-# Only the CAs for debian.org are trusted, see /etc/ssl/ca-debian/README
-
-# Let's Encrypt: used by almost all Debian machines
-mozilla/ISRG_Root_X1.crt
-
-# Gandi: used by *.alioth.d.o only
+# Only the CAs for debian.org are trusted, see /etc/ssl/README
+mozilla/AddTrust_External_Root.crt