Today on Debian GNU/Linux 12 (bookworm) install ca-certificates package and checked the /etc/ssl/certs directory .pem files, noticed some of the certificate expired.
These certificates expired in 2023,but this package still has these certs. What is the right way to clean up these expired certificates?
Not After : Mar 3 12:09:48 2023 GMT
./E-Tugra_Certification_Authority.pem
Not After : May 15 04:52:29 2023 GMT
./Hongkong_Post_Root_CA_1.pem
Not After : Sep 30 04:20:49 2023 GMT
./Security_Communication_Root_CA.pem
Thanks