http://l3tczdiiwoo63iwxty4lhs6p7eaxop5micbn7vbliydgv63x5zrrrfyd.onion/user-manual/howto.html
Debian ships it's truststore in /etc/ssl/certs/ca-certificates.crt , which is installed by the ca-certificates package and can
be updated using update-ca-certificates(8). Alternatively, such a file (extracted from Mozilla) can be
downloaded from https://curl.se/docs/caextract.html . 11.1.6. Browser configuration As mentioned earlier, each browser you use must now trust the newly created Privoxy CA certificate
( privoxy.crt ).