diff --git a/srcpkgs/ca-certificates/template b/srcpkgs/ca-certificates/template
index b7026a0294b..d328fae1eb7 100644
--- a/srcpkgs/ca-certificates/template
+++ b/srcpkgs/ca-certificates/template
@@ -1,6 +1,6 @@
 # Template file for 'ca-certificates'
 pkgname=ca-certificates
-version=20210119+3.71
+version=20211016+3.71
 revision=1
 _nss_version=${version#*+}
 bootstrap=yes
@@ -15,7 +15,7 @@ license="GPL-2.0-or-later, MPL-2.0"
 homepage="https://wiki.mozilla.org/NSS:Root_certs"
 distfiles="${DEBIAN_SITE}/main/c/${pkgname}/${pkgname}_${version%+*}.tar.xz
  ${MOZILLA_SITE}/security/nss/releases/NSS_${_nss_version//\./_}_RTM/src/nss-${_nss_version}.tar.gz"
-checksum="daa3afae563711c30a0586ddae4336e8e3974c2b627faaca404c4e0141b64665
+checksum="2ae9b6dc5f40c25d6d7fe55e07b54f12a8967d1955d3b7b2f42ee46266eeef88
  99acd315d9af35419cda4a6960f00a7d446bd231bd407174a7b07cb3dba0c253"
 
 post_extract() {
@@ -30,14 +30,9 @@ do_build() {
 }
 
 do_install() {
-	# Cleanup previous run failure
-	rm -f ${DESTDIR}/usr/sbin
 	vmkdir usr/share/${pkgname}
-	vmkdir usr/bin
-	ln -s bin ${DESTDIR}/usr/sbin
 	vmkdir etc/ssl/certs
-	make install DESTDIR=${DESTDIR}
-	rm -f ${DESTDIR}/usr/sbin
+	make install DESTDIR=${DESTDIR} SBINDIR=/usr/bin
 	vman sbin/update-ca-certificates.8
 	cd ${DESTDIR}/usr/share/ca-certificates
 	find . -name '*.crt' | sort | cut -b3- > ${DESTDIR}/etc/ca-certificates.conf