where did you get the certs?

[rbucker]

It would be great if you documented where you got the certs. This way I/we could get or certify your pems.

[boxofrox]

According to his blog post[1], Kelsey pulled the certs from CoreOS. No sure if this is specific enough, but hope it helps.

[1] https://medium.com/@kelseyhightower/optimizing-docker-images-for-static-binaries-b5696e26eb07