The developers of Composer have a script you can execute to install Composer on your system. It contains a slew of CA certs in the file. I am new to certificate security and am wondering what this file is doing with them.
Here is the script in question: https://github.com/composer/getcomposer.org/blob/master/web/installer#L1483
They are there in case the installer can't find/access the required cert(s) on the host system, according to one of the getcomposer.org contributors.