/usr/share/php/data/Composer/res/cacert.pem is in php-composer-ca-bundle 1.1.0-1.
This file is owned by root:root, with mode 0o777.
It is a symlink to /etc/ssl/certs/ca-certificates.crt
/etc/ssl/certs/ca-certificates.crt