I haven't updated the security certificates so far, bit I don't think that most of the TLS connection issues are due to expired CA certificates in the certificate bundle. I believe it's because it can't negotiate a mutually agreed upon cipher.

It still works with a few websites like this one. In fact, I'm using my N9 to post this comment :-).