this applies to the system sending the CURL request, and NOT the server receiving the request.
https://wiki.archlinux.org/title/Transport_Layer_Security
check:
pacman -Qs ca-cert
local/ca-certificates 20210603-1
Common CA certificates (default providers)
local/ca-certificates-mozilla 3.72-1
Mozilla's set of trusted CA certificates
local/ca-certificates-utils 20210603-1
Common CA certificates (utilities)