It currently is not possible to use the zip_url feature of synthetics with private CAs since there are no ssl options. We should add these to support users that need this, as mentioned in this forum post