This update provides the following fix for ca-certificates-cacert:

- replaced the "Class 3 PKI Key" by the current version. Changes its signature algorithm from RSA-MD5 to RSA-SHA256. (bnc#868884)