ca-certificates: add system CA certificates package (based on the debian one)