FYI, https://github.com/NixOS/nixpkgs/issues/576485 is the #NixOS tracking issue for the CA issue

(Just updated my machines.)