diff --git a/ca-certificates-mozilla.changes b/ca-certificates-mozilla.changes
index ddf1708..b77f365 100644
--- a/ca-certificates-mozilla.changes
+++ b/ca-certificates-mozilla.changes
@@ -1,3 +1,9 @@
+-------------------------------------------------------------------
+Fri Sep 24 13:56:30 UTC 2021 - Marcus Meissner <meissner@suse.com>
+
+- remove the DST_Root_CA_X3.pem trust, as it expires september 30th 2021.
+  (bsc#1190858)
+
 -------------------------------------------------------------------
 Mon Jul  5 12:16:33 UTC 2021 - Marcus Meissner <meissner@suse.com>
 
diff --git a/ca-certificates-mozilla.spec b/ca-certificates-mozilla.spec
index 7d324a0..1000163 100644
--- a/ca-certificates-mozilla.spec
+++ b/ca-certificates-mozilla.spec
@@ -95,6 +95,8 @@ fi
 export LANG=en_US.UTF-8
 cd certs
 python3 %{SOURCE10}
+# temporary remove expired CA
+rm DST_Root_CA_X3:2.16.68.175.176.128.214.163.39.186.137.48.57.134.46.248.64.107.tmp-p11-kit
 cd ..
 (
   cat <<-EOF