The ca-certificates version 20200601 removes various old/obsolete certificates, but still contains one expired certificate:
Staat_der_Nederlanden_Root_CA_-_G2.crt This expired on March 25 2020 and should probably also be removed. -- Hanno Böck https://hboeck.de/