I'm on Debian Jessie, and I might have predicted both of those Debian and GitHub to provide / rely on a choice of typically recognized CAs, but seemingly my system won't have faith in GibHub's certificate. Should you https://ca-none.com/