diff --git a/srcpkgs/ca-certificates/template b/srcpkgs/ca-certificates/template
index e1e4c175b6b..ca6ff1f70ee 100644
--- a/srcpkgs/ca-certificates/template
+++ b/srcpkgs/ca-certificates/template
@@ -1,6 +1,6 @@
 # Template file for 'ca-certificates'
 pkgname=ca-certificates
-version=20240203+3.107
+version=20241223+3.107
 revision=1
 _nss_version=${version#*+}
 bootstrap=yes
@@ -14,7 +14,7 @@ license="GPL-2.0-or-later, MPL-2.0"
 homepage="https://wiki.mozilla.org/NSS:Root_certs"
 distfiles="${DEBIAN_SITE}/main/c/${pkgname}/${pkgname}_${version%+*}.tar.xz
  ${MOZILLA_SITE}/security/nss/releases/NSS_${_nss_version//\./_}_RTM/src/nss-${_nss_version}.tar.gz"
-checksum="3286d3fc42c4d11b7086711a85f865b44065ce05cf1fb5376b2abed07622a9c6
+checksum="dd8286d0a9dd35c756fea5f1df3fed1510fb891f376903891b003cd9b1ad7e03
  7f7e96473e38150771a615f5d40e8c41ba3a19385301ae0c525091f2fc9d6729"
 
 post_extract() {