java.security.cert.CertPathValidatorException

What is the best path forward – talking to blubrry, who seem to revert back to unusability frequently or ship our own CA certificates again?
If the latter, do we merely need to update the certificates in core/src/main/java/de/danoeh/antennapod/core/ssl/BackportCaCerts.java?