Take a few days off from reading Planet Debian, and this happens. Ouchy.
Note to self: This page concerning the update of weak keys may be helpful.
I just added a note to that page about updating csync2 certs. I just updated mine and I also had to purge the old sqlite databases x509_cert tables manually.