Just noticed that the Debian distfiles url has a new version. http://ftp.debian.org/debian/pool/main/c/ca-certificates/
in the tree, cheers