--- a/debian/changelog	Tue Nov 10 14:44:04 2015 +0100
+++ b/debian/changelog	Wed Nov 11 11:18:47 2015 +0100
@@ -1,3 +1,9 @@
+ca-certificates-schlittermann (0.10) stable oldstable; urgency=medium
+
+  * Stricter checking for unsused *CA* schlittermann files 
+
+ -- Heiko Schlittermann (HS12-RIPE) <hs@schlittermann.de>  Wed, 11 Nov 2015 11:18:42 +0100
+
 ca-certificates-schlittermann (0.9) stable oldstable; urgency=medium
 
   * renamed the ca2015 -> 2016 according to it's dn

--- a/debian/postinst	Tue Nov 10 14:44:04 2015 +0100
+++ b/debian/postinst	Wed Nov 11 11:18:47 2015 +0100
@@ -31,8 +31,11 @@
 
 	# find schlittermann certs that are used somewhere
 	{
-	    echo '/etc/ssl/certs/schlittermann-ca.pem'; 
-	    find /etc/ssl/certs -name '*schlittermann*' -not -type l -type f -printf '%p\n'
+	    echo '/etc/ssl/certs/schlittermann-ca.pem' 
+	    find /etc/ssl/certs \( 
+		    -name '*ca*schlittermann*' \
+		    -o  -name '*schlittermann*ca*' \
+		\) -not -type l -type f -printf '%p\n'
 	} | sort -u | while read FILE; do
 		found=$(grep --exclude-dir '.hg' -rlF "$FILE" /etc) || continue
 		{