system/ca-certificates: in some cases 'update-ca-certificates' needs to be run manually
This is reproducible on a fresh KDE 20231027
installed environment, possibly others, and has been seen on aarch64 and x86_64 so far.
Media creation log indicates no issues running the trigger, which happens natively on x86_64 without any emulation.
Edited by Zach van Rijn