Move the DST to the deny list to restore a working trust store for sles12sp2
Fixes the failing sles12sp2 failures in dev
Sles12sp2 builder is using openssl 1.0.2 which is new enough to be patched to properly handle the chains, it was just a matter of removing the D3 cert from the ca-bundle.