is missing these certificates and you login to Sugar 7.6, you may see a screen that looks something like this image below.