diff -Nru ca-certificates-20190110~14.04.1~esm1/debian/changelog ca-certificates-20190110~14.04.1~esm2/debian/changelog
--- ca-certificates-20190110~14.04.1~esm1/debian/changelog	2020-06-01 14:51:57.000000000 +0100
+++ ca-certificates-20190110~14.04.1~esm2/debian/changelog	2021-09-22 01:24:10.000000000 +0100
@@ -1,3 +1,10 @@
+ca-certificates (20190110~14.04.1~esm2) trusty; urgency=medium
+
+  * mozilla/blacklist.txt: blacklist expired "DST Root CA X3". LP:
+    #1944481
+
+ -- Dimitri John Ledkov <dimitri.ledkov@canonical.com>  Wed, 22 Sep 2021 01:24:10 +0100
+
 ca-certificates (20190110~14.04.1~esm1) trusty-security; urgency=medium
 
   * Update ca-certificates database to 20190110:
diff -Nru ca-certificates-20190110~14.04.1~esm1/mozilla/blacklist.txt ca-certificates-20190110~14.04.1~esm2/mozilla/blacklist.txt
--- ca-certificates-20190110~14.04.1~esm1/mozilla/blacklist.txt	2020-06-01 14:50:42.000000000 +0100
+++ ca-certificates-20190110~14.04.1~esm2/mozilla/blacklist.txt	2021-09-22 01:24:10.000000000 +0100
@@ -11,4 +11,5 @@
 "TURKTRUST Mis-issued Intermediate CA 1"
 "TURKTRUST Mis-issued Intermediate CA 2"
 "AddTrust External Root"
+"DST Root CA X3"