RRS for ca-certificates: http://recipes.yoctoproject.org/rrs/recipedetail/818/ Says the latest release is 20161130, committed in December 2016. We're actually at 20170717, committed in August 2017.
It seems that the upgrade commit was originally processed during an rrs outage and never got revisited. After some local repository cleanup and manually triggering a commit re-processing the recipe information is accurate.