cd /etc/pki/ca-trust/source/anchors
wget http://www.cacert.org/certs/root.crt
update-ca-trust