Merge request at <https://salsa.debian.org/debian/ca-certificates/-/merge_requests/11> and <https://salsa.debian.org/debian/ca-certificates/-/merge_requests/12>.
The first pull request updates documentation for the existing version of the script. The second pull request updates the script, and clears most (not all) of the ShellCheck warnings.