diff --git a/dropgz/build/cni.Dockerfile b/dropgz/build/cni.Dockerfile
index de55d6d916..61ef107155 100644
--- a/dropgz/build/cni.Dockerfile
+++ b/dropgz/build/cni.Dockerfile
@@ -1,8 +1,6 @@
-FROM mcr.microsoft.com/cbl-mariner/base/core:2.0 AS certs
-RUN tdnf upgrade -y && tdnf install -y ca-certificates
-
 FROM mcr.microsoft.com/cbl-mariner/base/core:2.0 AS tar
 RUN tdnf install -y tar
+RUN tdnf upgrade -y && tdnf install -y ca-certificates
 
 FROM tar AS azure-ipam
 ARG VERSION
@@ -10,7 +8,6 @@ ARG OS
 ARG ARCH
 WORKDIR /azure-ipam
 COPY ./azure-ipam .
-COPY --from=certs /etc/ssl/certs/ca-certificates.crt /etc/ssl/certs/ca-certificates.crt
 RUN curl -LO --cacert /etc/ssl/certs/ca-certificates.crt https://github.com/Azure/azure-container-networking/releases/download/azure-ipam%2Fv0.0.3/azure-ipam-$OS-$ARCH-v0.0.3.tgz && tar -xvf azure-ipam-$OS-$ARCH-v0.0.3.tgz
 
 FROM tar AS azure-vnet
@@ -19,7 +16,6 @@ ARG OS
 ARG ARCH
 WORKDIR /azure-container-networking
 COPY . .
-COPY --from=certs /etc/ssl/certs/ca-certificates.crt /etc/ssl/certs/ca-certificates.crt
 RUN curl -LO --cacert /etc/ssl/certs/ca-certificates.crt https://github.com/Azure/azure-container-networking/releases/download/v1.4.29/azure-vnet-cni-swift-$OS-$ARCH-v1.4.29.tgz && tar -xvf azure-vnet-cni-swift-$OS-$ARCH-v1.4.29.tgz
 
 FROM mcr.microsoft.com/cbl-mariner/base/core:2.0 AS compressor