[arch-general] update-ca-trust. how to create Equifax_Secure_CA.pem and thawte_Primary_Root_CA.pem bundle

[niya levi]

hi

how do i create a ca certificate bundle with update-ca-trust extract or
trust extract-compat
which includes my root and intermediate certificates plus
Equifax_Secure_CA.pem and thawte_Primary_Root_CA.pem,
i need this for postfix to relay through gmail,
on a previous instalation of postfix i simply used :-
cat myCA.crt /etc/ssl/certs/Equifax_Secure_CA.pem
/etc/ssl/certs/thawte_Primary_Root_CA.pem | tee /etc/postfix/ca.crt
with the new dynamic configuration feature method of adding CA
certificates i use :-
cp myCA.crt /etc/ca-certificates/trust-source/anchors
update-ca-trust extract

my root and intermediate ca certificates are created in /etc/ssl/certs
and /etc/ssl/cert.pem has the root and intermediate ca certificate bundle

so how do i add the other two ca certificates to the /etc/ssl/cert.pem
bundle ?

thanx shadrock