// , This was the only thing that worked on my supposedly modern CEntOS 7.5 freshly built system.
update-ca-trust is unreliable.