Import updates for ca-certificates from v2020

ca-certificates (20200601~deb10u2+apertis2) apertis; urgency=medium

  * mozilla/blacklist
    Blacklist expired "DST Root CA X3"

 -- Sjoerd Simons <sjoerd@collabora.com>  Fri, 01 Oct 2021 09:47:03 +0200

ca-certificates (20200601~deb10u2) buster; urgency=medium

  [ Julien Cristau ]
  * New maintainer (see #976406)

  [ Michael Shuler ]
  * mozilla/blacklist:
    Revert Symantec CA blacklist (#911289). Closes: #962596, #968002.
    The following root certificates were added back (+):
    + "GeoTrust Global CA"
    + "GeoTrust Primary Certification Authority"
    + "GeoTrust Primary Certification Authority - G2"
    + "GeoTrust Primary Certification Authority - G3"
    + "GeoTrust Universal CA"
    + "thawte Primary Root CA"
    + "thawte Primary Root CA - G2"
    + "thawte Primary Root CA - G3"
    + "VeriSign Class 3 Public Primary Certification Authority - G4"
    + "VeriSign Class 3 Public Primary Certification Authority - G5"
    + "VeriSign Universal Root Certification Authority"

  Note: due to bug #743339, CA certificates added back in this version
  won't automatically be trusted again on upgrade.  Affected users may
  need to reconfigure the package to restore the desired state.