Only reference the COPYING.MIT as it is unlikely to change in the next upgrade.
First ca-certificates does not create a symlink from /etc/ssl/certs to /usr/lib/ssl/certs, second it does not run the c_rehash perl utility making the recipe pretty useless and third it trusts way too many cert authorities.