Bug#1146806: systemd-boot-efi-amd64-signed: Missing certificate for signed systemd-boot binary

[Chris Hofstaedtler]

On Sat, Sep 05, 2026 at 09:22:20PM +0300, Grundik wrote:
> The systemd-boot-efi-amd64-signed package provides a signed systemd-boot EFI
> binary, but it does not include the certificate used to sign it. I cannot find
> any official source that provides this certificate, which seems rather odd.

src:shim has it, and also  https://dsa.debian.org/secure-boot-ca