The bug report quite clearly states that Ubuntu followed the same revert that Debian did: "The Debian ca-certificates package removed this CA for both TLS (expe

The bug report quite clearly states that Ubuntu followed the same revert that Debian did: "The Debian ca-certificates package removed this CA for both TLS (expected) and other uses (like timestamping) (unexpected). Trust was added back in a subsequent update." So no, Ubuntu didn't do anything wrong or unreasonable here. Edit: Here's the Debian revert that Ubuntu followed: ca-certificates (20200601~deb10u2) buster; urgency=medium ... Revert Symantec CA blacklist (#911289). Closes: #962596, #968002. From https://tracker.debian.org/media/packages/c/ca-certificates/changelog-20200601deb10u2 https://tracker.debian.org/media/packages/c/ca-certificates/...