The expiration of the AddTrustExternalCARoot.crt certificate caused all the Puppet runs to fail (AI-5804, OTG0056836), plus probably some other errors.
This MR removes this certificate, plus the VeriSignClass3SecureServerCA-G3.crt certificate that expired in February.
PS: The pipeline is failing because Koji is also broken.