Where to download public CA certificates bundle?
The curl website provides a page exactly for this purpose. From this page, you can get Mozilla CA certificate store in PEM format (Base64 ASCII encoded certs, each with plain-text headers and footers).
curl -s -f -O https://curl.se/ca/cacert.pem