don't skip cert check for an example & use HTTPS

This changes two URLs from http to https and it fixes a Dockerfile to stop skipping certificate validation. It also adds the ca-certificates package to that Dockerfile example to make certificate validation work properly.

/cc @SvenDowideit (because the PR touches docs)
/cc @tianon (because the PR touches `contrib/mkimage-arch.sh`