/etc/ca-certificates.conf

/etc/ca-certificates.conf controls which certificates will or won't be installed to /etc/ssl/certs when update-ca-certificates is executed.