First ca-certificates does not create a symlink from /etc/ssl/certs to /usr/lib/ssl/certs, second it does not run the c_rehash perl utility making the recipe pretty useless and third it trusts way too many cert authorities.
Holger Hans Peter Freyther