Do not use /usr/bin/curl on macOS if you care about the --cacert option.
/usr/bin/curl
--cacert
WTF, Apple?