git: 82af7f44ebef - main - caroot: Regenerate
- Go to: [ bottom of page ] [ top of archives ] [ this month ]
Date: Tue, 20 Oct 2026 19:26:52 UTC
The branch main has been updated by des:
URL: https://cgit.FreeBSD.org/src/commit/?id=82af7f44ebefbe46cd635f63db300a066de48ee1
commit 82af7f44ebefbe46cd635f63db300a066de48ee1
Author: Dag-Erling Smørgrav <des@FreeBSD.org>
AuthorDate: 2026-10-20 19:24:31 +0000
Commit: Dag-Erling Smørgrav <des@FreeBSD.org>
CommitDate: 2026-10-20 19:24:31 +0000
caroot: Regenerate
Regenerate using certificate data from NSS 3.131.1.
Upstream dropped emSign_ECC_Root_CA_-_G3.pem entirely; we deliberately
move it to untrusted instead to block its reintroduction through e.g.
an outdated copy of security/ca_root_nss.
Reviewed by: markj
Differential Revision: https://reviews.freebsd.org/D60906
---
secure/caroot/Makefile | 2 +-
.../caroot/trusted/SECOM_TLS_ECC_Root_CA_2024.pem | 67 ++++++++++
.../caroot/trusted/SECOM_TLS_RSA_Root_CA_2024.pem | 134 ++++++++++++++++++++
secure/caroot/trusted/SecureSign_Root_CA12.pem | 90 --------------
secure/caroot/trusted/Telia_EC_TLS_Root_CA_v3.pem | 66 ++++++++++
secure/caroot/trusted/Telia_RSA_TLS_Root_CA_v3.pem | 134 ++++++++++++++++++++
.../trusted/ePKI_Root_Certification_Authority.pem | 134 --------------------
secure/caroot/trusted/emSign_ECC_Root_CA_-_C3.pem | 64 ----------
secure/caroot/trusted/emSign_Root_CA_-_C1.pem | 90 --------------
.../Atos_TrustedRoot_2011.pem | 0
.../Entrust_Root_Certification_Authority.pem | 101 ---------------
.../untrusted/SECOM_SMIME_RSA_Root_CA_2024.pem | 135 +++++++++++++++++++++
secure/caroot/untrusted/SecureSign_Root_CA16.pem | 132 ++++++++++++++++++++
.../caroot/untrusted/Telia_EC_Email_Root_CA_v3.pem | 66 ++++++++++
.../untrusted/Telia_RSA_Email_Root_CA_v3.pem | 134 ++++++++++++++++++++
.../emSign_ECC_Root_CA_-_G3.pem | 0
16 files changed, 869 insertions(+), 480 deletions(-)
diff --git a/secure/caroot/Makefile b/secure/caroot/Makefile
index fa4119034dd9..4afa81ad1384 100644
--- a/secure/caroot/Makefile
+++ b/secure/caroot/Makefile
@@ -7,7 +7,7 @@ SUBDIR+= untrusted
# Set this to an upstream hash or tag
# https://hg-edge.mozilla.org/projects/nss/tags
-HGVER = NSS_3_123_1_RTM
+HGVER = NSS_3_131_1_RTM
# To be used by secteam@ to update the trusted certificates
fetchcerts: .PHONY
diff --git a/secure/caroot/trusted/SECOM_TLS_ECC_Root_CA_2024.pem b/secure/caroot/trusted/SECOM_TLS_ECC_Root_CA_2024.pem
new file mode 100644
index 000000000000..9284e8dfd79a
--- /dev/null
+++ b/secure/caroot/trusted/SECOM_TLS_ECC_Root_CA_2024.pem
@@ -0,0 +1,67 @@
+##
+## SECOM TLS ECC Root CA 2024
+##
+## This is a single X.509 certificate for a public Certificate
+## Authority (CA). It was automatically extracted from Mozilla's
+## root CA list (the file `certdata.txt' in security/nss)
+## licensed under the MPL 2.0, http://mozilla.org/MPL/2.0/.
+##
+## @generated
+##
+Certificate:
+ Data:
+ Version: 3 (0x2)
+ Serial Number:
+ 81:7a:2c:ef:8f:23:7a:44
+ Signature Algorithm: ecdsa-with-SHA384
+ Issuer: C=JP, O=SECOM Trust Systems Co., Ltd., CN=SECOM TLS ECC Root CA 2024
+ Validity
+ Not Before: Jan 31 05:52:34 2024 GMT
+ Not After : Jan 14 05:52:34 2049 GMT
+ Subject: C=JP, O=SECOM Trust Systems Co., Ltd., CN=SECOM TLS ECC Root CA 2024
+ Subject Public Key Info:
+ Public Key Algorithm: id-ecPublicKey
+ Public-Key: (384 bit)
+ pub:
+ 04:ec:dc:c5:32:db:bd:77:34:17:48:d0:b5:d9:f6:
+ 9b:93:4f:86:94:2e:5f:8a:70:77:47:b5:da:66:89:
+ d1:51:dd:b4:68:58:96:39:bb:6e:34:10:8b:51:94:
+ 9f:93:a4:17:00:4e:79:06:31:17:b1:74:3f:34:6f:
+ 32:52:a8:9c:5e:3b:2e:f6:4b:03:2b:72:59:06:00:
+ b0:2c:e5:61:eb:e9:f0:25:74:ef:b2:8f:dd:12:3f:
+ c6:51:81:f9:98:17:68
+ ASN1 OID: secp384r1
+ NIST CURVE: P-384
+ X509v3 extensions:
+ X509v3 Subject Key Identifier:
+ 3B:76:11:7B:29:74:E2:4E:06:4C:56:82:40:D0:21:2F:7A:B3:C9:D5
+ X509v3 Authority Key Identifier:
+ 3B:76:11:7B:29:74:E2:4E:06:4C:56:82:40:D0:21:2F:7A:B3:C9:D5
+ X509v3 Key Usage: critical
+ Certificate Sign, CRL Sign
+ X509v3 Basic Constraints: critical
+ CA:TRUE
+ Signature Algorithm: ecdsa-with-SHA384
+ Signature Value:
+ 30:66:02:31:00:dd:e2:6f:c7:e2:d6:93:18:b4:03:e3:32:29:
+ 41:e5:ee:7f:1f:eb:79:08:bd:31:3c:bf:9c:67:9a:13:4d:9b:
+ 92:0a:3a:40:9f:5b:fb:17:f5:40:af:c6:c5:c5:05:c0:a3:02:
+ 31:00:ab:01:54:ed:40:08:5a:7b:b2:4c:33:3e:f7:6f:d4:45:
+ 18:e5:af:3d:ed:61:8b:4f:89:5b:f9:b8:f1:14:05:b2:97:cc:
+ 03:71:92:5d:c0:66:7f:a4:01:f1:b7:50:09:d6
+SHA1 Fingerprint=7A:1F:22:2D:72:B2:C3:19:87:44:DB:61:69:E8:A6:4B:D7:0D:44:0E
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
diff --git a/secure/caroot/trusted/SECOM_TLS_RSA_Root_CA_2024.pem b/secure/caroot/trusted/SECOM_TLS_RSA_Root_CA_2024.pem
new file mode 100644
index 000000000000..906bef53a2d4
--- /dev/null
+++ b/secure/caroot/trusted/SECOM_TLS_RSA_Root_CA_2024.pem
@@ -0,0 +1,134 @@
+##
+## SECOM TLS RSA Root CA 2024
+##
+## This is a single X.509 certificate for a public Certificate
+## Authority (CA). It was automatically extracted from Mozilla's
+## root CA list (the file `certdata.txt' in security/nss)
+## licensed under the MPL 2.0, http://mozilla.org/MPL/2.0/.
+##
+## @generated
+##
+Certificate:
+ Data:
+ Version: 3 (0x2)
+ Serial Number:
+ ee:89:34:d0:cb:80:e0:b2
+ Signature Algorithm: sha384WithRSAEncryption
+ Issuer: C=JP, O=SECOM Trust Systems Co., Ltd., CN=SECOM TLS RSA Root CA 2024
+ Validity
+ Not Before: Jan 31 05:11:55 2024 GMT
+ Not After : Jan 14 05:11:55 2049 GMT
+ Subject: C=JP, O=SECOM Trust Systems Co., Ltd., CN=SECOM TLS RSA Root CA 2024
+ Subject Public Key Info:
+ Public Key Algorithm: rsaEncryption
+ Public-Key: (4096 bit)
+ Modulus:
+ 00:e1:38:e2:cd:4c:33:c5:b2:27:ab:c4:f1:d7:58:
+ 1a:15:83:64:e5:f3:be:df:8c:bb:4f:23:38:9d:e8:
+ 74:52:02:f9:24:86:5b:24:d2:d3:cf:6c:7f:fc:bf:
+ c1:ef:5f:b9:9b:a5:fa:9c:62:2b:ed:de:25:14:90:
+ 46:b6:33:ba:ef:b8:57:3b:3f:77:ce:47:16:69:44:
+ e6:dd:56:ce:02:30:65:b7:86:16:c6:57:1c:70:11:
+ d7:b9:9e:e8:dd:0f:b8:47:ea:2b:9a:b0:5d:1d:e2:
+ 75:09:35:04:1b:cb:6d:41:b2:88:97:71:bb:39:96:
+ 1b:9c:7f:3f:a4:ff:1c:8c:fb:9b:ff:49:03:54:db:
+ 8c:ce:9e:f1:b1:54:51:38:e8:ac:42:de:77:7c:ca:
+ 09:2e:56:20:a1:e6:db:b8:ca:61:3a:a3:02:b6:39:
+ 09:ed:1e:9e:7c:43:1f:2e:9f:14:01:58:bd:65:a2:
+ d1:9f:be:84:4f:f0:89:92:4f:76:e6:77:6e:ba:e7:
+ c2:e0:16:ad:4b:89:a7:5c:59:b1:37:4b:d4:5d:bd:
+ 22:8f:d0:7c:3b:f0:fc:82:2c:50:12:c5:52:0f:81:
+ 8a:f0:55:91:3e:1d:db:55:df:fa:6f:37:64:1c:62:
+ 63:cb:6d:57:23:4c:9e:8d:5a:26:65:46:d1:ac:e7:
+ cd:bb:3d:1b:a0:f1:95:d6:9b:75:f1:f1:42:df:d2:
+ 07:40:4b:61:dc:e1:6a:6f:93:43:3b:72:fe:03:d6:
+ cd:a9:38:00:c9:48:11:98:89:f8:b9:c8:03:73:f4:
+ 62:fc:a9:b7:57:9d:6e:79:98:f2:d7:fc:a4:d2:ac:
+ 09:55:a7:40:55:5a:c2:b7:9e:a2:35:e5:ce:c8:4b:
+ f3:24:00:c6:80:34:3c:13:53:dd:6a:a7:2d:f0:2c:
+ a7:cf:fe:3b:45:e4:0c:eb:6b:c5:60:ed:3c:c1:c4:
+ 24:ae:39:97:fe:d7:ac:8a:4a:35:57:5c:b2:69:fe:
+ 84:7c:fc:d4:17:39:9a:1b:2f:71:be:40:b0:75:b9:
+ b5:e4:47:53:a2:53:a3:13:41:f6:55:be:7f:00:f0:
+ ce:c8:21:44:a2:48:98:1a:65:d3:2d:d0:14:97:4c:
+ 0a:67:82:32:8e:41:c6:cf:2d:23:86:96:97:11:71:
+ 3f:18:97:04:bc:8e:95:cc:47:21:8d:a0:4b:d3:71:
+ 09:d2:1f:69:1b:83:aa:78:83:b2:70:ab:c0:a3:70:
+ 3e:4d:b7:ad:c9:fb:2b:81:8c:87:cd:4d:1a:ef:fa:
+ 94:8c:66:ad:d4:00:2a:d6:75:65:8c:ca:4a:aa:98:
+ a7:3d:3b:1f:fd:df:47:df:d1:53:51:e2:4b:ed:3a:
+ 73:ce:35
+ Exponent: 65537 (0x10001)
+ X509v3 extensions:
+ X509v3 Subject Key Identifier:
+ 2C:EB:72:12:8E:58:77:64:35:15:56:35:01:57:07:A9:7D:0D:36:E6
+ X509v3 Authority Key Identifier:
+ 2C:EB:72:12:8E:58:77:64:35:15:56:35:01:57:07:A9:7D:0D:36:E6
+ X509v3 Key Usage: critical
+ Certificate Sign, CRL Sign
+ X509v3 Basic Constraints: critical
+ CA:TRUE
+ Signature Algorithm: sha384WithRSAEncryption
+ Signature Value:
+ 15:c2:cb:e5:b9:26:9f:69:ec:f9:b4:53:d1:fe:14:53:07:34:
+ 71:13:23:0c:40:5d:d7:25:70:95:8b:7c:9e:81:9c:8a:a1:e7:
+ 3b:86:61:3a:8f:1d:99:33:c2:a0:33:59:27:db:22:51:c0:55:
+ c7:5f:cc:d4:5b:d9:c1:2c:40:d6:73:8c:2e:13:c2:eb:95:9a:
+ a1:19:93:3d:a4:94:17:1a:61:b3:45:eb:03:25:5e:89:81:10:
+ 67:6b:e8:f8:b0:0d:4c:ef:22:1d:96:f2:f4:b0:07:c5:5c:50:
+ 93:45:a5:93:0f:81:35:57:df:51:2e:b1:73:59:f4:dc:0b:e7:
+ b5:f3:48:43:b8:d3:29:a8:e1:28:e3:af:a5:31:e5:bf:5a:f8:
+ 7b:89:f3:90:b3:e9:22:2b:43:b6:80:7c:50:0c:dc:6c:95:26:
+ af:9c:2b:38:57:b9:7c:1d:10:c9:d8:b6:b5:d2:8e:f4:06:8e:
+ d5:2f:37:f5:5b:c3:01:be:fd:15:4e:7c:41:f8:d8:d3:e6:a4:
+ c0:6e:11:85:87:d1:af:a7:80:5a:26:99:9d:51:fd:02:e4:21:
+ 0f:e9:d6:d0:95:f8:31:59:fc:d8:af:af:72:55:3e:9d:3d:00:
+ 7e:18:51:1a:63:4d:c8:31:8f:80:70:10:ac:fa:89:b5:7c:dc:
+ 6b:41:7b:7d:ce:8a:1f:30:13:45:6c:b8:6f:a4:d1:ff:26:c5:
+ d6:74:65:33:7c:d6:ce:d7:6b:ac:c1:36:b9:c1:a8:7c:2c:1d:
+ 7c:15:34:0d:db:fc:cf:1d:89:af:04:4a:0b:bb:25:20:67:4f:
+ 55:34:b2:68:e5:80:34:91:72:2d:55:89:0b:8c:c7:b6:4a:2c:
+ 73:2b:8b:1c:50:7b:fc:d4:82:bd:f4:8f:75:0d:6c:7b:17:03:
+ 15:2b:0d:b1:80:5a:7e:64:b6:01:d9:d9:e9:41:0a:ea:c2:55:
+ ba:e2:09:47:51:c2:b6:37:d0:43:b2:78:cb:4b:17:99:f9:43:
+ c4:0a:1f:51:c4:7e:16:01:c2:a2:65:6f:9c:a9:a2:8c:9a:13:
+ f6:58:17:d1:e0:87:11:ec:d3:8b:df:69:a5:d7:57:6c:f3:b8:
+ 61:57:50:99:59:61:42:24:07:02:89:d6:19:cf:a0:99:6b:c7:
+ b1:cc:7a:23:3f:d4:81:e5:11:f4:fe:fd:4a:74:70:22:b2:a8:
+ 52:8e:d2:65:fd:42:00:1c:84:38:f1:e9:4e:9f:cc:2b:4d:d1:
+ 5a:a7:86:1b:e5:a1:e0:96:63:1e:37:1f:9f:00:88:43:96:e5:
+ 95:7f:14:ce:ec:7e:1d:4c:f5:3e:48:55:51:30:b0:21:fb:0c:
+ 0a:65:fa:9b:f7:89:cc:79
+SHA1 Fingerprint=FB:97:96:7C:EF:8D:98:63:06:C0:3B:B6:11:F8:E0:13:97:A2:98:D3
+-----BEGIN CERTIFICATE-----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==
+-----END CERTIFICATE-----
diff --git a/secure/caroot/trusted/SecureSign_Root_CA12.pem b/secure/caroot/trusted/SecureSign_Root_CA12.pem
deleted file mode 100644
index 10085ef9ae93..000000000000
--- a/secure/caroot/trusted/SecureSign_Root_CA12.pem
+++ /dev/null
@@ -1,90 +0,0 @@
-##
-## SecureSign Root CA12
-##
-## This is a single X.509 certificate for a public Certificate
-## Authority (CA). It was automatically extracted from Mozilla's
-## root CA list (the file `certdata.txt' in security/nss)
-## licensed under the MPL 2.0, http://mozilla.org/MPL/2.0/.
-##
-## @generated
-##
-Certificate:
- Data:
- Version: 3 (0x2)
- Serial Number:
- 66:f9:c7:c1:af:ec:c2:51:b4:ed:53:97:e6:e6:82:c3:2b:1c:90:16
- Signature Algorithm: sha256WithRSAEncryption
- Issuer: C=JP, O=Cybertrust Japan Co., Ltd., CN=SecureSign Root CA12
- Validity
- Not Before: Apr 8 05:36:46 2020 GMT
- Not After : Apr 8 05:36:46 2040 GMT
- Subject: C=JP, O=Cybertrust Japan Co., Ltd., CN=SecureSign Root CA12
- Subject Public Key Info:
- Public Key Algorithm: rsaEncryption
- Public-Key: (2048 bit)
- Modulus:
- 00:ba:39:c1:37:7a:68:45:2b:14:b4:eb:e4:13:eb:
- 57:75:23:4d:8f:24:2d:16:e8:ae:8e:c9:7d:a4:57:
- 3b:2a:76:25:33:83:6c:ea:32:8a:94:9b:4e:3c:96:
- e4:fd:51:bf:99:c9:93:7e:bf:f9:ad:a7:b2:48:2b:
- 07:1c:27:f5:4c:bc:70:12:77:a4:85:54:b5:fd:90:
- 7a:e4:a3:e4:51:58:03:cd:10:79:79:ee:6b:93:1f:
- 64:8e:6b:64:ab:a3:13:e3:71:fe:7d:ab:9c:dd:27:
- 53:37:b3:aa:18:c2:59:26:ec:5b:1f:d2:e6:65:7c:
- ef:93:bd:d8:58:5c:0b:c0:e3:65:6f:3c:c7:ca:59:
- e3:fe:6e:5f:ac:83:be:fd:5d:25:4e:2a:29:3b:d6:
- 0b:ab:17:32:78:a4:e1:3e:94:46:be:62:6e:9b:de:
- 46:a8:b1:16:e7:85:6e:f4:08:40:45:11:a0:9e:54:
- 44:84:f7:d8:36:ce:f5:50:47:dc:2c:30:9b:ee:c0:
- f5:96:d2:fe:09:86:c7:06:59:ae:4f:ae:8e:11:98:
- 7b:f3:0b:52:aa:62:26:aa:21:df:8e:25:33:79:97:
- 16:49:8d:f5:3e:d5:47:9f:37:31:49:33:72:05:4d:
- 0c:b6:55:8c:f1:57:8f:8a:87:d1:ad:c5:11:12:39:
- a0:ad
- Exponent: 65537 (0x10001)
- X509v3 extensions:
- X509v3 Basic Constraints: critical
- CA:TRUE
- X509v3 Key Usage: critical
- Certificate Sign, CRL Sign
- X509v3 Subject Key Identifier:
- 57:34:F3:74:CF:04:4B:D5:25:E6:F1:40:B6:2C:4C:D9:2D:E9:A0:AD
- Signature Algorithm: sha256WithRSAEncryption
- Signature Value:
- 3e:bb:db:17:16:d2:f2:14:01:20:2c:38:83:4b:ad:be:ca:85:
- 7a:9a:b6:9b:6b:a6:e1:fc:a5:3a:ac:ad:b4:28:3a:af:d7:01:
- 83:49:2b:63:a2:dd:9a:64:0e:98:5c:6f:dd:8e:bb:8a:54:22:
- 2d:4a:13:f3:ae:40:43:db:4f:91:b7:86:1a:ec:00:b4:41:81:
- a4:4f:fa:6a:8b:88:b3:76:08:72:2a:49:40:c3:d3:c3:85:89:
- 98:10:a5:9d:6f:19:b7:bb:cf:7a:65:55:db:37:eb:3c:8a:72:
- 32:97:1e:9a:29:3e:ad:8d:e6:a3:1b:6d:f5:75:1a:e6:b0:68:
- b9:5b:a2:ee:69:47:27:35:a1:86:99:80:f3:33:4b:e1:6b:a4:
- 26:c3:ef:74:59:6c:7a:a2:64:b6:1e:44:c3:50:e0:0f:39:3d:
- a9:33:f1:a5:f3:d2:bd:62:84:ac:8e:1c:a9:cd:5a:bd:37:3b:
- 6e:0a:22:b4:f4:15:e7:91:58:c5:3a:44:d3:95:28:d9:c0:65:
- e9:72:ca:d0:0f:bd:1f:b3:15:d9:a9:e3:a4:47:09:9e:e0:cb:
- 37:fb:fd:bd:97:d5:be:18:1a:69:a2:39:81:d9:1a:f5:ab:7f:
- c8:e3:e2:67:0b:9d:f4:0c:ea:54:df:d2:b2:af:b1:22:f1:20:
- df:bc:44:1c
-SHA1 Fingerprint=7A:22:1E:3D:DE:1B:06:AC:9E:C8:47:70:16:8E:3C:E5:F7:6B:06:F4
------BEGIN CERTIFICATE-----
-MIIDcjCCAlqgAwIBAgIUZvnHwa/swlG07VOX5uaCwysckBYwDQYJKoZIhvcNAQEL
-BQAwUTELMAkGA1UEBhMCSlAxIzAhBgNVBAoTGkN5YmVydHJ1c3QgSmFwYW4gQ28u
-LCBMdGQuMR0wGwYDVQQDExRTZWN1cmVTaWduIFJvb3QgQ0ExMjAeFw0yMDA0MDgw
-NTM2NDZaFw00MDA0MDgwNTM2NDZaMFExCzAJBgNVBAYTAkpQMSMwIQYDVQQKExpD
-eWJlcnRydXN0IEphcGFuIENvLiwgTHRkLjEdMBsGA1UEAxMUU2VjdXJlU2lnbiBS
-b290IENBMTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6OcE3emhF
-KxS06+QT61d1I02PJC0W6K6OyX2kVzsqdiUzg2zqMoqUm048luT9Ub+ZyZN+v/mt
-p7JIKwccJ/VMvHASd6SFVLX9kHrko+RRWAPNEHl57muTH2SOa2SroxPjcf59q5zd
-J1M3s6oYwlkm7Fsf0uZlfO+TvdhYXAvA42VvPMfKWeP+bl+sg779XSVOKik71gur
-FzJ4pOE+lEa+Ym6b3kaosRbnhW70CEBFEaCeVESE99g2zvVQR9wsMJvuwPWW0v4J
-hscGWa5Pro4RmHvzC1KqYiaqId+OJTN5lxZJjfU+1UefNzFJM3IFTQy2VYzxV4+K
-h9GtxRESOaCtAgMBAAGjQjBAMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQD
-AgEGMB0GA1UdDgQWBBRXNPN0zwRL1SXm8UC2LEzZLemgrTANBgkqhkiG9w0BAQsF
-AAOCAQEAPrvbFxbS8hQBICw4g0utvsqFepq2m2um4fylOqyttCg6r9cBg0krY6Ld
-mmQOmFxv3Y67ilQiLUoT865AQ9tPkbeGGuwAtEGBpE/6aouIs3YIcipJQMPTw4WJ
-mBClnW8Zt7vPemVV2zfrPIpyMpcemik+rY3moxtt9XUa5rBouVui7mlHJzWhhpmA
-8zNL4WukJsPvdFlseqJkth5Ew1DgDzk9qTPxpfPSvWKErI4cqc1avTc7bgoitPQV
-55FYxTpE05Uo2cBl6XLK0A+9H7MV2anjpEcJnuDLN/v9vZfVvhgaaaI5gdka9at/
-yOPiZwud9AzqVN/Ssq+xIvEg37xEHA==
------END CERTIFICATE-----
diff --git a/secure/caroot/trusted/Telia_EC_TLS_Root_CA_v3.pem b/secure/caroot/trusted/Telia_EC_TLS_Root_CA_v3.pem
new file mode 100644
index 000000000000..b917b71841ed
--- /dev/null
+++ b/secure/caroot/trusted/Telia_EC_TLS_Root_CA_v3.pem
@@ -0,0 +1,66 @@
+##
+## Telia EC TLS Root CA v3
+##
+## This is a single X.509 certificate for a public Certificate
+## Authority (CA). It was automatically extracted from Mozilla's
+## root CA list (the file `certdata.txt' in security/nss)
+## licensed under the MPL 2.0, http://mozilla.org/MPL/2.0/.
+##
+## @generated
+##
+Certificate:
+ Data:
+ Version: 3 (0x2)
+ Serial Number:
+ 01:8b:d2:22:54:63:4d:04:8b:6c:e5:47:1f:d2:b5
+ Signature Algorithm: ecdsa-with-SHA384
+ Issuer: C=SE, O=Telia Company AB, CN=Telia EC TLS Root CA v3
+ Validity
+ Not Before: Nov 15 08:55:26 2023 GMT
+ Not After : May 23 11:00:00 2048 GMT
+ Subject: C=SE, O=Telia Company AB, CN=Telia EC TLS Root CA v3
+ Subject Public Key Info:
+ Public Key Algorithm: id-ecPublicKey
+ Public-Key: (384 bit)
+ pub:
+ 04:c1:c8:96:15:43:2d:b9:85:29:4a:56:d2:22:b8:
+ 76:9a:f2:4f:a7:a6:60:e7:92:df:52:4f:c1:69:d6:
+ 3e:69:16:46:b0:24:4d:b3:d7:e3:4b:10:7c:72:3d:
+ 9a:94:7b:45:b9:2d:bb:79:e0:83:a5:be:04:14:97:
+ 49:e7:21:b4:c0:a7:06:65:97:8f:f1:1a:56:59:95:
+ e5:c6:35:8c:3d:87:a1:37:e1:05:0d:c0:69:ca:42:
+ 34:c2:c9:2b:83:69:65
+ ASN1 OID: secp384r1
+ NIST CURVE: P-384
+ X509v3 extensions:
+ X509v3 Authority Key Identifier:
+ D4:64:E8:43:88:3A:73:2F:D0:1A:71:82:36:0B:5E:85:DE:C7:DE:43
+ X509v3 Subject Key Identifier:
+ D4:64:E8:43:88:3A:73:2F:D0:1A:71:82:36:0B:5E:85:DE:C7:DE:43
+ X509v3 Key Usage: critical
+ Certificate Sign, CRL Sign
+ X509v3 Basic Constraints: critical
+ CA:TRUE
+ Signature Algorithm: ecdsa-with-SHA384
+ Signature Value:
+ 30:66:02:31:00:97:01:47:52:ff:d6:db:27:c0:35:25:86:86:
+ 7f:f6:d6:b7:fb:3b:4d:ad:28:b7:95:25:9e:8f:0e:8d:23:58:
+ 45:64:08:95:2e:2d:55:69:5d:bd:30:15:03:b8:5e:38:58:02:
+ 31:00:af:2a:bf:3e:67:64:67:f8:e0:6b:e5:41:f3:96:00:4e:
+ 6e:96:9d:d4:bb:b0:35:34:5c:74:d8:14:27:12:16:69:d7:24:
+ 8b:e5:01:2c:48:b5:fc:05:11:29:5e:66:77:63
+SHA1 Fingerprint=B4:D6:07:C2:A5:95:BC:5B:F4:67:4D:C9:DC:6F:6F:0A:00:7A:A5:35
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
diff --git a/secure/caroot/trusted/Telia_RSA_TLS_Root_CA_v3.pem b/secure/caroot/trusted/Telia_RSA_TLS_Root_CA_v3.pem
new file mode 100644
index 000000000000..b890f308a736
--- /dev/null
+++ b/secure/caroot/trusted/Telia_RSA_TLS_Root_CA_v3.pem
@@ -0,0 +1,134 @@
+##
+## Telia RSA TLS Root CA v3
+##
+## This is a single X.509 certificate for a public Certificate
+## Authority (CA). It was automatically extracted from Mozilla's
+## root CA list (the file `certdata.txt' in security/nss)
+## licensed under the MPL 2.0, http://mozilla.org/MPL/2.0/.
+##
+## @generated
+##
+Certificate:
+ Data:
+ Version: 3 (0x2)
+ Serial Number:
+ 01:8b:d2:50:ab:42:55:2c:47:5a:bd:a1:dc:1a:c5
+ Signature Algorithm: sha384WithRSAEncryption
+ Issuer: C=SE, O=Telia Company AB, CN=Telia RSA TLS Root CA v3
+ Validity
+ Not Before: Nov 15 09:47:42 2023 GMT
+ Not After : May 23 11:00:00 2048 GMT
+ Subject: C=SE, O=Telia Company AB, CN=Telia RSA TLS Root CA v3
+ Subject Public Key Info:
+ Public Key Algorithm: rsaEncryption
+ Public-Key: (4096 bit)
+ Modulus:
+ 00:b1:5f:3d:28:6d:7d:84:27:f8:4b:51:6f:93:c0:
+ f7:4f:20:c4:46:19:9c:bf:1f:05:ec:a9:9b:e1:60:
+ 13:c7:78:a3:7b:58:9d:dc:a1:f1:44:4d:13:2a:67:
+ 0d:09:b0:10:e7:b6:ef:1c:51:18:6b:88:51:da:5d:
+ b4:56:35:5a:74:4c:6a:39:6f:b6:95:df:7d:31:b1:
+ 22:3b:e8:d1:54:ec:fe:05:bc:4b:c4:99:e6:1b:00:
+ aa:23:e0:5f:b9:38:e3:55:17:83:c6:cc:63:42:f8:
+ e0:06:c0:a5:68:ef:ec:9b:98:bb:d2:79:59:71:61:
+ 91:b4:89:2f:58:32:b7:34:d9:13:e5:1b:70:5d:cf:
+ ce:f0:d4:c5:56:96:d4:a9:3e:9c:46:32:23:de:89:
+ 40:6e:54:7e:95:17:f8:15:fc:b9:a3:e4:3d:7d:a6:
+ e3:62:7f:59:f5:2e:22:b6:bb:84:95:c1:05:7f:d2:
+ e3:93:b7:f0:75:3c:9c:4f:fa:ef:25:6f:70:fc:1d:
+ c6:d9:ad:eb:d1:ff:f3:5c:d3:95:ae:e2:01:72:a1:
+ 3a:a6:44:a8:b2:90:02:53:66:c6:e3:67:d8:2a:b6:
+ cc:fc:65:a7:a7:bb:be:a7:d1:6b:cf:88:da:37:0a:
+ 5b:e1:81:ee:11:e4:bc:06:b6:ad:35:c3:fc:5f:ad:
+ a3:5c:8b:ef:28:7c:65:b0:c0:c9:0a:76:f8:53:c2:
+ 73:14:e2:ec:53:a9:a8:85:56:39:f0:17:59:ae:f8:
+ b4:1a:4f:54:3a:ea:a6:82:81:ba:76:c9:07:a2:4b:
+ 23:65:39:4a:eb:50:ff:22:7c:e6:12:80:35:c8:06:
+ 09:14:35:72:b2:34:71:0d:43:ae:f5:c0:30:00:d6:
+ ea:9a:ae:fb:58:81:4b:e8:1a:67:66:05:6a:3e:d3:
+ 1f:1b:ac:0d:f0:1a:d3:29:d6:a9:be:29:55:b1:84:
+ 79:f4:11:60:22:c0:15:04:cc:6b:1a:1f:96:f9:07:
+ 2f:98:96:9f:52:90:12:be:50:2b:2a:f5:46:d8:52:
+ 38:8b:a3:e2:2e:34:81:4f:4f:ba:17:a1:10:2e:b6:
+ 2a:79:f3:90:17:f7:c1:34:45:db:fa:78:d4:43:44:
+ 94:56:b0:2a:b4:7e:18:f8:e8:c2:23:f6:b8:fc:92:
+ 50:a6:9c:5e:7a:66:5c:43:44:94:4a:18:22:23:90:
+ 0c:e7:11:ce:e6:2c:9a:52:b4:e3:60:7e:33:c5:4c:
+ fd:8f:ed:45:11:b0:c7:ff:1a:6c:b6:bd:60:5c:1c:
+ a4:b2:9b:a9:fa:14:53:68:97:1b:03:e5:1b:a4:9a:
+ ad:59:99:dd:00:f7:5d:26:6b:7a:60:94:3e:75:4d:
+ e9:0e:ef
+ Exponent: 65537 (0x10001)
+ X509v3 extensions:
+ X509v3 Authority Key Identifier:
+ B0:C7:A9:D2:DD:B2:28:56:73:04:94:8C:14:5C:48:6F:37:52:92:A8
+ X509v3 Subject Key Identifier:
+ B0:C7:A9:D2:DD:B2:28:56:73:04:94:8C:14:5C:48:6F:37:52:92:A8
+ X509v3 Key Usage: critical
+ Certificate Sign, CRL Sign
+ X509v3 Basic Constraints: critical
+ CA:TRUE
+ Signature Algorithm: sha384WithRSAEncryption
+ Signature Value:
+ 5d:63:31:6c:34:60:d1:93:b6:d1:fc:08:11:2a:af:b9:eb:7e:
+ d8:b8:e5:be:c3:ab:a1:a6:84:b4:56:72:8c:52:9c:87:0b:09:
+ 2e:f3:a8:44:be:a8:af:6a:43:ed:7e:69:66:e1:b1:70:b7:ef:
+ ac:6f:ff:0e:5e:c5:81:aa:d7:db:5c:c6:81:34:34:d9:97:c5:
+ d1:30:9b:8b:58:e5:b6:26:b6:ca:91:1c:e0:1b:47:81:51:cb:
+ ec:69:d1:b5:ae:b8:5b:99:9a:98:bc:55:da:01:93:bb:a3:84:
+ dd:39:9c:f1:84:10:79:18:e0:16:59:70:77:21:ea:da:34:fe:
+ 09:eb:7c:f2:a3:d9:fc:1a:ac:37:b0:90:46:e3:87:a6:e6:1a:
+ 18:8c:17:df:3f:e9:e9:89:bc:ac:96:7b:25:46:2e:0b:eb:11:
+ ec:09:88:ff:3d:a6:fe:3a:5a:9b:30:20:7a:bf:eb:13:08:b7:
+ 84:22:e9:11:57:3a:11:f5:a4:38:e6:91:0a:ed:9d:50:06:74:
+ ac:6c:02:90:b6:cb:34:24:a0:fd:77:f9:97:d7:8d:c7:d7:17:
+ 8f:8c:f8:53:5e:5b:f9:24:29:21:ad:c8:fe:49:28:73:d0:ff:
+ 7e:10:7a:16:7b:a9:bd:97:25:04:38:85:67:d2:ba:7e:c9:52:
+ 56:35:b9:b2:0e:fd:d5:93:01:71:1c:2d:40:a5:24:2c:81:28:
+ a6:8c:64:38:c2:da:fa:71:29:a8:ad:d6:31:91:5f:91:a3:c9:
+ 4e:20:88:51:92:c5:cf:c8:39:36:ee:05:ba:22:35:17:0a:46:
+ 4a:a7:11:63:90:bd:e3:88:14:9c:f1:29:31:9f:00:96:b5:78:
+ 3c:c7:03:70:74:55:4d:04:62:c2:0a:e2:67:b2:77:98:5e:32:
+ 4d:ab:34:6a:51:ca:06:c3:3b:2f:17:74:22:fd:99:c7:50:db:
+ c8:49:d7:af:96:02:00:5c:be:16:be:bc:5a:aa:fa:1a:d3:5c:
+ 01:f8:60:9f:b3:9e:d1:4c:61:38:4e:f0:06:84:a3:4a:ba:cf:
+ 0a:de:14:53:d4:14:a9:8a:0c:cc:21:1c:d2:c6:d0:0e:ae:a3:
+ cd:ea:3f:ff:41:29:96:f5:ff:09:72:77:2b:8b:88:f6:8a:14:
+ a9:56:b1:54:d0:d7:4d:90:c8:59:78:02:a2:75:31:4f:b3:10:
+ 95:16:e5:b8:02:78:b3:ee:3a:a2:c3:9b:16:b6:36:d0:ae:55:
+ b4:df:98:b3:20:45:38:b1:8c:10:a0:2d:4d:c7:44:af:cb:e9:
+ 8c:4d:16:a2:e7:42:ea:15:0f:80:d7:f1:ea:eb:11:c7:0c:dc:
+ 7b:08:8f:37:77:6d:c4:af
+SHA1 Fingerprint=B5:2E:88:4E:40:C1:11:FB:50:C7:E2:4F:AC:18:2B:BD:68:15:D2:34
+-----BEGIN CERTIFICATE-----
+MIIFgjCCA2qgAwIBAgIPAYvSUKtCVSxHWr2h3BrFMA0GCSqGSIb3DQEBDAUAMEsx
+CzAJBgNVBAYTAlNFMRkwFwYDVQQKDBBUZWxpYSBDb21wYW55IEFCMSEwHwYDVQQD
+DBhUZWxpYSBSU0EgVExTIFJvb3QgQ0EgdjMwHhcNMjMxMTE1MDk0NzQyWhcNNDgw
+NTIzMTEwMDAwWjBLMQswCQYDVQQGEwJTRTEZMBcGA1UECgwQVGVsaWEgQ29tcGFu
+eSBBQjEhMB8GA1UEAwwYVGVsaWEgUlNBIFRMUyBSb290IENBIHYzMIICIjANBgkq
+hkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAsV89KG19hCf4S1Fvk8D3TyDERhmcvx8F
+7Kmb4WATx3ije1id3KHxRE0TKmcNCbAQ57bvHFEYa4hR2l20VjVadExqOW+2ld99
+MbEiO+jRVOz+BbxLxJnmGwCqI+BfuTjjVReDxsxjQvjgBsClaO/sm5i70nlZcWGR
+tIkvWDK3NNkT5RtwXc/O8NTFVpbUqT6cRjIj3olAblR+lRf4Ffy5o+Q9fabjYn9Z
+9S4itruElcEFf9Ljk7fwdTycT/rvJW9w/B3G2a3r0f/zXNOVruIBcqE6pkSospAC
+U2bG42fYKrbM/GWnp7u+p9Frz4jaNwpb4YHuEeS8BratNcP8X62jXIvvKHxlsMDJ
+Cnb4U8JzFOLsU6mohVY58BdZrvi0Gk9UOuqmgoG6dskHoksjZTlK61D/InzmEoA1
+yAYJFDVysjRxDUOu9cAwANbqmq77WIFL6BpnZgVqPtMfG6wN8BrTKdapvilVsYR5
+9BFgIsAVBMxrGh+W+QcvmJafUpASvlArKvVG2FI4i6PiLjSBT0+6F6EQLrYqefOQ
+F/fBNEXb+njUQ0SUVrAqtH4Y+OjCI/a4/JJQppxeemZcQ0SUShgiI5AM5xHO5iya
+UrTjYH4zxUz9j+1FEbDH/xpstr1gXBykspup+hRTaJcbA+UbpJqtWZndAPddJmt6
+YJQ+dU3pDu8CAwEAAaNjMGEwHwYDVR0jBBgwFoAUsMep0t2yKFZzBJSMFFxIbzdS
+kqgwHQYDVR0OBBYEFLDHqdLdsihWcwSUjBRcSG83UpKoMA4GA1UdDwEB/wQEAwIB
+BjAPBgNVHRMBAf8EBTADAQH/MA0GCSqGSIb3DQEBDAUAA4ICAQBdYzFsNGDRk7bR
+/AgRKq+5637YuOW+w6uhpoS0VnKMUpyHCwku86hEvqivakPtfmlm4bFwt++sb/8O
+XsWBqtfbXMaBNDTZl8XRMJuLWOW2JrbKkRzgG0eBUcvsadG1rrhbmZqYvFXaAZO7
+o4TdOZzxhBB5GOAWWXB3IeraNP4J63zyo9n8Gqw3sJBG44em5hoYjBffP+npibys
+lnslRi4L6xHsCYj/Pab+OlqbMCB6v+sTCLeEIukRVzoR9aQ45pEK7Z1QBnSsbAKQ
+tss0JKD9d/mX143H1xePjPhTXlv5JCkhrcj+SShz0P9+EHoWe6m9lyUEOIVn0rp+
+yVJWNbmyDv3VkwFxHC1ApSQsgSimjGQ4wtr6cSmordYxkV+Ro8lOIIhRksXPyDk2
+7gW6IjUXCkZKpxFjkL3jiBSc8SkxnwCWtXg8xwNwdFVNBGLCCuJnsneYXjJNqzRq
+UcoGwzsvF3Qi/ZnHUNvISdevlgIAXL4Wvrxaqvoa01wB+GCfs57RTGE4TvAGhKNK
+us8K3hRT1BSpigzMIRzSxtAOrqPN6j//QSmW9f8Jcncri4j2ihSpVrFU0NdNkMhZ
+eAKidTFPsxCVFuW4Aniz7jqiw5sWtjbQrlW035izIEU4sYwQoC1Nx0Svy+mMTRai
+50LqFQ+A1/Hq6xHHDNx7CI83d23Erw==
+-----END CERTIFICATE-----
diff --git a/secure/caroot/trusted/ePKI_Root_Certification_Authority.pem b/secure/caroot/trusted/ePKI_Root_Certification_Authority.pem
deleted file mode 100644
index 5c2747c1b6d6..000000000000
--- a/secure/caroot/trusted/ePKI_Root_Certification_Authority.pem
+++ /dev/null
@@ -1,134 +0,0 @@
-##
-## ePKI Root Certification Authority
-##
-## This is a single X.509 certificate for a public Certificate
-## Authority (CA). It was automatically extracted from Mozilla's
-## root CA list (the file `certdata.txt' in security/nss)
-## licensed under the MPL 2.0, http://mozilla.org/MPL/2.0/.
-##
-## @generated
-##
-Certificate:
- Data:
- Version: 3 (0x2)
- Serial Number:
- 15:c8:bd:65:47:5c:af:b8:97:00:5e:e4:06:d2:bc:9d
- Signature Algorithm: sha1WithRSAEncryption
- Issuer: C=TW, O=Chunghwa Telecom Co., Ltd., OU=ePKI Root Certification Authority
- Validity
- Not Before: Dec 20 02:31:27 2004 GMT
- Not After : Dec 20 02:31:27 2034 GMT
- Subject: C=TW, O=Chunghwa Telecom Co., Ltd., OU=ePKI Root Certification Authority
- Subject Public Key Info:
- Public Key Algorithm: rsaEncryption
- Public-Key: (4096 bit)
- Modulus:
- 00:e1:25:0f:ee:8d:db:88:33:75:67:cd:ad:1f:7d:
- 3a:4e:6d:9d:d3:2f:14:f3:63:74:cb:01:21:6a:37:
- ea:84:50:07:4b:26:5b:09:43:6c:21:9e:6a:c8:d5:
- 03:f5:60:69:8f:cc:f0:22:e4:1f:e7:f7:6a:22:31:
- b7:2c:15:f2:e0:fe:00:6a:43:ff:87:65:c6:b5:1a:
- c1:a7:4c:6d:22:70:21:8a:31:f2:97:74:89:09:12:
- 26:1c:9e:ca:d9:12:a2:95:3c:da:e9:67:bf:08:a0:
- 64:e3:d6:42:b7:45:ef:97:f4:f6:f5:d7:b5:4a:15:
- 02:58:7d:98:58:4b:60:bc:cd:d7:0d:9a:13:33:53:
- d1:61:f9:7a:d5:d7:78:b3:9a:33:f7:00:86:ce:1d:
- 4d:94:38:af:a8:ec:78:51:70:8a:5c:10:83:51:21:
- f7:11:3d:34:86:5e:e5:48:cd:97:81:82:35:4c:19:
- ec:65:f6:6b:c5:05:a1:ee:47:13:d6:b3:21:27:94:
- 10:0a:d9:24:3b:ba:be:44:13:46:30:3f:97:3c:d8:
- d7:d7:6a:ee:3b:38:e3:2b:d4:97:0e:b9:1b:e7:07:
- 49:7f:37:2a:f9:77:78:cf:54:ed:5b:46:9d:a3:80:
- 0e:91:43:c1:d6:5b:5f:14:ba:9f:a6:8d:24:47:40:
- 59:bf:72:38:b2:36:6c:37:ff:99:d1:5d:0e:59:0a:
- ab:69:f7:c0:b2:04:45:7a:54:00:ae:be:53:f6:b5:
- e7:e1:f8:3c:a3:31:d2:a9:fe:21:52:64:c5:a6:67:
- f0:75:07:06:94:14:81:55:c6:27:e4:01:8f:17:c1:
- 6a:71:d7:be:4b:fb:94:58:7d:7e:11:33:b1:42:f7:
- 62:6c:18:d6:cf:09:68:3e:7f:6c:f6:1e:8f:62:ad:
- a5:63:db:09:a7:1f:22:42:41:1e:6f:99:8a:3e:d7:
- f9:3f:40:7a:79:b0:a5:01:92:d2:9d:3d:08:15:a5:
- 10:01:2d:b3:32:76:a8:95:0d:b3:7a:9a:fb:07:10:
- 78:11:6f:e1:8f:c7:ba:0f:25:1a:74:2a:e5:1c:98:
- 41:99:df:21:87:e8:95:06:6a:0a:b3:6a:47:76:65:
- f6:3a:cf:8f:62:17:19:7b:0a:28:cd:1a:d2:83:1e:
- 21:c7:2c:bf:be:ff:61:68:b7:67:1b:bb:78:4d:8d:
- ce:67:e5:e4:c1:8e:b7:23:66:e2:9d:90:75:34:98:
- a9:36:2b:8a:9a:94:b9:9d:ec:cc:8a:b1:f8:25:89:
- 5c:5a:b6:2f:8c:1f:6d:79:24:a7:52:68:c3:84:35:
- e2:66:8d:63:0e:25:4d:d5:19:b2:e6:79:37:a7:22:
- 9d:54:31
- Exponent: 65537 (0x10001)
- X509v3 extensions:
- X509v3 Subject Key Identifier:
- 1E:0C:F7:B6:67:F2:E1:92:26:09:45:C0:55:39:2E:77:3F:42:4A:A2
- X509v3 Basic Constraints:
- CA:TRUE
- setCext-hashedRoot:
- 0/0-...0...+......0...g*.....E...
-V|.[x....S.....
- Signature Algorithm: sha1WithRSAEncryption
- Signature Value:
- 09:b3:83:53:59:01:3e:95:49:b9:f1:81:ba:f9:76:20:23:b5:
- 27:60:74:d4:6a:99:34:5e:6c:00:53:d9:9f:f2:a6:b1:24:07:
- 44:6a:2a:c6:a5:8e:78:12:e8:47:d9:58:1b:13:2a:5e:79:9b:
- 9f:0a:2a:67:a6:25:3f:06:69:56:73:c3:8a:66:48:fb:29:81:
- 57:74:06:ca:9c:ea:28:e8:38:67:26:2b:f1:d5:b5:3f:65:93:
- f8:36:5d:8e:8d:8d:40:20:87:19:ea:ef:27:c0:3d:b4:39:0f:
- 25:7b:68:50:74:55:9c:0c:59:7d:5a:3d:41:94:25:52:08:e0:
- 47:2c:15:31:19:d5:bf:07:55:c6:bb:12:b5:97:f4:5f:83:85:
- ba:71:c1:d9:6c:81:11:76:0a:0a:b0:bf:82:97:f7:ea:3d:fa:
- fa:ec:2d:a9:28:94:3b:56:dd:d2:51:2e:ae:c0:bd:08:15:8c:
- 77:52:34:96:d6:9b:ac:d3:1d:8e:61:0f:35:7b:9b:ae:39:69:
- 0b:62:60:40:20:36:8f:af:fb:36:ee:2d:08:4a:1d:b8:bf:9b:
- 5c:f8:ea:a5:1b:a0:73:a6:d8:f8:6e:e0:33:04:5f:68:aa:27:
- 87:ed:d9:c1:90:9c:ed:bd:e3:6a:35:af:63:df:ab:18:d9:ba:
- e6:e9:4a:ea:50:8a:0f:61:93:1e:e2:2d:19:e2:30:94:35:92:
- 5d:0e:b6:07:af:19:80:8f:47:90:51:4b:2e:4d:dd:85:e2:d2:
- 0a:52:0a:17:9a:fc:1a:b0:50:02:e5:01:a3:63:37:21:4c:44:
- c4:9b:51:99:11:0e:73:9c:06:8f:54:2e:a7:28:5e:44:39:87:
- 56:2d:37:bd:85:44:94:e1:0c:4b:2c:9c:c3:92:85:34:61:cb:
- 0f:b8:9b:4a:43:52:fe:34:3a:7d:b8:e9:29:dc:76:a9:c8:30:
- f8:14:71:80:c6:1e:36:48:74:22:41:5c:87:82:e8:18:71:8b:
- 41:89:44:e7:7e:58:5b:a8:b8:8d:13:e9:a7:6c:c3:47:ed:b3:
- 1a:9d:62:ae:8d:82:ea:94:9e:dd:59:10:c3:ad:dd:e2:4d:e3:
- 31:d5:c7:ec:e8:f2:b0:fe:92:1e:16:0a:1a:fc:d9:f3:f8:27:
- b6:c9:be:1d:b4:6c:64:90:7f:f4:e4:c4:5b:d7:37:ae:42:0e:
- dd:a4:1a:6f:7c:88:54:c5:16:6e:e1:7a:68:2e:f8:3a:bf:0d:
- a4:3c:89:3b:78:a7:4e:63:83:04:21:08:67:8d:f2:82:49:d0:
- 5b:fd:b1:cd:0f:83:84:d4:3e:20:85:f7:4a:3d:2b:9c:fd:2a:
- 0a:09:4d:ea:81:f8:11:9c
-SHA1 Fingerprint=67:65:0D:F1:7E:8E:7E:5B:82:40:A4:F4:56:4B:CF:E2:3D:69:C6:F0
------BEGIN CERTIFICATE-----
-MIIFsDCCA5igAwIBAgIQFci9ZUdcr7iXAF7kBtK8nTANBgkqhkiG9w0BAQUFADBe
-MQswCQYDVQQGEwJUVzEjMCEGA1UECgwaQ2h1bmdod2EgVGVsZWNvbSBDby4sIEx0
-ZC4xKjAoBgNVBAsMIWVQS0kgUm9vdCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTAe
-Fw0wNDEyMjAwMjMxMjdaFw0zNDEyMjAwMjMxMjdaMF4xCzAJBgNVBAYTAlRXMSMw
-IQYDVQQKDBpDaHVuZ2h3YSBUZWxlY29tIENvLiwgTHRkLjEqMCgGA1UECwwhZVBL
-SSBSb290IENlcnRpZmljYXRpb24gQXV0aG9yaXR5MIICIjANBgkqhkiG9w0BAQEF
-AAOCAg8AMIICCgKCAgEA4SUP7o3biDN1Z82tH306Tm2d0y8U82N0ywEhajfqhFAH
-SyZbCUNsIZ5qyNUD9WBpj8zwIuQf5/dqIjG3LBXy4P4AakP/h2XGtRrBp0xtInAh
-ijHyl3SJCRImHJ7K2RKilTza6We/CKBk49ZCt0Xvl/T29de1ShUCWH2YWEtgvM3X
-DZoTM1PRYfl61dd4s5oz9wCGzh1NlDivqOx4UXCKXBCDUSH3ET00hl7lSM2XgYI1
-TBnsZfZrxQWh7kcT1rMhJ5QQCtkkO7q+RBNGMD+XPNjX12ruOzjjK9SXDrkb5wdJ
-fzcq+Xd4z1TtW0ado4AOkUPB1ltfFLqfpo0kR0BZv3I4sjZsN/+Z0V0OWQqraffA
-sgRFelQArr5T9rXn4fg8ozHSqf4hUmTFpmfwdQcGlBSBVcYn5AGPF8Fqcde+S/uU
-WH1+ETOxQvdibBjWzwloPn9s9h6PYq2lY9sJpx8iQkEeb5mKPtf5P0B6ebClAZLS
-nT0IFaUQAS2zMnaolQ2zepr7BxB4EW/hj8e6DyUadCrlHJhBmd8hh+iVBmoKs2pH
-dmX2Os+PYhcZewoozRrSgx4hxyy/vv9haLdnG7t4TY3OZ+XkwY63I2binZB1NJip
-NiuKmpS5nezMirH4JYlcWrYvjB9teSSnUmjDhDXiZo1jDiVN1Rmy5nk3pyKdVDEC
-AwEAAaNqMGgwHQYDVR0OBBYEFB4M97Zn8uGSJglFwFU5Lnc/QkqiMAwGA1UdEwQF
-MAMBAf8wOQYEZyoHAAQxMC8wLQIBADAJBgUrDgMCGgUAMAcGBWcqAwAABBRFsMLH
-ClZ87lt4DJX5GFPBphzYEDANBgkqhkiG9w0BAQUFAAOCAgEACbODU1kBPpVJufGB
-uvl2ICO1J2B01GqZNF5sAFPZn/KmsSQHRGoqxqWOeBLoR9lYGxMqXnmbnwoqZ6Yl
-PwZpVnPDimZI+ymBV3QGypzqKOg4ZyYr8dW1P2WT+DZdjo2NQCCHGervJ8A9tDkP
-JXtoUHRVnAxZfVo9QZQlUgjgRywVMRnVvwdVxrsStZf0X4OFunHB2WyBEXYKCrC/
-gpf36j36+uwtqSiUO1bd0lEursC9CBWMd1I0ltabrNMdjmEPNXubrjlpC2JgQCA2
-j6/7Nu4tCEoduL+bXPjqpRugc6bY+G7gMwRfaKonh+3ZwZCc7b3jajWvY9+rGNm6
-5ulK6lCKD2GTHuItGeIwlDWSXQ62B68ZgI9HkFFLLk3dheLSClIKF5r8GrBQAuUB
-o2M3IUxExJtRmREOc5wGj1QupyheRDmHVi03vYVElOEMSyycw5KFNGHLD7ibSkNS
-/jQ6fbjpKdx2qcgw+BRxgMYeNkh0IkFch4LoGHGLQYlE535YW6i4jRPpp2zDR+2z
-Gp1iro2C6pSe3VkQw63d4k3jMdXH7OjysP6SHhYKGvzZ8/gntsm+HbRsZJB/9OTE
-W9c3rkIO3aQab3yIVMUWbuF6aC74Or8NpDyJO3inTmODBCEIZ43ygknQW/2xzQ+D
-hNQ+IIX3Sj0rnP0qCglN6oH4EZw=
------END CERTIFICATE-----
diff --git a/secure/caroot/trusted/emSign_ECC_Root_CA_-_C3.pem b/secure/caroot/trusted/emSign_ECC_Root_CA_-_C3.pem
deleted file mode 100644
index 511aa4e7b7d9..000000000000
--- a/secure/caroot/trusted/emSign_ECC_Root_CA_-_C3.pem
+++ /dev/null
@@ -1,64 +0,0 @@
-##
-## emSign ECC Root CA - C3
-##
-## This is a single X.509 certificate for a public Certificate
-## Authority (CA). It was automatically extracted from Mozilla's
-## root CA list (the file `certdata.txt' in security/nss)
-## licensed under the MPL 2.0, http://mozilla.org/MPL/2.0/.
-##
-## @generated
-##
-Certificate:
- Data:
- Version: 3 (0x2)
- Serial Number:
- 7b:71:b6:82:56:b8:12:7c:9c:a8
- Signature Algorithm: ecdsa-with-SHA384
- Issuer: C=US, OU=emSign PKI, O=eMudhra Inc, CN=emSign ECC Root CA - C3
- Validity
- Not Before: Feb 18 18:30:00 2018 GMT
- Not After : Feb 18 18:30:00 2043 GMT
- Subject: C=US, OU=emSign PKI, O=eMudhra Inc, CN=emSign ECC Root CA - C3
- Subject Public Key Info:
- Public Key Algorithm: id-ecPublicKey
- Public-Key: (384 bit)
- pub:
- 04:fd:a5:61:ae:7b:26:10:1d:e9:b7:22:30:ae:06:
- f4:81:b3:b1:42:71:95:39:bc:d3:52:e3:af:af:f9:
- f2:97:35:92:36:46:0e:87:95:8d:b9:39:5a:e9:bb:
- df:d0:fe:c8:07:41:3c:bb:55:6f:83:a3:6a:fb:62:
- b0:81:89:02:70:7d:48:c5:4a:e3:e9:22:54:22:4d:
- 93:bb:42:0c:af:77:9c:23:a6:7d:d7:61:11:ce:65:
- c7:f8:7f:fe:f5:f2:a9
- ASN1 OID: secp384r1
- NIST CURVE: P-384
- X509v3 extensions:
- X509v3 Subject Key Identifier:
- FB:5A:48:D0:80:20:40:F2:A8:E9:00:07:69:19:77:A7:E6:C3:F4:CF
- X509v3 Key Usage: critical
- Certificate Sign, CRL Sign
- X509v3 Basic Constraints: critical
- CA:TRUE
- Signature Algorithm: ecdsa-with-SHA384
- Signature Value:
- 30:65:02:31:00:b4:d8:2f:02:89:fd:b6:4c:62:ba:43:4e:13:
- 84:72:b5:ae:dd:1c:de:d6:b5:dc:56:8f:58:40:5a:2d:de:20:
- 4c:22:83:ca:93:a8:7e:ee:12:40:c7:d6:87:4f:f8:df:85:02:
- 30:1c:14:64:e4:7c:96:83:11:9c:b0:d1:5a:61:4b:a6:0f:49:
- d3:00:fc:a1:fc:e4:a5:ff:7f:ad:d7:30:d0:c7:77:7f:be:81:
- 07:55:30:50:20:14:f5:57:38:0a:a8:31:51
-SHA1 Fingerprint=B6:AF:43:C2:9B:81:53:7D:F6:EF:6B:C3:1F:1F:60:15:0C:EE:48:66
------BEGIN CERTIFICATE-----
-MIICKzCCAbGgAwIBAgIKe3G2gla4EnycqDAKBggqhkjOPQQDAzBaMQswCQYDVQQG
-EwJVUzETMBEGA1UECxMKZW1TaWduIFBLSTEUMBIGA1UEChMLZU11ZGhyYSBJbmMx
-IDAeBgNVBAMTF2VtU2lnbiBFQ0MgUm9vdCBDQSAtIEMzMB4XDTE4MDIxODE4MzAw
-MFoXDTQzMDIxODE4MzAwMFowWjELMAkGA1UEBhMCVVMxEzARBgNVBAsTCmVtU2ln
-biBQS0kxFDASBgNVBAoTC2VNdWRocmEgSW5jMSAwHgYDVQQDExdlbVNpZ24gRUND
-IFJvb3QgQ0EgLSBDMzB2MBAGByqGSM49AgEGBSuBBAAiA2IABP2lYa57JhAd6bci
-MK4G9IGzsUJxlTm801Ljr6/58pc1kjZGDoeVjbk5Wum739D+yAdBPLtVb4Ojavti
-sIGJAnB9SMVK4+kiVCJNk7tCDK93nCOmfddhEc5lx/h//vXyqaNCMEAwHQYDVR0O
-BBYEFPtaSNCAIEDyqOkAB2kZd6fmw/TPMA4GA1UdDwEB/wQEAwIBBjAPBgNVHRMB
-Af8EBTADAQH/MAoGCCqGSM49BAMDA2gAMGUCMQC02C8Cif22TGK6Q04ThHK1rt0c
-3ta13FaPWEBaLd4gTCKDypOofu4SQMfWh0/434UCMBwUZOR8loMRnLDRWmFLpg9J
-0wD8ofzkpf9/rdcw0Md3f76BB1UwUCAU9Vc4CqgxUQ==
------END CERTIFICATE-----
diff --git a/secure/caroot/trusted/emSign_Root_CA_-_C1.pem b/secure/caroot/trusted/emSign_Root_CA_-_C1.pem
deleted file mode 100644
index cbcf39649fd4..000000000000
--- a/secure/caroot/trusted/emSign_Root_CA_-_C1.pem
+++ /dev/null
@@ -1,90 +0,0 @@
-##
-## emSign Root CA - C1
-##
-## This is a single X.509 certificate for a public Certificate
-## Authority (CA). It was automatically extracted from Mozilla's
-## root CA list (the file `certdata.txt' in security/nss)
-## licensed under the MPL 2.0, http://mozilla.org/MPL/2.0/.
-##
-## @generated
-##
-Certificate:
- Data:
- Version: 3 (0x2)
- Serial Number:
- ae:cf:00:ba:c4:cf:32:f8:43:b2
- Signature Algorithm: sha256WithRSAEncryption
- Issuer: C=US, OU=emSign PKI, O=eMudhra Inc, CN=emSign Root CA - C1
- Validity
- Not Before: Feb 18 18:30:00 2018 GMT
- Not After : Feb 18 18:30:00 2043 GMT
- Subject: C=US, OU=emSign PKI, O=eMudhra Inc, CN=emSign Root CA - C1
- Subject Public Key Info:
- Public Key Algorithm: rsaEncryption
- Public-Key: (2048 bit)
- Modulus:
- 00:cf:eb:a9:b9:f1:99:05:cc:d8:28:21:4a:f3:73:
- 34:51:84:56:10:f5:a0:4f:2c:12:e3:fa:13:9a:27:
- d0:cf:f9:79:1a:74:5f:1d:79:39:fc:5b:f8:70:8e:
- e0:92:52:f7:e4:25:f9:54:83:d9:1d:d3:c8:5a:85:
- 3f:5e:c7:b6:07:ee:3e:c0:ce:9a:af:ac:56:42:2a:
- 39:25:70:d6:bf:b5:7b:36:ad:ac:f6:73:dc:cd:d7:
- 1d:8a:83:a5:fb:2b:90:15:37:6b:1c:26:47:dc:3b:
- 29:56:93:6a:b3:c1:6a:3a:9d:3d:f5:c1:97:38:58:
- 05:8b:1c:11:e3:e4:b4:b8:5d:85:1d:83:fe:78:5f:
- 0b:45:68:18:48:a5:46:73:34:3b:fe:0f:c8:76:bb:
- c7:18:f3:05:d1:86:f3:85:ed:e7:b9:d9:32:ad:55:
- 88:ce:a6:b6:91:b0:4f:ac:7e:15:23:96:f6:3f:f0:
- 20:34:16:de:0a:c6:c4:04:45:79:7f:a7:fd:be:d2:
- a9:a5:af:9c:c5:23:2a:f7:3c:21:6c:bd:af:8f:4e:
- c5:3a:b2:f3:34:12:fc:df:80:1a:49:a4:d4:a9:95:
- f7:9e:89:5e:a2:89:ac:94:cb:a8:68:9b:af:8a:65:
- 27:cd:89:ee:dd:8c:b5:6b:29:70:43:a0:69:0b:e4:
- b9:0f
- Exponent: 65537 (0x10001)
- X509v3 extensions:
- X509v3 Subject Key Identifier:
- FE:A1:E0:70:1E:2A:03:39:52:5A:42:BE:5C:91:85:7A:18:AA:4D:B5
- X509v3 Key Usage: critical
- Certificate Sign, CRL Sign
- X509v3 Basic Constraints: critical
- CA:TRUE
- Signature Algorithm: sha256WithRSAEncryption
- Signature Value:
- c2:4a:56:fa:15:21:7b:28:a2:e9:e5:1d:fb:f8:2d:c4:39:96:
- 41:4c:3b:27:2c:c4:6c:18:15:80:c6:ac:af:47:59:2f:26:0b:
- e3:36:b0:ef:3b:fe:43:97:49:32:99:12:15:5b:df:11:29:ff:
- ab:53:f8:bb:c1:78:0f:ac:9c:53:af:57:bd:68:8c:3d:69:33:
- f0:a3:a0:23:63:3b:64:67:22:44:ad:d5:71:cb:56:2a:78:92:
- a3:4f:12:31:36:36:e2:de:fe:00:c4:a3:60:0f:27:ad:a0:b0:
- 8a:b5:36:7a:52:a1:bd:27:f4:20:27:62:e8:4d:94:24:13:e4:
- 0a:04:e9:3c:ab:2e:c8:43:09:4a:c6:61:04:e5:49:34:7e:d3:
- c4:c8:f5:0f:c0:aa:e9:ba:54:5e:f3:63:2b:4f:4f:50:d4:fe:
- b9:7b:99:8c:3d:c0:2e:bc:02:2b:d3:c4:40:e4:8a:07:31:1e:
- 9b:ce:26:99:13:fb:11:ea:9a:22:0c:11:19:c7:5e:1b:81:50:
- 30:c8:96:12:6e:e7:cb:41:7f:91:3b:a2:47:b7:54:80:1b:dc:
- 00:cc:9a:90:ea:c3:c3:50:06:62:0c:30:c0:15:48:a7:a8:59:
- 7c:e1:ae:22:a2:e2:0a:7a:0f:fa:62:ab:52:4c:e1:f1:df:ca:
- be:83:0d:42
-SHA1 Fingerprint=E7:2E:F1:DF:FC:B2:09:28:CF:5D:D4:D5:67:37:B1:51:CB:86:4F:01
------BEGIN CERTIFICATE-----
-MIIDczCCAlugAwIBAgILAK7PALrEzzL4Q7IwDQYJKoZIhvcNAQELBQAwVjELMAkG
-A1UEBhMCVVMxEzARBgNVBAsTCmVtU2lnbiBQS0kxFDASBgNVBAoTC2VNdWRocmEg
-SW5jMRwwGgYDVQQDExNlbVNpZ24gUm9vdCBDQSAtIEMxMB4XDTE4MDIxODE4MzAw
-MFoXDTQzMDIxODE4MzAwMFowVjELMAkGA1UEBhMCVVMxEzARBgNVBAsTCmVtU2ln
-biBQS0kxFDASBgNVBAoTC2VNdWRocmEgSW5jMRwwGgYDVQQDExNlbVNpZ24gUm9v
-dCBDQSAtIEMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz+upufGZ
-BczYKCFK83M0UYRWEPWgTywS4/oTmifQz/l5GnRfHXk5/Fv4cI7gklL35CX5VIPZ
-HdPIWoU/Xse2B+4+wM6ar6xWQio5JXDWv7V7Nq2s9nPczdcdioOl+yuQFTdrHCZH
-3DspVpNqs8FqOp099cGXOFgFixwR4+S0uF2FHYP+eF8LRWgYSKVGczQ7/g/IdrvH
-GPMF0Ybzhe3nudkyrVWIzqa2kbBPrH4VI5b2P/AgNBbeCsbEBEV5f6f9vtKppa+c
-xSMq9zwhbL2vj07FOrLzNBL834AaSaTUqZX3noleoomslMuoaJuvimUnzYnu3Yy1
-aylwQ6BpC+S5DwIDAQABo0IwQDAdBgNVHQ4EFgQU/qHgcB4qAzlSWkK+XJGFehiq
-TbUwDgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wDQYJKoZIhvcNAQEL
-BQADggEBAMJKVvoVIXsoounlHfv4LcQ5lkFMOycsxGwYFYDGrK9HWS8mC+M2sO87
-/kOXSTKZEhVb3xEp/6tT+LvBeA+snFOvV71ojD1pM/CjoCNjO2RnIkSt1XHLVip4
-kqNPEjE2NuLe/gDEo2APJ62gsIq1NnpSob0n9CAnYuhNlCQT5AoE6TyrLshDCUrG
-YQTlSTR+08TI9Q/Aqum6VF7zYytPT1DU/rl7mYw9wC68AivTxEDkigcxHpvOJpkT
-+xHqmiIMERnHXhuBUDDIlhJu58tBf5E7oke3VIAb3ADMmpDqw8NQBmIMMMAVSKeo
-WXzhriKi4gp6D/piq1JM4fHfyr6DDUI=
------END CERTIFICATE-----
diff --git a/secure/caroot/trusted/Atos_TrustedRoot_2011.pem b/secure/caroot/untrusted/Atos_TrustedRoot_2011.pem
similarity index 100%
rename from secure/caroot/trusted/Atos_TrustedRoot_2011.pem
rename to secure/caroot/untrusted/Atos_TrustedRoot_2011.pem
diff --git a/secure/caroot/untrusted/Entrust_Root_Certification_Authority.pem b/secure/caroot/untrusted/Entrust_Root_Certification_Authority.pem
deleted file mode 100644
index 1a605e5a1208..000000000000
--- a/secure/caroot/untrusted/Entrust_Root_Certification_Authority.pem
+++ /dev/null
@@ -1,101 +0,0 @@
-##
-## Entrust Root Certification Authority
-##
-## This is a single X.509 certificate for a public Certificate
-## Authority (CA). It was automatically extracted from Mozilla's
-## root CA list (the file `certdata.txt' in security/nss)
-## licensed under the MPL 2.0, http://mozilla.org/MPL/2.0/.
-##
-## @generated
-##
-Certificate:
- Data:
- Version: 3 (0x2)
- Serial Number: 1164660820 (0x456b5054)
- Signature Algorithm: sha1WithRSAEncryption
- Issuer: C=US, O=Entrust, Inc., OU=www.entrust.net/CPS is incorporated by reference, OU=(c) 2006 Entrust, Inc., CN=Entrust Root Certification Authority
- Validity
- Not Before: Nov 27 20:23:42 2006 GMT
- Not After : Nov 27 20:53:42 2026 GMT
- Subject: C=US, O=Entrust, Inc., OU=www.entrust.net/CPS is incorporated by reference, OU=(c) 2006 Entrust, Inc., CN=Entrust Root Certification Authority
- Subject Public Key Info:
- Public Key Algorithm: rsaEncryption
- Public-Key: (2048 bit)
- Modulus:
- 00:b6:95:b6:43:42:fa:c6:6d:2a:6f:48:df:94:4c:
- 39:57:05:ee:c3:79:11:41:68:36:ed:ec:fe:9a:01:
- 8f:a1:38:28:fc:f7:10:46:66:2e:4d:1e:1a:b1:1a:
- 4e:c6:d1:c0:95:88:b0:c9:ff:31:8b:33:03:db:b7:
- 83:7b:3e:20:84:5e:ed:b2:56:28:a7:f8:e0:b9:40:
- 71:37:c5:cb:47:0e:97:2a:68:c0:22:95:62:15:db:
- 47:d9:f5:d0:2b:ff:82:4b:c9:ad:3e:de:4c:db:90:
- 80:50:3f:09:8a:84:00:ec:30:0a:3d:18:cd:fb:fd:
- 2a:59:9a:23:95:17:2c:45:9e:1f:6e:43:79:6d:0c:
- 5c:98:fe:48:a7:c5:23:47:5c:5e:fd:6e:e7:1e:b4:
- f6:68:45:d1:86:83:5b:a2:8a:8d:b1:e3:29:80:fe:
- 25:71:88:ad:be:bc:8f:ac:52:96:4b:aa:51:8d:e4:
- 13:31:19:e8:4e:4d:9f:db:ac:b3:6a:d5:bc:39:54:
- 71:ca:7a:7a:7f:90:dd:7d:1d:80:d9:81:bb:59:26:
- c2:11:fe:e6:93:e2:f7:80:e4:65:fb:34:37:0e:29:
- 80:70:4d:af:38:86:2e:9e:7f:57:af:9e:17:ae:eb:
- 1c:cb:28:21:5f:b6:1c:d8:e7:a2:04:22:f9:d3:da:
- d8:cb
- Exponent: 65537 (0x10001)
- X509v3 extensions:
- X509v3 Key Usage: critical
- Certificate Sign, CRL Sign
- X509v3 Basic Constraints: critical
- CA:TRUE
- X509v3 Private Key Usage Period:
- Not Before: Nov 27 20:23:42 2006 GMT, Not After: Nov 27 20:53:42 2026 GMT
- X509v3 Authority Key Identifier:
- 68:90:E4:67:A4:A6:53:80:C7:86:66:A4:F1:F7:4B:43:FB:84:BD:6D
- X509v3 Subject Key Identifier:
- 68:90:E4:67:A4:A6:53:80:C7:86:66:A4:F1:F7:4B:43:FB:84:BD:6D
- 1.2.840.113533.7.65.0:
- 0...V7.1:4.0....
- Signature Algorithm: sha1WithRSAEncryption
- Signature Value:
- 93:d4:30:b0:d7:03:20:2a:d0:f9:63:e8:91:0c:05:20:a9:5f:
- 19:ca:7b:72:4e:d4:b1:db:d0:96:fb:54:5a:19:2c:0c:08:f7:
- b2:bc:85:a8:9d:7f:6d:3b:52:b3:2a:db:e7:d4:84:8c:63:f6:
- 0f:cb:26:01:91:50:6c:f4:5f:14:e2:93:74:c0:13:9e:30:3a:
- 50:e3:b4:60:c5:1c:f0:22:44:8d:71:47:ac:c8:1a:c9:e9:9b:
- 9a:00:60:13:ff:70:7e:5f:11:4d:49:1b:b3:15:52:7b:c9:54:
- da:bf:9d:95:af:6b:9a:d8:9e:e9:f1:e4:43:8d:e2:11:44:3a:
- bf:af:bd:83:42:73:52:8b:aa:bb:a7:29:cf:f5:64:1c:0a:4d:
- d1:bc:aa:ac:9f:2a:d0:ff:7f:7f:da:7d:ea:b1:ed:30:25:c1:
- 84:da:34:d2:5b:78:83:56:ec:9c:36:c3:26:e2:11:f6:67:49:
- 1d:92:ab:8c:fb:eb:ff:7a:ee:85:4a:a7:50:80:f0:a7:5c:4a:
- 94:2e:5f:05:99:3c:52:41:e0:cd:b4:63:cf:01:43:ba:9c:83:
- dc:8f:60:3b:f3:5a:b4:b4:7b:ae:da:0b:90:38:75:ef:81:1d:
- 66:d2:f7:57:70:36:b3:bf:fc:28:af:71:25:85:5b:13:fe:1e:
- 7f:5a:b4:3c
-SHA1 Fingerprint=B3:1E:B1:B7:40:E3:6C:84:02:DA:DC:37:D4:4D:F5:D4:67:49:52:F9
------BEGIN CERTIFICATE-----
-MIIEkTCCA3mgAwIBAgIERWtQVDANBgkqhkiG9w0BAQUFADCBsDELMAkGA1UEBhMC
-VVMxFjAUBgNVBAoTDUVudHJ1c3QsIEluYy4xOTA3BgNVBAsTMHd3dy5lbnRydXN0
-Lm5ldC9DUFMgaXMgaW5jb3Jwb3JhdGVkIGJ5IHJlZmVyZW5jZTEfMB0GA1UECxMW
-KGMpIDIwMDYgRW50cnVzdCwgSW5jLjEtMCsGA1UEAxMkRW50cnVzdCBSb290IENl
-cnRpZmljYXRpb24gQXV0aG9yaXR5MB4XDTA2MTEyNzIwMjM0MloXDTI2MTEyNzIw
-NTM0MlowgbAxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1FbnRydXN0LCBJbmMuMTkw
-NwYDVQQLEzB3d3cuZW50cnVzdC5uZXQvQ1BTIGlzIGluY29ycG9yYXRlZCBieSBy
-ZWZlcmVuY2UxHzAdBgNVBAsTFihjKSAyMDA2IEVudHJ1c3QsIEluYy4xLTArBgNV
-BAMTJEVudHJ1c3QgUm9vdCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTCCASIwDQYJ
-KoZIhvcNAQEBBQADggEPADCCAQoCggEBALaVtkNC+sZtKm9I35RMOVcF7sN5EUFo
-Nu3s/poBj6E4KPz3EEZmLk0eGrEaTsbRwJWIsMn/MYszA9u3g3s+IIRe7bJWKKf4
-4LlAcTfFy0cOlypowCKVYhXbR9n10Cv/gkvJrT7eTNuQgFA/CYqEAOwwCj0Yzfv9
-KlmaI5UXLEWeH25DeW0MXJj+SKfFI0dcXv1u5x609mhF0YaDW6KKjbHjKYD+JXGI
-rb68j6xSlkuqUY3kEzEZ6E5Nn9uss2rVvDlUccp6en+Q3X0dgNmBu1kmwhH+5pPi
-94DkZfs0Nw4pgHBNrziGLp5/V6+eF67rHMsoIV+2HNjnogQi+dPa2MsCAwEAAaOB
-sDCBrTAOBgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zArBgNVHRAEJDAi
-gA8yMDA2MTEyNzIwMjM0MlqBDzIwMjYxMTI3MjA1MzQyWjAfBgNVHSMEGDAWgBRo
-kORnpKZTgMeGZqTx90tD+4S9bTAdBgNVHQ4EFgQUaJDkZ6SmU4DHhmak8fdLQ/uE
-vW0wHQYJKoZIhvZ9B0EABBAwDhsIVjcuMTo0LjADAgSQMA0GCSqGSIb3DQEBBQUA
-A4IBAQCT1DCw1wMgKtD5Y+iRDAUgqV8ZyntyTtSx29CW+1RaGSwMCPeyvIWonX9t
-O1KzKtvn1ISMY/YPyyYBkVBs9F8U4pN0wBOeMDpQ47RgxRzwIkSNcUesyBrJ6Zua
-AGAT/3B+XxFNSRuzFVJ7yVTav52Vr2ua2J7p8eRDjeIRRDq/r72DQnNSi6q7pynP
-9WQcCk3RvKqsnyrQ/39/2n3qse0wJcGE2jTSW3iDVuycNsMm4hH2Z0kdkquM++v/
*** 498 LINES SKIPPED ***