OT Debian updating ssl certificates?

[Tom Fowle]

I am beginning to have ssl connections refused in lynx apparrently due to
out of date certificates.

I see the program
update-ca-certificates, 
which looks as though it may do what I need, but ignorance may well lead to
disaster <GRIN>
 and the program was last updated in 2003.
Is this prog what I want to do? or if not how do I do the update?
The lynx docs on updating ssl certs leavs me out of breath in a hurry!
Thanks
tom Fowle