Just found why after updating my Debian box yesterday made my cacert-based SSL sites spit out certificate errors: http://lwn.net/Articles/590879/ # #