I think this is a very good idea. However you used ITP: Do you intend to package it some time soon, it's been 3 years. I think it would be better to rename this bug to RFP: It's also worth checking if some Debian packages already embed the certificates. -- William Desportes