/usr/share/netsurf/ca-bundle.txt is in netsurf-common 3.6-3.1.
This file is owned by root:root, with mode 0o777.
It is a symlink to /etc/ssl/certs/ca-certificates.crt
/etc/ssl/certs/ca-certificates.crt