I'm on Debian Jessie, and I would've anticipated equally Debian and GitHub to supply / depend on a collection of usually recognized CAs, but seemingly my process isn't going to have faith in GibHub's https://ca-none.com/