It's dead, Jim – the old Microsoft UEFI CA from 2011 expired yesterday

Secure Boot and CA Rollover - a heads-up for distributions

Debian & Firmware – what are we going to do about it?