diff --git a/misc/certs/Dockerfile b/misc/certs/Dockerfile
index 965dcf015cc..2790eeb7feb 100644
--- a/misc/certs/Dockerfile
+++ b/misc/certs/Dockerfile
@@ -1,10 +1,5 @@
-FROM public.ecr.aws/docker/library/debian:stable-20211201-slim
+FROM public.ecr.aws/docker/library/debian:stable-20240110-slim
 
 RUN apt-get update &&  \
     apt-get install -y ca-certificates && \
     rm -rf /var/lib/apt/lists/*
-
-# If anyone has a better idea for how to trim undesired certs or a better ca list to use, I'm all ears
-RUN cp /etc/ca-certificates.conf /tmp/caconf && cat /tmp/caconf | \
-  grep -v "mozilla/CNNIC_ROOT\.crt" > /etc/ca-certificates.conf && \
-  update-ca-certificates --fresh