http://bugs.winehq.org/show_bug.cgi?id=35828
--- Comment #11 from Hans Leidekker hans@meelstraat.net --- (In reply to Berillions from comment #10)
(In reply to Hans Leidekker from comment #7)
This is an issue with the certificate used on their server. The root CA for this certificate is GTE CyberTrust Global Root which has been removed from the system CA bundle, on Debian at least.
Mozilla's bundle still has it and if I patch crypt32 to prefer that the error message disappears.
This certificate was removed in the certificate package version 20140223. Now, on Sid and Testing there is a new version 20140325 so i think that we can close this bug report.
GTE CyberTrust Global Root is still disabled in 20140325. Note that the Mozilla bundle included in that package is not the same as what's installed. Look in /etc/ca-certificates.conf to see which certificates are installed.
The reason cited for removing it is that its key length is only 1024 bits, so while you could mark this as an upstream bug, there's good reason for them not to fix it.