diff --git a/internal/client/tls.go b/internal/client/tls.go
index c7fb090..96384c9 100644
--- a/internal/client/tls.go
+++ b/internal/client/tls.go
@@ -32,7 +32,10 @@ func (c *TLSDialConfig) BuildTLSConfig() *tls.Config {
 		tlsConfig.InsecureSkipVerify = true
 	}
 	if len(c.CACerts) > 0 {
-		certPool := x509.NewCertPool()
+		certPool, err := x509.SystemCertPool()
+		if err != nil {
+			certPool = x509.NewCertPool()
+		}
 		for _, cert := range c.CACerts {
 			certPool.AddCert(cert)
 		}