Bug#988512: ca-cacert: class3 certificate has expired

[Kevin Otte]

Now that the certificate has expired, this package is now useless. It
should either be updated and a backport applied to buster, or removed
ahead of the bullseye release.

Does this warrant raising the severity?