diff --git a/ca-certificates/.signature b/ca-certificates/.signature
index 01452f79..e6904aad 100644
--- a/ca-certificates/.signature
+++ b/ca-certificates/.signature
@@ -1,5 +1,5 @@
 untrusted comment: verify with /etc/ports/core.pub
-RWRJc1FUaeVeqq53UierKzktP1rWn3E6pOMhMgEskafNSZGQ3KpeX5BbS4zbRvATbYRzldwk6oodmmF/NqOXQSigM/Zp3sFiews=
-SHA256 (Pkgfile) = 8cf8eeedddbd6795eff35d443e10f84c7eff370b6ca8fa3772adc3043f049cda
+RWRJc1FUaeVeqiawCQDVTz15D6Hdg6OVvo5b7bryzSPKfICcrJGhJRkdEaqVfyoc/C2qWh4Oo+DB4zvkdoQi1XPxDrtcI6JV+A0=
+SHA256 (Pkgfile) = 46ef1b66b9fa38a7bcba25485451fa5103dd52c1f7fe9b905de4ad059ae9c695
 SHA256 (.footprint) = 92930b2d9b1d5da08760f16fa80c1ff0c13e811e50cb4414f98265cef748bf40
-SHA256 (cacert.pem) = 5cd8052fcf548ba7e08899d8458a32942bf70450c9af67a0850b4c711804a2e4
+SHA256 (cacert.pem) = 0d98a1a961aab523c9dc547e315e1d79e887dea575426ff03567e455fc0b66b4
diff --git a/ca-certificates/Pkgfile b/ca-certificates/Pkgfile
index 44fd3937..f270ff5c 100644
--- a/ca-certificates/Pkgfile
+++ b/ca-certificates/Pkgfile
@@ -3,7 +3,7 @@
 # Maintainer:  CRUX System Team, core-ports at crux dot nu
 
 name=ca-certificates
-version=20191016
+version=20191127
 release=1
 source=(cacert.pem)
 
diff --git a/ca-certificates/cacert.pem b/ca-certificates/cacert.pem
index edc5090c..7ad01f31 100644
--- a/ca-certificates/cacert.pem
+++ b/ca-certificates/cacert.pem
@@ -1,7 +1,7 @@
 ##
 ## Bundle of CA Root Certificates
 ##
-## Certificate data from Mozilla as of: Wed Oct 16 03:12:09 2019 GMT
+## Certificate data from Mozilla as of: Wed Nov 27 04:12:10 2019 GMT
 ##
 ## This is a bundle of X.509 certificates of public Certificate Authorities
 ## (CA). These were automatically extracted from Mozilla's root certificates
@@ -14,7 +14,7 @@
 ## Just configure this file as the SSLCACertificateFile.
 ##
 ## Conversion done with mk-ca-bundle.pl version 1.27.
-## SHA256: c979c6f35714a0fedb17d9e5ba37adecbbc91a8faf4186b4e23d6f9ca44fd6cb
+## SHA256: 607309057d0ec70f8e4e97b03906bafb2fcebb24cd37b5e8293e681ae26ceae0
 ##