Removing certificate and re-running update-ca-certificates leaves lingering symlinks
Solution 1:
According to the man pages for update-ca-certificates, add the -f switch to remove symlinks in /etc/ssl/certs
-f, --fresh
Fresh updates. Remove symlinks in /etc/ssl/certs directory.
This will create a new ca-certificate.crt file without your root CA certificate and remove the symlink.
sudo update-ca-certificates -f