You need to add certificate to fix this issue. As described in mercurial wiki you can add it in your configuration file /etc/mercurial/hgrc:
[web]
cacerts = /etc/ssl/certs/ca-certificates.crt
Also you can check the way with fingerprints.