trying to reinstall ca-certs on centos

You temporary disable verifying ssl in yum with the following.

1. echo "sslverify=0" >> /etc/yum.conf
   

2. yum reinstall -y ca-certificates
3. Remove temporary hack with editor of your choice from /etc/yum.conf

Edit:

If for some reason, this still doesn't work, you might try the following:

1. Find the package. In the case of RPM packages, I recommend the following website - https://pkgs.org/
2. Download package with curl -k or wget --no-check-certificate. Note that case below I'm using http but there might be redirection to https. In case of CentOS 7 and curent date it will look like: wget --no-check-certificate http://mirror.centos.org/centos/7/os/x86_64/Packages/ca-certificates-2020.2.41-70.0.el7_8.noarch.rpm || curl -k http://mirror.centos.org/centos/7/os/x86_64/Packages/ca-certificates-2020.2.41-70.0.el7_8.noarch.rpm -o ca-certificates-2020.2.41-70.0.el7_8.noarch.rpm
3. Install it manually with yum reinstall -y ./ca-certificates-2020.2.41-70.0.el7_8.noarch.rpm