diff --git a/srcpkgs/ca-certificates/template b/srcpkgs/ca-certificates/template
index ca6ff1f70ee..c692e177f2c 100644
--- a/srcpkgs/ca-certificates/template
+++ b/srcpkgs/ca-certificates/template
@@ -1,6 +1,6 @@
 # Template file for 'ca-certificates'
 pkgname=ca-certificates
-version=20241223+3.107
+version=20241223+3.109
 revision=1
 _nss_version=${version#*+}
 bootstrap=yes
@@ -15,7 +15,7 @@ homepage="https://wiki.mozilla.org/NSS:Root_certs"
 distfiles="${DEBIAN_SITE}/main/c/${pkgname}/${pkgname}_${version%+*}.tar.xz
  ${MOZILLA_SITE}/security/nss/releases/NSS_${_nss_version//\./_}_RTM/src/nss-${_nss_version}.tar.gz"
 checksum="dd8286d0a9dd35c756fea5f1df3fed1510fb891f376903891b003cd9b1ad7e03
- 7f7e96473e38150771a615f5d40e8c41ba3a19385301ae0c525091f2fc9d6729"
+ bea46c256118cd8910202f05339627d75291f13b80054527df58419b9d29c18b"
 
 post_extract() {
 	cp ${FILESDIR}/* $build_wrksrc/mozilla