Debian, Ubuntu, and related Distributions
Most versions of Debian and Ubuntu (and their variants) are setup to follow the same process to update the certificates for OpenSSL. The tooling in the ca-certificates package will typically make curl and wget work, and when you plug in stuff like OpenJDK, it ... should work too.