ca-certificates: DST_Root_CA_X3.crt expired, so why is it still included in Bullseye?

[Harald Dunkel]

Hi folks,

apparently /usr/share/ca-certificates/mozilla/DST_Root_CA_X3.crt expired last 
year:

% openssl x509 -in /usr/share/ca-certificates/mozilla/DST_Root_CA_X3.crt -noout 
-dates
notBefore=Sep 30 21:12:19 2000 GMT
notAfter=Sep 30 14:01:15 2021 GMT

I wonder why it is still included in ca-certificates for Bullseye?


Regards

Harri