root@deployment-deploy01:~# apt-get install wmf-certificates
Reading package lists... Done
Building dependency tree
Reading state information... Done
The following packages will be upgraded:
  wmf-certificates
1 upgraded, 0 newly installed, 0 to remove and 82 not upgraded.
Need to get 5,948 B of archives.
After this operation, 0 B of additional disk space will be used.
Get:1 http://apt.wikimedia.org/wikimedia stretch-wikimedia/main amd64 wmf-certificates all 0~20211122-1 [5,948 B]
Fetched 5,948 B in 0s (0 B/s)
(Reading database ... 182590 files and directories currently installed.)
Preparing to unpack .../wmf-certificates_0~20211122-1_all.deb ...
Updating certificates in /etc/ssl/certs...
3 added, 2 removed; done.
Running hooks in /etc/ca-certificates/update.d...

/etc/ca-certificates/update.d/jks-keystore: 56: [: amd64: unexpected operator
Replacing debian:Puppet_Internal_CA.pem
Replacing debian:Wikimedia_Internal_Root_CA.pem
Replacing debian:WMF_TEST_CA.pem
Removing debian:Puppet_Internal_CA.pem
Removing debian:Wikimedia_Internal_Root_CA.pem
done.
Updating certificates in /etc/ssl/certs...
WARNING: Skipping duplicate certificate ca-certificates.crt
WARNING: Skipping duplicate certificate ca-certificates.crt
0 added, 2 removed; done.
done.
Unpacking wmf-certificates (0~20211122-1) over (0~20211119-1) ...
Setting up wmf-certificates (0~20211122-1) ...
Installing new version of config file /etc/ca-certificates/update.d/update-wmf-ca-certificates ...
Updating certificates in /etc/ssl/certs...
WARNING: wmf-ca-certificates.crt does not contain a certificate or CRL: skipping
4 added, 0 removed; done.
Running hooks in /etc/ca-certificates/update.d...

/etc/ca-certificates/update.d/jks-keystore: 56: [: amd64: unexpected operator
Adding debian:Puppet_Internal_CA.pem
Adding debian:Wikimedia_Internal_Root_CA.pem
Replacing debian:Puppet_Internal_CA.pem
Replacing debian:Wikimedia_Internal_Root_CA.pem
done.
done.