Certainly you're aware that every certificate sits in a separate file and an update can just remove the interested files?
It doesn’t look like that, it looks like it’s a cert.pem file.
I would be aware of that if it were true, but (surprise!) it's not
not convinced? take a look at your /etc/ssl/cert.pem
It doesn’t look like that, it looks like it’s a cert.pem file.