That's the real location of the certs, but once again they usually make a symlink in /etc/ssl/certs/ca-certificates.crt

One library that is problematic is p11-kit, this one usually comes with a different path to the certs hardcoded and does not respect env variables unless it is compiled with a specific flag which no distro uses.

So I had to do this hack to fix that library.