ca-certificates.crt out of date

[Dirbaio]

The included ca-certificates.crt is very old, which means some certificates fail to validate.

For example, the mailgun API cert fails to validate, but works with my system's ca-certificates.crt

$ openssl s_client -connect api.mailgun.net:443 -CAfile ~/ca-certs-base-image/ca-certificates.crt
[...]
Verification error: unable to get local issuer certificate
[...]

$ openssl s_client -connect api.mailgun.net:443 -CAfile /etc/ssl/certs/ca-certificates.crt
[...]
Verification: OK
[...]