Hi.

When reconfiguring the package the following can be observed:
1) remove /etc/ca-certificates.conf to get a newly generated version
2) dpkg-reconfigure ca-certificates
3) select ask / choose no certificate then
4) The newly generated /etc/ca-certificates.conf contains now one entry
   after the initial commenst wich is just an "!", e.g.
   ..
   # line begins with # is comment.
   # line begins with ! is certificate filename to be deselected.
   #
   !
   !brasil.gov.br/brasil.gov.br.crt
   !cacert.org/cacert.org.crt
   ..
5) Repeating steps 1-3 and the single ! is replaced by an empty line:
   ..
   # line begins with # is comment.
   # line begins with ! is certificate filename to be deselected.
   #

   !brasil.gov.br/brasil.gov.br.crt
   !cacert.org/cacert.org.crt
   ..



Cheers,
Chris.