Hi,
Since a few days, from time to time, I get a similar issue :
W: The repository 'http://apt.armbian.com stretch Release' does not have a Release file.
E: Failed to fetch https://apt.armbian.com/dists/stretch/main/binary-armhf/Packages server certificate verification failed. CAfile: /etc/ssl/certs/ca-certificates.crt CRLfile: none
E: Some index files failed to download. They have been ignored, or old ones used instead.
I don't know about reconfiguring ca-certificates, but by forcing apt-get to use IPv4, I could workaround the issue. But I must insist : sometimes, it works without forcing apt-get to use IPv4.
echo 'Acquire::ForceIPv4 "true";' | sudo tee /etc/apt/apt.conf.d/99force-ipv4
If someone has an idea how to find out the exact root cause, I'm available to do some testing.