I think the curl.se/ca-certs is wrong for git (it works for curl).
docker run --rm -it teaxyz/cli bash
Inside of the container:
git clone https://github.com/zyedidia/micro.git
Cloning into 'micro'...
fatal: unable to access 'https://github.com/zyedidia/micro.git/': error setting certificate verify locations: CAfile: /etc/ssl/certs/ca-certificates.crt CApath: none
curl works
curl https://tea.xyz
#!/bin/sh
set -e
set -o noglob
...