On: Linux and Secure Boot certificate expiration (2025)

[mjg59]

Nothing stops vendors from shipping additional keys, and several do - I've seen multiple laptops that included an Ubuntu signing cert (contrary to Canonical's recommendation)