tce-load -i compiletc openssl perl5 python3.9-pip

(debian unstable)

wget http://deb.debian.org/debian/pool/main/c/ca-certificates/ca-certificates_20250419.tar.xz

wget https://anduin.linuxfromscratch.org/BLFS/other/certdata.txt

cd ca-certificates

replace certdata.txt with latest from blfs

edit Makefiles
CERTSDIR = /usr/local/share/ca-certificates
SBINDIR = /usr/local/sbin

edit mozilla/certdata2pem.py
#!/usr/local/bin/python3

sudo pip install cryptography

make
sudo make install

sudo update-ca-certificates