p5-Mozilla-CA provides the Mozilla ca certificate bundle, mostly intended for use by Perl programs. It's generated with an old version of curl's mk-cert-bundle script which doesn't remove certs marked in Mozilla as untrusted, and both this and curl use outdated URLs to fetch cert.txt.
Here's an alternative. It includes the single library function provided by Mozilla::CA which is to return the path of the certificate bundle, but instead of having its own bundle, it just returns the path to the system file, /etc/ssl/cert.pem. Passes Mozilla::CA's simple regression tests. Any comments? OK to import this and unhook p5-Mozilla-CA?
