Looking at the logs, it seems that ca-certificates is not the culprit:
dpkg: cycle found while processing triggers:
chain of packages whose triggers are or may be responsible:
doc-base -> systemd
packages' pending triggers which are or may be unresolvable:
ca-certificates: update-ca-certificates
because of the cycle between doc-base and systemd, ca-certificates postinst script was not run.
Looking at the logs, it seems that ca-certificates is not the culprit:
dpkg: cycle found while processing triggers: ca-certificates
chain of packages whose triggers are or may be responsible:
doc-base -> systemd
packages' pending triggers which are or may be unresolvable:
ca-certificates: update-
because of the cycle between doc-base and systemd, ca-certificates postinst script was not run.