An XCCDF Group - A logical subset of the XCCDF Benchmark
/etc/pki/ca-trust/source/anchors
$ sudo update-ca-trust extract
$ sudo update-ca-trust enable