[Debian] Update rule for non-self-signed domains
[DebianOwnCA] Debian self-signed cert rules