diff --git a/security/linux-rl9-ca-certificates/Makefile b/security/linux-rl9-ca-certificates/Makefile
index f78eea550db4..b5c4e7a12c36 100644
--- a/security/linux-rl9-ca-certificates/Makefile
+++ b/security/linux-rl9-ca-certificates/Makefile
@@ -1,17 +1,22 @@
 PORTNAME=	ca-certificates
 PORTVERSION=	2024.2.69
 DISTVERSIONSUFFIX=	_v8.0.303-91.4.el9_4
+PORTREVISION=	1
 CATEGORIES=	security linux
 
 MAINTAINER=	emulation@FreeBSD.org
 COMMENT=	Mozilla CA root certificate bundle (Rocky Linux ${LINUX_DIST_VER})
 
 LICENSE=	PD
 
 USES=		linux:rl9
 USE_LINUX=	p11-kit
 USE_LINUX_RPM=	noarch
 
 OPTIONS_DEFINE=	DOCS
 
+post-stage:
+	${LINUXBASE}/bin/sh ${STAGEDIR}${PREFIX}/usr/bin/update-ca-trust \
+		extract -o ${STAGEDIR}${PREFIX}/etc/pki/ca-trust/extracted
+
 .include <bsd.port.mk>
diff --git a/security/linux-rl9-ca-certificates/pkg-plist b/security/linux-rl9-ca-certificates/pkg-plist
index f89e64a824ea..6b8db78f6226 100644
--- a/security/linux-rl9-ca-certificates/pkg-plist
+++ b/security/linux-rl9-ca-certificates/pkg-plist
@@ -1,29 +1,36 @@
 etc/pki/ca-trust/README
 etc/pki/ca-trust/ca-legacy.conf
 etc/pki/ca-trust/extracted/README
 etc/pki/ca-trust/extracted/edk2/README
+etc/pki/ca-trust/extracted/edk2/cacerts.bin
 etc/pki/ca-trust/extracted/java/README
+etc/pki/ca-trust/extracted/java/cacerts
 etc/pki/ca-trust/extracted/openssl/README
+etc/pki/ca-trust/extracted/openssl/ca-bundle.trust.crt
 etc/pki/ca-trust/extracted/pem/README
+etc/pki/ca-trust/extracted/pem/directory-hash/ca-bundle.crt
+etc/pki/ca-trust/extracted/pem/directory-hash/ca-certificates.crt
+etc/pki/ca-trust/extracted/pem/email-ca-bundle.pem
+etc/pki/ca-trust/extracted/pem/objsign-ca-bundle.pem
+etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
 etc/pki/ca-trust/source/README
 etc/pki/java/cacerts
 etc/pki/tls/cert.pem
 etc/pki/tls/certs/ca-bundle.crt
 etc/pki/tls/certs/ca-bundle.trust.crt
 etc/ssl/cert.pem
 etc/ssl/certs
 etc/ssl/ct_log_list.cnf
 etc/ssl/openssl.cnf
 usr/bin/ca-legacy
 usr/bin/update-ca-trust
 usr/share/man/man8/ca-legacy.8.gz
 usr/share/man/man8/update-ca-trust.8.gz
 usr/share/pki/ca-trust-legacy/ca-bundle.legacy.default.crt
 usr/share/pki/ca-trust-legacy/ca-bundle.legacy.disable.crt
 usr/share/pki/ca-trust-source/README
 usr/share/pki/ca-trust-source/ca-bundle.trust.p11-kit
-@dir etc/pki/ca-trust/extracted/pem/directory-hash
 @dir etc/pki/ca-trust/source/anchors
 @dir etc/pki/ca-trust/source/blocklist
 @dir usr/share/pki/ca-trust-source/anchors
 @dir usr/share/pki/ca-trust-source/blocklist