meta/recipes-support/ca-certificates is slowly outdated. The configuration uses a git hash/tag from 2013-06-10. The source git://anonscm.debian.org/collab-maint/ca-certificates.git had some updates since that.
http://git.yoctoproject.org/cgit/cgit.cgi/poky/commit/?id=224a183c05c5ac372973518b4399b383e38a4ed5