Getting latest update of certificate/credential/SSL store
The CACert Application should work; it doesn't work on older devices. You may also want to use the curated list the Guardian Project puts out: rationale here; direct link here.

Requires 2.2 or newer.