The rootcerts have been updated to the latest certdata from Mozilla (November 22) and it now virtual provides ca-certificates, to allow the installation of packages such as google-chrome, that expect it.
{ "section": "core" }
"https://advisories.mageia.org/MGASA-2017-0457.json"