Rebuild the CA bundle from scratch, removing obsolete certs
--fresh deletes every existing symlink in /etc/ssl/certs first, then recreates the bundle only from the current source directories. Use it to purge certificates that were removed upstream but left stale links behind. The plain form without --fresh keeps existing links.
Looking for more? Search all 7,657 commands — works offline, in English or Spanish, and fixes typos.