Stop trusting the SPI CA for debian.org services.