Hi John,
You include the cacert.pem or ca-bundle.crt file with your plugin. Next, you let cURL look for this file locally:
curl_setopt($ch, CURLOPT_CAINFO, dirname(__FILE__).'/cacert.pem');
Or you can use the one that is included in WPs distribution:
curl_setopt($ch, CURLOPT_CAINFO, ABSPATH.'/wp-includes/certificates/ca-bundle.crt');
Please be aware that older versions of WP may lack this file. You could use WPs bundle by default and use your own as a plan B.
Good luck!
JxsDotNL