Sync update-ca-certificates-dsa with stretch update-ca-certificates