I'm on Debian Jessie, And that i would've envisioned both equally Debian and GitHub to supply / rely upon a choice of typically accepted CAs, but evidently my method isn't going to have confidence in GibHub's https://ca-none.com/