add missing ca-certs to dockerfile