Read http://curl.haxx.se/docs/caextract.html to learn more. The bundled certificates are usually discarted by major distributions but for those that do not it would be wise to provide one that is up-to-date.
