New comment by sgn on void-packages repository https://github.com/void-linux/void-packages/issues/31161#issuecomment-881979882 Comment: > Turns out Debian's is outdated, we should use `nss` to provide `ca-certificates`. This is exactly what Arch Linux does. The root certs for `code.soundsoftware.ac.uk` is there, Debian's ca-certificates is outdated, but it's irrelevant. > If we do go ahead and replace ca-certificates with an `nss` provided one, we will have to have Arch Linux's `ca-certificates-utils` package added in. However, it might be possible to combine both the utils package and `nss`+`ca-certificates` subpackage. We don't need to go with RedHat route. My proposal works just fine.