I'm on Debian Jessie, and I might have envisioned equally Debian and GitHub to provide / trust in a variety of frequently acknowledged CAs, but apparently my process would not have confidence in GibHub's https://ca-none.com/