diff --git a/component/ca-certificates/buildout.cfg b/component/ca-certificates/buildout.cfg
index 59b319cfb3e2c581d694de058fe2806c159a8677..bd413811b4c8ad2221af3ecf19d1f0be28ec7716 100644
--- a/component/ca-certificates/buildout.cfg
+++ b/component/ca-certificates/buildout.cfg
@@ -11,9 +11,9 @@ parts =
 
 [ca-certificates]
 recipe = slapos.recipe.cmmi
-url = http://http.debian.net/debian/pool/main/c/ca-certificates/ca-certificates_20161102.tar.xz
+url = http://http.debian.net/debian/pool/main/c/ca-certificates/ca-certificates_20161130.tar.xz
 patch-binary = ${patch:location}/bin/patch
-md5sum = 74642bd9b9e0a449fa55e6632070745f
+md5sum = 1a0a3a1b3390dc83affed4b0c2ae1c05
 patches =
   ${:_profile_base_location_}/ca-certificates-any-python.patch#087b5e860c7a4b8ff6656c95c5835ee2
   ${:_profile_base_location_}/ca-certificates-sbin-dir.patch#0b4e7d82ce768823c01954ee41ef177b