SSL证书的维护由ca-certificates来提供支持
https://packages.debian.org/source/sid/ca-certificates
Debian 软件包源码仓库( VCS: Git) https://anonscm.debian.org/git/collab-maint/ca-certificates.git Debian 软件包源码仓库(可在线浏览) https://anonscm.debian.org/cgit/collab-maint/ca-certificates.git
根证书存放位置：/usr/share/ca-certificates/xxx机构/xxxx.crt
根证书列表：/etc/ca-certificates.conf
SSL引用的证书的位置/etc/ssl/certs/xxxx.pem-------------------->/usr/share/ca-certificates/xxx机构/xxxx.crt
/usr/sbin/update-ca-certificates根据/etc/ca-certificates.conf中的名字，创建/etc/ssl/certs/xxxx.pem