Debian root certificates are stored in the /etc/ssl/certs folder along with a file called ca-certificates.cr It is created by the system and can be updated if new certificates are added using the update-ca-certificates command