The debian package does not exist on the (debian) mirrors anymore, appears to have been replaced by the newer one, ca-certificates_20061027.2 Reproducible: Always Steps to Reproduce: Gentoo mirrors do have the distfile, and the included update script handles the actual actuality of the installed certificate files, still the missing upstream tarball IMHO is a concern.
ca-certificates-20061027.2 in portage