Looks like archlinux already did. After update my fake st*pe.com cert no longer verifies. Ufff.