diff --git a/test/cases/040_packages/003_ca-certificates/check.sh b/test/cases/040_packages/003_ca-certificates/check.sh
new file mode 100755
index 000000000..8be579c63
--- /dev/null
+++ b/test/cases/040_packages/003_ca-certificates/check.sh
@@ -0,0 +1,12 @@
+#!/bin/sh
+
+function failed {
+	printf "ca-certificates test suite FAILED\n" >&1
+	exit 1
+}
+
+[ -d /host-etc/ssl/ ] || failed
+[ -d /host-etc/ssl/certs ] || failed
+[ -f /host-etc/ssl/certs/ca-certificates.crt ] || failed
+
+printf "ca-certificates test suite PASSED\n" >&1
diff --git a/test/cases/040_packages/003_ca-certificates/test-ca-certificates.yml b/test/cases/040_packages/003_ca-certificates/test-ca-certificates.yml
new file mode 100644
index 000000000..ddab1a8a7
--- /dev/null
+++ b/test/cases/040_packages/003_ca-certificates/test-ca-certificates.yml
@@ -0,0 +1,27 @@
+kernel:
+  image: "linuxkit/kernel:4.9.x"
+  cmdline: "console=ttyS0 page_poison=1"
+init:
+  - linuxkit/init:4fc8aa82ab34d62d510575c8fbe0c58b7ba9c480
+  - linuxkit/runc:3a4e6cbf15470f62501b019b55e1caac5ee7689f
+  - linuxkit/containerd:b1766e4c4c09f63ac4925a6e4612852a93f7e73b
+  - linuxkit/ca-certificates:75cf419fb58770884c3464eb687ec8dfc704169d
+onboot:
+  - name: test
+    image: "alpine:3.6"
+    readonly: true
+    binds:
+      - /check.sh:/check.sh
+      - /etc:/host-etc
+    command: ["sh", "./check.sh"]
+  - name: poweroff
+    image: "linuxkit/poweroff:a8f1e4ad8d459f1fdaad9e4b007512cb3b504ae8"
+    command: ["/bin/sh", "/poweroff.sh", "10"]
+files:
+  - path: check.sh
+    source: ./check.sh
+trust:
+  org:
+    - linuxkit
+  image:
+    - alpine:3.6
diff --git a/test/cases/040_packages/003_ca-certificates/test.sh b/test/cases/040_packages/003_ca-certificates/test.sh
new file mode 100644
index 000000000..6ca44b026
--- /dev/null
+++ b/test/cases/040_packages/003_ca-certificates/test.sh
@@ -0,0 +1,24 @@
+#!/bin/sh
+# SUMMARY: Check that the ca-certificates package works
+# LABELS:
+# REPEAT:
+
+set -e
+set -v
+
+# Source libraries. Uncomment if needed/defined
+#. "${RT_LIB}"
+. "${RT_PROJECT_ROOT}/_lib/lib.sh"
+
+clean_up() {
+	find . -iname "test-ca-certificates*" -not -iname "*.yml" -exec rm -rf {} \;
+}
+trap clean_up EXIT
+
+# Test code goes here
+moby build -output kernel+initrd test-ca-certificates
+RESULT="$(linuxkit run qemu -kernel test-ca-certificates)"
+echo "${RESULT}"
+echo "${RESULT}" | grep -q "suite PASSED"
+
+exit 0