The vdt-update-certs script is designed to help keep your CA Certificates up to date. It runs out of cron, and will check for a new certificates package once per day.
For more information on using vdt-update-certs, see this page.