An example for building a minimal golang docker image with ca certificate support.
The ca-certs bundle is copied from the golang linux docker image and placed in the appropriate directory of the scratch image.
Locations of cacert bundles for linux systems can be found in the go source at crypto/x509/root_linux.go
Better described here