main/ca-certificates: severly outdated certificate bundle
The ca-certificates
aport was last updated in dec 2019. It contains expired CA's (like DST_Root_CA_X3.crt) and also misses some newer CAs which are trusted by mozilla.
I think this is a potential security issue as we might end up trusting compromised ca certificates and won't notice.
It should be on some kind of checklist to regularly update the bundle with the latest CAs, e.g. when creating a new release. The update itself could be a simple "make update" prior running "make" in the APKBUILD