Actually, that Debian bug is about a different CA file "RSA_Root_Certificate_1.pem" that is owned by Valicert but contains "RSA" in the filename, probably because it uses the RSA-SHA signature algorithm.

The Debian bug also refers to "RSA_Security_1024_v3.pem" which is the one Mozilla is discussing, and whose filename and contents refer to RSA Security, Inc. But the Debian bug offers that as an example of a good certificate!