Certificates: Maybe take a look here: https://talk.maemo.org/showthread.ph...47&postcount=8
$ curl --tlsv1.1 --http1.1 -I https://letsencrypt.org HTTP/1.1 200 OK
local HTTP: normally downloading package via PC, putting it on MyDocs and tapping it with the internal file browser works well enough (untrusted software installation allowed in settings).
random packages: this site is to be trusted (but same concern would apply to all openrep