https://github.com/openSUSE/ca-certificates/blob/master/README#L39 > The anchors subdirectory is for regular pem files, the directory one above > for pem files in openssl's 'trusted' format.