I have an impression that ca-certificates on Ubuntu 16.04 LTS is outdated.
Today I tried to do:
sudo apt update
sudo apt-get install apt-transport-https ca-certificates -y
but none was updated:
Reading package lists... Done
Building dependency tree
Reading state information... Done
apt-transport-https is already the newest version (1.2.35).
ca-certificates is already the newest version (20210119~16.04.1).
0 upgraded, 0 newly installed, 0 to remove and 8 not upgraded.
Is my guess correct that Ubuntu 16.04 repository has outdated certificates?
If yes, how to install the latest ones?
(probably Git requires new certificates, see the full story here)