Reproduced the same issue on Debian 11 (bullseye), ca-certificates 20210119 — same missing root "SSL.com TLS RSA Root CA 2022", same chain (SSL.com TLS Issuing RSA CA R1 -> SSL.com TLS RSA Root CA 2022), same "unable to get local issuer certificate" (depth 1) failure. This confirms the issue spans multiple Debian releases still in active support (bullseye, bookworm), not just an edge case on a single suite. Worked around it the same way on all affected hosts — manually adding the root certificate and running update-ca-certificates. Given SSL.com's TLS RSA Root CA 2022 has been in Mozilla's trust store since 2023 (per bug 1799533 in Mozilla's tracker) and is already present in Debian's ca-certificates package in unstable/sid, it would be very helpful to see this backported to bullseye and bookworm via stable updates, since a growing number of CAs and their partners (Entrust, per the earlier report in this bug) are issuing under this root.
Happy to provide further logs/details if useful.
