The CAcert root certificate is needed to access services in the cacert.org domain (i.e. Gitea API at https://code.cacert.org/).