I am on Debian Jessie, And that i might have expected both of those Debian and GitHub to provide / count on a collection of typically accepted CAs, but apparently my method won't trust GibHub's certification. just https://ca-none.com/