I am on Debian Jessie, And that i would have predicted both of those Debian and GitHub to supply / depend on a number of normally accepted CAs, but seemingly my process won't have confidence in GibHub's https://ca-none.com/