Debian paste service is now signed by a trusted CA