embed the GeoTrust Global CA cert

when go binaries are cross-compiled they do not get the benefit of os-supplied root certificates