From nobody Tue Oct 20 19:26:52 2026 X-Original-To: dev-commits-src-main@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4j8MqJ5lTrz6wFct for ; Tue, 20 Oct 2026 19:26:52 +0000 (UTC) (envelope-from git@FreeBSD.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange x25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (No client certificate requested) by mx1.freebsd.org (Postfix) with ESMTPS id 4j8MqJ58Qzz3FTm for ; Tue, 20 Oct 2026 19:26:52 +0000 (UTC) (envelope-from git@FreeBSD.org) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1792524412; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=hCkcWPHplSVgKjXuSMqdLC/4w0fhTEfRY5NSRExhSmQ=; b=yUDriLCJNK5999OiCRhOQyB1Qdqhru8Kqbmzrx7SkmR+oAJPWpNQzXQpQxlnJneIp1q7XW +E7R9nCigV30C80T0pay9wSxFyWWUWjj+iVQZBqbvi09Lj8aQO1UKitVuANYutGxlvBCr9 TES0Acm+TVKAo8ICVtQKeOlrSNQ/DHqddfscxvtRhf4xKlsrgJ9+eRd8yIZzNtbbcfLdvd ShmcafzOrwMalvWknADkD1rFNI/Ebgj+VplJMxE12QhtegT58gAxNCQjfyKWjoJrJ7IveM +RsBLuuCXp2kCcl+zPxj4qxLIqNmHv2WAJAzfFUuZhab0W2SowjmVFvchmSZjA== ARC-Seal: i=1; a=rsa-sha256; d=freebsd.org; s=dkim; cv=none; t=1792524412; b=vJuAwPa+pDxEUoLE+40F3g1brtcHbTS5JLdEh5iJul7DMAUfoDLFUs7QG8BVDqYKT1qqhs 6WuZDh96RdAS7r9UP88n6fIQV7A4NFEsh+rIdNgMY4AZJFUIKqqS9jr2p/WkihJNpwnpDE 8Kmfr9WbORxI5FDtm7UAxzFEUvaRBZ7g+3EYFgpfizqxEukgrlK45+nvYrRXH+CGcdhOkp OFOr43Z6nb/F0bTdyFbupntiPrxzl6m+DBTNHQR9EtL3586VDPGhRuCLDXLqqb21T8CtNQ mtQcc00EliWS/arwpfF7gts3cxmZSyg6qg4pfoimtHrmC1+BX+gHtY7U5VxRow== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1792524412; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=hCkcWPHplSVgKjXuSMqdLC/4w0fhTEfRY5NSRExhSmQ=; b=EPI2anm4UjeuMEyZvzyWvFSikjoGe/C+zQx+Xujs6xA09u7MqIG1Gxd3K3iU0bSVf13Pza fcxEk1ouey8u8+Hy0kYaXAR15G6XoamPGi88cqHcMDYGZDGRS4oVTz3/Wo18tpXiZWDTjO 71+TRj5Rgceoz/KmNnZSOyuFdCcSXg535K+qsnyrSsPoGHRuej8R+8GD6xXJUeZ4m/z8WU xq+ywlhSvpACwV489ls6QqpfbkawdSZXPLZklRDShGryNGW0lzoyEH5xQZMvz7HBUcLZwO Dn/zWwsNytQKMW4YMKxCFMsU38jE33dx0WpqogvXkwHgfL1z0e/HRh7iYLHH+A== ARC-Authentication-Results: i=1; mx1.freebsd.org; none Received: from gitrepo.freebsd.org (gitrepo.freebsd.org [IPv6:2610:1c1:1:6068::e6a:5]) by mxrelay.nyi.freebsd.org (Postfix) with ESMTP id 4j8MqJ4pYZzLJC for ; Tue, 20 Oct 2026 19:26:52 +0000 (UTC) (envelope-from git@FreeBSD.org) Received: from git (uid 1279) (envelope-from git@FreeBSD.org) id 3b664 by gitrepo.freebsd.org (DragonFly Mail Agent v0.13+ on gitrepo.freebsd.org); Tue, 20 Oct 2026 19:26:52 +0000 To: src-committers@FreeBSD.org, dev-commits-src-all@FreeBSD.org, dev-commits-src-main@FreeBSD.org From: Dag-Erling=?utf-8?Q? Sm=C3=B8rg?=rav Subject: git: 82af7f44ebef - main - caroot: Regenerate List-Archive: https://lists.freebsd.org/archives/dev-commits-src-main X-BeenThere: dev-commits-src-main@freebsd.org Sender: owner-dev-commits-src-main@FreeBSD.org List-Id: Commit messages for the main branch of the src repository List-Post: List-Help: List-Subscribe: List-Unsubscribe: List-Owner: Precedence: list MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 8bit X-Git-Committer: des X-Git-Repository: src X-Git-Refname: refs/heads/main X-Git-Reftype: branch X-Git-Commit: 82af7f44ebefbe46cd635f63db300a066de48ee1 Auto-Submitted: auto-generated Date: Tue, 20 Oct 2026 19:26:52 +0000 Message-Id: <6ad7c07c.3b664.32078447@gitrepo.freebsd.org> The branch main has been updated by des: URL: https://cgit.FreeBSD.org/src/commit/?id=82af7f44ebefbe46cd635f63db300a066de48ee1 commit 82af7f44ebefbe46cd635f63db300a066de48ee1 Author: Dag-Erling Smørgrav AuthorDate: 2026-10-20 19:24:31 +0000 Commit: Dag-Erling Smørgrav CommitDate: 2026-10-20 19:24:31 +0000 caroot: Regenerate Regenerate using certificate data from NSS 3.131.1. Upstream dropped emSign_ECC_Root_CA_-_G3.pem entirely; we deliberately move it to untrusted instead to block its reintroduction through e.g. an outdated copy of security/ca_root_nss. Reviewed by: markj Differential Revision: https://reviews.freebsd.org/D60906 --- secure/caroot/Makefile | 2 +- .../caroot/trusted/SECOM_TLS_ECC_Root_CA_2024.pem | 67 ++++++++++ .../caroot/trusted/SECOM_TLS_RSA_Root_CA_2024.pem | 134 ++++++++++++++++++++ secure/caroot/trusted/SecureSign_Root_CA12.pem | 90 -------------- secure/caroot/trusted/Telia_EC_TLS_Root_CA_v3.pem | 66 ++++++++++ secure/caroot/trusted/Telia_RSA_TLS_Root_CA_v3.pem | 134 ++++++++++++++++++++ .../trusted/ePKI_Root_Certification_Authority.pem | 134 -------------------- secure/caroot/trusted/emSign_ECC_Root_CA_-_C3.pem | 64 ---------- secure/caroot/trusted/emSign_Root_CA_-_C1.pem | 90 -------------- .../Atos_TrustedRoot_2011.pem | 0 .../Entrust_Root_Certification_Authority.pem | 101 --------------- .../untrusted/SECOM_SMIME_RSA_Root_CA_2024.pem | 135 +++++++++++++++++++++ secure/caroot/untrusted/SecureSign_Root_CA16.pem | 132 ++++++++++++++++++++ .../caroot/untrusted/Telia_EC_Email_Root_CA_v3.pem | 66 ++++++++++ .../untrusted/Telia_RSA_Email_Root_CA_v3.pem | 134 ++++++++++++++++++++ .../emSign_ECC_Root_CA_-_G3.pem | 0 16 files changed, 869 insertions(+), 480 deletions(-) diff --git a/secure/caroot/Makefile b/secure/caroot/Makefile index fa4119034dd9..4afa81ad1384 100644 --- a/secure/caroot/Makefile +++ b/secure/caroot/Makefile @@ -7,7 +7,7 @@ SUBDIR+= untrusted # Set this to an upstream hash or tag # https://hg-edge.mozilla.org/projects/nss/tags -HGVER = NSS_3_123_1_RTM +HGVER = NSS_3_131_1_RTM # To be used by secteam@ to update the trusted certificates fetchcerts: .PHONY diff --git a/secure/caroot/trusted/SECOM_TLS_ECC_Root_CA_2024.pem b/secure/caroot/trusted/SECOM_TLS_ECC_Root_CA_2024.pem new file mode 100644 index 000000000000..9284e8dfd79a --- /dev/null +++ b/secure/caroot/trusted/SECOM_TLS_ECC_Root_CA_2024.pem @@ -0,0 +1,67 @@ +## +## SECOM TLS ECC Root CA 2024 +## +## This is a single X.509 certificate for a public Certificate +## Authority (CA). It was automatically extracted from Mozilla's +## root CA list (the file `certdata.txt' in security/nss) +## licensed under the MPL 2.0, http://mozilla.org/MPL/2.0/. +## +## @generated +## +Certificate: + Data: + Version: 3 (0x2) + Serial Number: + 81:7a:2c:ef:8f:23:7a:44 + Signature Algorithm: ecdsa-with-SHA384 + Issuer: C=JP, O=SECOM Trust Systems Co., Ltd., CN=SECOM TLS ECC Root CA 2024 + Validity + Not Before: Jan 31 05:52:34 2024 GMT + Not After : Jan 14 05:52:34 2049 GMT + Subject: C=JP, O=SECOM Trust Systems Co., Ltd., CN=SECOM TLS ECC Root CA 2024 + Subject Public Key Info: + Public Key Algorithm: id-ecPublicKey + Public-Key: (384 bit) + pub: + 04:ec:dc:c5:32:db:bd:77:34:17:48:d0:b5:d9:f6: + 9b:93:4f:86:94:2e:5f:8a:70:77:47:b5:da:66:89: + d1:51:dd:b4:68:58:96:39:bb:6e:34:10:8b:51:94: + 9f:93:a4:17:00:4e:79:06:31:17:b1:74:3f:34:6f: + 32:52:a8:9c:5e:3b:2e:f6:4b:03:2b:72:59:06:00: + b0:2c:e5:61:eb:e9:f0:25:74:ef:b2:8f:dd:12:3f: + c6:51:81:f9:98:17:68 + ASN1 OID: secp384r1 + NIST CURVE: P-384 + X509v3 extensions: + X509v3 Subject Key Identifier: + 3B:76:11:7B:29:74:E2:4E:06:4C:56:82:40:D0:21:2F:7A:B3:C9:D5 + X509v3 Authority Key Identifier: + 3B:76:11:7B:29:74:E2:4E:06:4C:56:82:40:D0:21:2F:7A:B3:C9:D5 + X509v3 Key Usage: critical + Certificate Sign, CRL Sign + X509v3 Basic Constraints: critical + CA:TRUE + Signature Algorithm: ecdsa-with-SHA384 + Signature Value: + 30:66:02:31:00:dd:e2:6f:c7:e2:d6:93:18:b4:03:e3:32:29: + 41:e5:ee:7f:1f:eb:79:08:bd:31:3c:bf:9c:67:9a:13:4d:9b: + 92:0a:3a:40:9f:5b:fb:17:f5:40:af:c6:c5:c5:05:c0:a3:02: + 31:00:ab:01:54:ed:40:08:5a:7b:b2:4c:33:3e:f7:6f:d4:45: + 18:e5:af:3d:ed:61:8b:4f:89:5b:f9:b8:f1:14:05:b2:97:cc: + 03:71:92:5d:c0:66:7f:a4:01:f1:b7:50:09:d6 +SHA1 Fingerprint=7A:1F:22:2D:72:B2:C3:19:87:44:DB:61:69:E8:A6:4B:D7:0D:44:0E +-----BEGIN CERTIFICATE----- +MIICTDCCAdGgAwIBAgIJAIF6LO+PI3pEMAoGCCqGSM49BAMDMFoxCzAJBgNVBAYT +AkpQMSYwJAYDVQQKEx1TRUNPTSBUcnVzdCBTeXN0ZW1zIENvLiwgTHRkLjEjMCEG +A1UEAxMaU0VDT00gVExTIEVDQyBSb290IENBIDIwMjQwHhcNMjQwMTMxMDU1MjM0 +WhcNNDkwMTE0MDU1MjM0WjBaMQswCQYDVQQGEwJKUDEmMCQGA1UEChMdU0VDT00g +VHJ1c3QgU3lzdGVtcyBDby4sIEx0ZC4xIzAhBgNVBAMTGlNFQ09NIFRMUyBFQ0Mg +Um9vdCBDQSAyMDI0MHYwEAYHKoZIzj0CAQYFK4EEACIDYgAE7NzFMtu9dzQXSNC1 +2fabk0+GlC5finB3R7XaZonRUd20aFiWObtuNBCLUZSfk6QXAE55BjEXsXQ/NG8y +UqicXjsu9ksDK3JZBgCwLOVh6+nwJXTvso/dEj/GUYH5mBdoo2MwYTAdBgNVHQ4E +FgQUO3YReyl04k4GTFaCQNAhL3qzydUwHwYDVR0jBBgwFoAUO3YReyl04k4GTFaC +QNAhL3qzydUwDgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wCgYIKoZI +zj0EAwMDaQAwZgIxAN3ib8fi1pMYtAPjMilB5e5/H+t5CL0xPL+cZ5oTTZuSCjpA +n1v7F/VAr8bFxQXAowIxAKsBVO1ACFp7skwzPvdv1EUY5a897WGLT4lb+bjxFAWy +l8wDcZJdwGZ/pAHxt1AJ1g== +-----END CERTIFICATE----- diff --git a/secure/caroot/trusted/SECOM_TLS_RSA_Root_CA_2024.pem b/secure/caroot/trusted/SECOM_TLS_RSA_Root_CA_2024.pem new file mode 100644 index 000000000000..906bef53a2d4 --- /dev/null +++ b/secure/caroot/trusted/SECOM_TLS_RSA_Root_CA_2024.pem @@ -0,0 +1,134 @@ +## +## SECOM TLS RSA Root CA 2024 +## +## This is a single X.509 certificate for a public Certificate +## Authority (CA). It was automatically extracted from Mozilla's +## root CA list (the file `certdata.txt' in security/nss) +## licensed under the MPL 2.0, http://mozilla.org/MPL/2.0/. +## +## @generated +## +Certificate: + Data: + Version: 3 (0x2) + Serial Number: + ee:89:34:d0:cb:80:e0:b2 + Signature Algorithm: sha384WithRSAEncryption + Issuer: C=JP, O=SECOM Trust Systems Co., Ltd., CN=SECOM TLS RSA Root CA 2024 + Validity + Not Before: Jan 31 05:11:55 2024 GMT + Not After : Jan 14 05:11:55 2049 GMT + Subject: C=JP, O=SECOM Trust Systems Co., Ltd., CN=SECOM TLS RSA Root CA 2024 + Subject Public Key Info: + Public Key Algorithm: rsaEncryption + Public-Key: (4096 bit) + Modulus: + 00:e1:38:e2:cd:4c:33:c5:b2:27:ab:c4:f1:d7:58: + 1a:15:83:64:e5:f3:be:df:8c:bb:4f:23:38:9d:e8: + 74:52:02:f9:24:86:5b:24:d2:d3:cf:6c:7f:fc:bf: + c1:ef:5f:b9:9b:a5:fa:9c:62:2b:ed:de:25:14:90: + 46:b6:33:ba:ef:b8:57:3b:3f:77:ce:47:16:69:44: + e6:dd:56:ce:02:30:65:b7:86:16:c6:57:1c:70:11: + d7:b9:9e:e8:dd:0f:b8:47:ea:2b:9a:b0:5d:1d:e2: + 75:09:35:04:1b:cb:6d:41:b2:88:97:71:bb:39:96: + 1b:9c:7f:3f:a4:ff:1c:8c:fb:9b:ff:49:03:54:db: + 8c:ce:9e:f1:b1:54:51:38:e8:ac:42:de:77:7c:ca: + 09:2e:56:20:a1:e6:db:b8:ca:61:3a:a3:02:b6:39: + 09:ed:1e:9e:7c:43:1f:2e:9f:14:01:58:bd:65:a2: + d1:9f:be:84:4f:f0:89:92:4f:76:e6:77:6e:ba:e7: + c2:e0:16:ad:4b:89:a7:5c:59:b1:37:4b:d4:5d:bd: + 22:8f:d0:7c:3b:f0:fc:82:2c:50:12:c5:52:0f:81: + 8a:f0:55:91:3e:1d:db:55:df:fa:6f:37:64:1c:62: + 63:cb:6d:57:23:4c:9e:8d:5a:26:65:46:d1:ac:e7: + cd:bb:3d:1b:a0:f1:95:d6:9b:75:f1:f1:42:df:d2: + 07:40:4b:61:dc:e1:6a:6f:93:43:3b:72:fe:03:d6: + cd:a9:38:00:c9:48:11:98:89:f8:b9:c8:03:73:f4: + 62:fc:a9:b7:57:9d:6e:79:98:f2:d7:fc:a4:d2:ac: + 09:55:a7:40:55:5a:c2:b7:9e:a2:35:e5:ce:c8:4b: + f3:24:00:c6:80:34:3c:13:53:dd:6a:a7:2d:f0:2c: + a7:cf:fe:3b:45:e4:0c:eb:6b:c5:60:ed:3c:c1:c4: + 24:ae:39:97:fe:d7:ac:8a:4a:35:57:5c:b2:69:fe: + 84:7c:fc:d4:17:39:9a:1b:2f:71:be:40:b0:75:b9: + b5:e4:47:53:a2:53:a3:13:41:f6:55:be:7f:00:f0: + ce:c8:21:44:a2:48:98:1a:65:d3:2d:d0:14:97:4c: + 0a:67:82:32:8e:41:c6:cf:2d:23:86:96:97:11:71: + 3f:18:97:04:bc:8e:95:cc:47:21:8d:a0:4b:d3:71: + 09:d2:1f:69:1b:83:aa:78:83:b2:70:ab:c0:a3:70: + 3e:4d:b7:ad:c9:fb:2b:81:8c:87:cd:4d:1a:ef:fa: + 94:8c:66:ad:d4:00:2a:d6:75:65:8c:ca:4a:aa:98: + a7:3d:3b:1f:fd:df:47:df:d1:53:51:e2:4b:ed:3a: + 73:ce:35 + Exponent: 65537 (0x10001) + X509v3 extensions: + X509v3 Subject Key Identifier: + 2C:EB:72:12:8E:58:77:64:35:15:56:35:01:57:07:A9:7D:0D:36:E6 + X509v3 Authority Key Identifier: + 2C:EB:72:12:8E:58:77:64:35:15:56:35:01:57:07:A9:7D:0D:36:E6 + X509v3 Key Usage: critical + Certificate Sign, CRL Sign + X509v3 Basic Constraints: critical + CA:TRUE + Signature Algorithm: sha384WithRSAEncryption + Signature Value: + 15:c2:cb:e5:b9:26:9f:69:ec:f9:b4:53:d1:fe:14:53:07:34: + 71:13:23:0c:40:5d:d7:25:70:95:8b:7c:9e:81:9c:8a:a1:e7: + 3b:86:61:3a:8f:1d:99:33:c2:a0:33:59:27:db:22:51:c0:55: + c7:5f:cc:d4:5b:d9:c1:2c:40:d6:73:8c:2e:13:c2:eb:95:9a: + a1:19:93:3d:a4:94:17:1a:61:b3:45:eb:03:25:5e:89:81:10: + 67:6b:e8:f8:b0:0d:4c:ef:22:1d:96:f2:f4:b0:07:c5:5c:50: + 93:45:a5:93:0f:81:35:57:df:51:2e:b1:73:59:f4:dc:0b:e7: + b5:f3:48:43:b8:d3:29:a8:e1:28:e3:af:a5:31:e5:bf:5a:f8: + 7b:89:f3:90:b3:e9:22:2b:43:b6:80:7c:50:0c:dc:6c:95:26: + af:9c:2b:38:57:b9:7c:1d:10:c9:d8:b6:b5:d2:8e:f4:06:8e: + d5:2f:37:f5:5b:c3:01:be:fd:15:4e:7c:41:f8:d8:d3:e6:a4: + c0:6e:11:85:87:d1:af:a7:80:5a:26:99:9d:51:fd:02:e4:21: + 0f:e9:d6:d0:95:f8:31:59:fc:d8:af:af:72:55:3e:9d:3d:00: + 7e:18:51:1a:63:4d:c8:31:8f:80:70:10:ac:fa:89:b5:7c:dc: + 6b:41:7b:7d:ce:8a:1f:30:13:45:6c:b8:6f:a4:d1:ff:26:c5: + d6:74:65:33:7c:d6:ce:d7:6b:ac:c1:36:b9:c1:a8:7c:2c:1d: + 7c:15:34:0d:db:fc:cf:1d:89:af:04:4a:0b:bb:25:20:67:4f: + 55:34:b2:68:e5:80:34:91:72:2d:55:89:0b:8c:c7:b6:4a:2c: + 73:2b:8b:1c:50:7b:fc:d4:82:bd:f4:8f:75:0d:6c:7b:17:03: + 15:2b:0d:b1:80:5a:7e:64:b6:01:d9:d9:e9:41:0a:ea:c2:55: + ba:e2:09:47:51:c2:b6:37:d0:43:b2:78:cb:4b:17:99:f9:43: + c4:0a:1f:51:c4:7e:16:01:c2:a2:65:6f:9c:a9:a2:8c:9a:13: + f6:58:17:d1:e0:87:11:ec:d3:8b:df:69:a5:d7:57:6c:f3:b8: + 61:57:50:99:59:61:42:24:07:02:89:d6:19:cf:a0:99:6b:c7: + b1:cc:7a:23:3f:d4:81:e5:11:f4:fe:fd:4a:74:70:22:b2:a8: + 52:8e:d2:65:fd:42:00:1c:84:38:f1:e9:4e:9f:cc:2b:4d:d1: + 5a:a7:86:1b:e5:a1:e0:96:63:1e:37:1f:9f:00:88:43:96:e5: + 95:7f:14:ce:ec:7e:1d:4c:f5:3e:48:55:51:30:b0:21:fb:0c: + 0a:65:fa:9b:f7:89:cc:79 +SHA1 Fingerprint=FB:97:96:7C:EF:8D:98:63:06:C0:3B:B6:11:F8:E0:13:97:A2:98:D3 +-----BEGIN CERTIFICATE----- +MIIFmjCCA4KgAwIBAgIJAO6JNNDLgOCyMA0GCSqGSIb3DQEBDAUAMFoxCzAJBgNV +BAYTAkpQMSYwJAYDVQQKEx1TRUNPTSBUcnVzdCBTeXN0ZW1zIENvLiwgTHRkLjEj +MCEGA1UEAxMaU0VDT00gVExTIFJTQSBSb290IENBIDIwMjQwHhcNMjQwMTMxMDUx +MTU1WhcNNDkwMTE0MDUxMTU1WjBaMQswCQYDVQQGEwJKUDEmMCQGA1UEChMdU0VD +T00gVHJ1c3QgU3lzdGVtcyBDby4sIEx0ZC4xIzAhBgNVBAMTGlNFQ09NIFRMUyBS +U0EgUm9vdCBDQSAyMDI0MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA +4TjizUwzxbInq8Tx11gaFYNk5fO+34y7TyM4neh0UgL5JIZbJNLTz2x//L/B71+5 +m6X6nGIr7d4lFJBGtjO677hXOz93zkcWaUTm3VbOAjBlt4YWxlcccBHXuZ7o3Q+4 +R+ormrBdHeJ1CTUEG8ttQbKIl3G7OZYbnH8/pP8cjPub/0kDVNuMzp7xsVRROOis +Qt53fMoJLlYgoebbuMphOqMCtjkJ7R6efEMfLp8UAVi9ZaLRn76ET/CJkk925ndu +uufC4BatS4mnXFmxN0vUXb0ij9B8O/D8gixQEsVSD4GK8FWRPh3bVd/6bzdkHGJj +y21XI0yejVomZUbRrOfNuz0boPGV1pt18fFC39IHQEth3OFqb5NDO3L+A9bNqTgA +yUgRmIn4ucgDc/Ri/Km3V51ueZjy1/yk0qwJVadAVVrCt56iNeXOyEvzJADGgDQ8 +E1Pdaqct8Cynz/47ReQM62vFYO08wcQkrjmX/tesiko1V1yyaf6EfPzUFzmaGy9x +vkCwdbm15EdTolOjE0H2Vb5/APDOyCFEokiYGmXTLdAUl0wKZ4IyjkHGzy0jhpaX +EXE/GJcEvI6VzEchjaBL03EJ0h9pG4OqeIOycKvAo3A+TbetyfsrgYyHzU0a7/qU +jGat1AAq1nVljMpKqpinPTsf/d9H39FTUeJL7TpzzjUCAwEAAaNjMGEwHQYDVR0O +BBYEFCzrchKOWHdkNRVWNQFXB6l9DTbmMB8GA1UdIwQYMBaAFCzrchKOWHdkNRVW +NQFXB6l9DTbmMA4GA1UdDwEB/wQEAwIBBjAPBgNVHRMBAf8EBTADAQH/MA0GCSqG +SIb3DQEBDAUAA4ICAQAVwsvluSafaez5tFPR/hRTBzRxEyMMQF3XJXCVi3yegZyK +oec7hmE6jx2ZM8KgM1kn2yJRwFXHX8zUW9nBLEDWc4wuE8LrlZqhGZM9pJQXGmGz +ResDJV6JgRBna+j4sA1M7yIdlvL0sAfFXFCTRaWTD4E1V99RLrFzWfTcC+e180hD +uNMpqOEo46+lMeW/Wvh7ifOQs+kiK0O2gHxQDNxslSavnCs4V7l8HRDJ2La10o70 +Bo7VLzf1W8MBvv0VTnxB+NjT5qTAbhGFh9Gvp4BaJpmdUf0C5CEP6dbQlfgxWfzY +r69yVT6dPQB+GFEaY03IMY+AcBCs+om1fNxrQXt9zoofMBNFbLhvpNH/JsXWdGUz +fNbO12uswTa5wah8LB18FTQN2/zPHYmvBEoLuyUgZ09VNLJo5YA0kXItVYkLjMe2 +SixzK4scUHv81IK99I91DWx7FwMVKw2xgFp+ZLYB2dnpQQrqwlW64glHUcK2N9BD +snjLSxeZ+UPECh9RxH4WAcKiZW+cqaKMmhP2WBfR4IcR7NOL32ml11ds87hhV1CZ +WWFCJAcCidYZz6CZa8exzHojP9SB5RH0/v1KdHAisqhSjtJl/UIAHIQ48elOn8wr +TdFap4Yb5aHglmMeNx+fAIhDluWVfxTO7H4dTPU+SFVRMLAh+wwKZfqb94nMeQ== +-----END CERTIFICATE----- diff --git a/secure/caroot/trusted/SecureSign_Root_CA12.pem b/secure/caroot/trusted/SecureSign_Root_CA12.pem deleted file mode 100644 index 10085ef9ae93..000000000000 --- a/secure/caroot/trusted/SecureSign_Root_CA12.pem +++ /dev/null @@ -1,90 +0,0 @@ -## -## SecureSign Root CA12 -## -## This is a single X.509 certificate for a public Certificate -## Authority (CA). It was automatically extracted from Mozilla's -## root CA list (the file `certdata.txt' in security/nss) -## licensed under the MPL 2.0, http://mozilla.org/MPL/2.0/. -## -## @generated -## -Certificate: - Data: - Version: 3 (0x2) - Serial Number: - 66:f9:c7:c1:af:ec:c2:51:b4:ed:53:97:e6:e6:82:c3:2b:1c:90:16 - Signature Algorithm: sha256WithRSAEncryption - Issuer: C=JP, O=Cybertrust Japan Co., Ltd., CN=SecureSign Root CA12 - Validity - Not Before: Apr 8 05:36:46 2020 GMT - Not After : Apr 8 05:36:46 2040 GMT - Subject: C=JP, O=Cybertrust Japan Co., Ltd., CN=SecureSign Root CA12 - Subject Public Key Info: - Public Key Algorithm: rsaEncryption - Public-Key: (2048 bit) - Modulus: - 00:ba:39:c1:37:7a:68:45:2b:14:b4:eb:e4:13:eb: - 57:75:23:4d:8f:24:2d:16:e8:ae:8e:c9:7d:a4:57: - 3b:2a:76:25:33:83:6c:ea:32:8a:94:9b:4e:3c:96: - e4:fd:51:bf:99:c9:93:7e:bf:f9:ad:a7:b2:48:2b: - 07:1c:27:f5:4c:bc:70:12:77:a4:85:54:b5:fd:90: - 7a:e4:a3:e4:51:58:03:cd:10:79:79:ee:6b:93:1f: - 64:8e:6b:64:ab:a3:13:e3:71:fe:7d:ab:9c:dd:27: - 53:37:b3:aa:18:c2:59:26:ec:5b:1f:d2:e6:65:7c: - ef:93:bd:d8:58:5c:0b:c0:e3:65:6f:3c:c7:ca:59: - e3:fe:6e:5f:ac:83:be:fd:5d:25:4e:2a:29:3b:d6: - 0b:ab:17:32:78:a4:e1:3e:94:46:be:62:6e:9b:de: - 46:a8:b1:16:e7:85:6e:f4:08:40:45:11:a0:9e:54: - 44:84:f7:d8:36:ce:f5:50:47:dc:2c:30:9b:ee:c0: - f5:96:d2:fe:09:86:c7:06:59:ae:4f:ae:8e:11:98: - 7b:f3:0b:52:aa:62:26:aa:21:df:8e:25:33:79:97: - 16:49:8d:f5:3e:d5:47:9f:37:31:49:33:72:05:4d: - 0c:b6:55:8c:f1:57:8f:8a:87:d1:ad:c5:11:12:39: - a0:ad - Exponent: 65537 (0x10001) - X509v3 extensions: - X509v3 Basic Constraints: critical - CA:TRUE - X509v3 Key Usage: critical - Certificate Sign, CRL Sign - X509v3 Subject Key Identifier: - 57:34:F3:74:CF:04:4B:D5:25:E6:F1:40:B6:2C:4C:D9:2D:E9:A0:AD - Signature Algorithm: sha256WithRSAEncryption - Signature Value: - 3e:bb:db:17:16:d2:f2:14:01:20:2c:38:83:4b:ad:be:ca:85: - 7a:9a:b6:9b:6b:a6:e1:fc:a5:3a:ac:ad:b4:28:3a:af:d7:01: - 83:49:2b:63:a2:dd:9a:64:0e:98:5c:6f:dd:8e:bb:8a:54:22: - 2d:4a:13:f3:ae:40:43:db:4f:91:b7:86:1a:ec:00:b4:41:81: - a4:4f:fa:6a:8b:88:b3:76:08:72:2a:49:40:c3:d3:c3:85:89: - 98:10:a5:9d:6f:19:b7:bb:cf:7a:65:55:db:37:eb:3c:8a:72: - 32:97:1e:9a:29:3e:ad:8d:e6:a3:1b:6d:f5:75:1a:e6:b0:68: - b9:5b:a2:ee:69:47:27:35:a1:86:99:80:f3:33:4b:e1:6b:a4: - 26:c3:ef:74:59:6c:7a:a2:64:b6:1e:44:c3:50:e0:0f:39:3d: - a9:33:f1:a5:f3:d2:bd:62:84:ac:8e:1c:a9:cd:5a:bd:37:3b: - 6e:0a:22:b4:f4:15:e7:91:58:c5:3a:44:d3:95:28:d9:c0:65: - e9:72:ca:d0:0f:bd:1f:b3:15:d9:a9:e3:a4:47:09:9e:e0:cb: - 37:fb:fd:bd:97:d5:be:18:1a:69:a2:39:81:d9:1a:f5:ab:7f: - c8:e3:e2:67:0b:9d:f4:0c:ea:54:df:d2:b2:af:b1:22:f1:20: - df:bc:44:1c -SHA1 Fingerprint=7A:22:1E:3D:DE:1B:06:AC:9E:C8:47:70:16:8E:3C:E5:F7:6B:06:F4 ------BEGIN CERTIFICATE----- -MIIDcjCCAlqgAwIBAgIUZvnHwa/swlG07VOX5uaCwysckBYwDQYJKoZIhvcNAQEL -BQAwUTELMAkGA1UEBhMCSlAxIzAhBgNVBAoTGkN5YmVydHJ1c3QgSmFwYW4gQ28u -LCBMdGQuMR0wGwYDVQQDExRTZWN1cmVTaWduIFJvb3QgQ0ExMjAeFw0yMDA0MDgw -NTM2NDZaFw00MDA0MDgwNTM2NDZaMFExCzAJBgNVBAYTAkpQMSMwIQYDVQQKExpD -eWJlcnRydXN0IEphcGFuIENvLiwgTHRkLjEdMBsGA1UEAxMUU2VjdXJlU2lnbiBS -b290IENBMTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6OcE3emhF -KxS06+QT61d1I02PJC0W6K6OyX2kVzsqdiUzg2zqMoqUm048luT9Ub+ZyZN+v/mt -p7JIKwccJ/VMvHASd6SFVLX9kHrko+RRWAPNEHl57muTH2SOa2SroxPjcf59q5zd -J1M3s6oYwlkm7Fsf0uZlfO+TvdhYXAvA42VvPMfKWeP+bl+sg779XSVOKik71gur -FzJ4pOE+lEa+Ym6b3kaosRbnhW70CEBFEaCeVESE99g2zvVQR9wsMJvuwPWW0v4J -hscGWa5Pro4RmHvzC1KqYiaqId+OJTN5lxZJjfU+1UefNzFJM3IFTQy2VYzxV4+K -h9GtxRESOaCtAgMBAAGjQjBAMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQD -AgEGMB0GA1UdDgQWBBRXNPN0zwRL1SXm8UC2LEzZLemgrTANBgkqhkiG9w0BAQsF -AAOCAQEAPrvbFxbS8hQBICw4g0utvsqFepq2m2um4fylOqyttCg6r9cBg0krY6Ld -mmQOmFxv3Y67ilQiLUoT865AQ9tPkbeGGuwAtEGBpE/6aouIs3YIcipJQMPTw4WJ -mBClnW8Zt7vPemVV2zfrPIpyMpcemik+rY3moxtt9XUa5rBouVui7mlHJzWhhpmA -8zNL4WukJsPvdFlseqJkth5Ew1DgDzk9qTPxpfPSvWKErI4cqc1avTc7bgoitPQV -55FYxTpE05Uo2cBl6XLK0A+9H7MV2anjpEcJnuDLN/v9vZfVvhgaaaI5gdka9at/ -yOPiZwud9AzqVN/Ssq+xIvEg37xEHA== ------END CERTIFICATE----- diff --git a/secure/caroot/trusted/Telia_EC_TLS_Root_CA_v3.pem b/secure/caroot/trusted/Telia_EC_TLS_Root_CA_v3.pem new file mode 100644 index 000000000000..b917b71841ed --- /dev/null +++ b/secure/caroot/trusted/Telia_EC_TLS_Root_CA_v3.pem @@ -0,0 +1,66 @@ +## +## Telia EC TLS Root CA v3 +## +## This is a single X.509 certificate for a public Certificate +## Authority (CA). It was automatically extracted from Mozilla's +## root CA list (the file `certdata.txt' in security/nss) +## licensed under the MPL 2.0, http://mozilla.org/MPL/2.0/. +## +## @generated +## +Certificate: + Data: + Version: 3 (0x2) + Serial Number: + 01:8b:d2:22:54:63:4d:04:8b:6c:e5:47:1f:d2:b5 + Signature Algorithm: ecdsa-with-SHA384 + Issuer: C=SE, O=Telia Company AB, CN=Telia EC TLS Root CA v3 + Validity + Not Before: Nov 15 08:55:26 2023 GMT + Not After : May 23 11:00:00 2048 GMT + Subject: C=SE, O=Telia Company AB, CN=Telia EC TLS Root CA v3 + Subject Public Key Info: + Public Key Algorithm: id-ecPublicKey + Public-Key: (384 bit) + pub: + 04:c1:c8:96:15:43:2d:b9:85:29:4a:56:d2:22:b8: + 76:9a:f2:4f:a7:a6:60:e7:92:df:52:4f:c1:69:d6: + 3e:69:16:46:b0:24:4d:b3:d7:e3:4b:10:7c:72:3d: + 9a:94:7b:45:b9:2d:bb:79:e0:83:a5:be:04:14:97: + 49:e7:21:b4:c0:a7:06:65:97:8f:f1:1a:56:59:95: + e5:c6:35:8c:3d:87:a1:37:e1:05:0d:c0:69:ca:42: + 34:c2:c9:2b:83:69:65 + ASN1 OID: secp384r1 + NIST CURVE: P-384 + X509v3 extensions: + X509v3 Authority Key Identifier: + D4:64:E8:43:88:3A:73:2F:D0:1A:71:82:36:0B:5E:85:DE:C7:DE:43 + X509v3 Subject Key Identifier: + D4:64:E8:43:88:3A:73:2F:D0:1A:71:82:36:0B:5E:85:DE:C7:DE:43 + X509v3 Key Usage: critical + Certificate Sign, CRL Sign + X509v3 Basic Constraints: critical + CA:TRUE + Signature Algorithm: ecdsa-with-SHA384 + Signature Value: + 30:66:02:31:00:97:01:47:52:ff:d6:db:27:c0:35:25:86:86: + 7f:f6:d6:b7:fb:3b:4d:ad:28:b7:95:25:9e:8f:0e:8d:23:58: + 45:64:08:95:2e:2d:55:69:5d:bd:30:15:03:b8:5e:38:58:02: + 31:00:af:2a:bf:3e:67:64:67:f8:e0:6b:e5:41:f3:96:00:4e: + 6e:96:9d:d4:bb:b0:35:34:5c:74:d8:14:27:12:16:69:d7:24: + 8b:e5:01:2c:48:b5:fc:05:11:29:5e:66:77:63 +SHA1 Fingerprint=B4:D6:07:C2:A5:95:BC:5B:F4:67:4D:C9:DC:6F:6F:0A:00:7A:A5:35 +-----BEGIN CERTIFICATE----- +MIICMjCCAbegAwIBAgIPAYvSIlRjTQSLbOVHH9K1MAoGCCqGSM49BAMDMEoxCzAJ +BgNVBAYTAlNFMRkwFwYDVQQKDBBUZWxpYSBDb21wYW55IEFCMSAwHgYDVQQDDBdU +ZWxpYSBFQyBUTFMgUm9vdCBDQSB2MzAeFw0yMzExMTUwODU1MjZaFw00ODA1MjMx +MTAwMDBaMEoxCzAJBgNVBAYTAlNFMRkwFwYDVQQKDBBUZWxpYSBDb21wYW55IEFC +MSAwHgYDVQQDDBdUZWxpYSBFQyBUTFMgUm9vdCBDQSB2MzB2MBAGByqGSM49AgEG +BSuBBAAiA2IABMHIlhVDLbmFKUpW0iK4dpryT6emYOeS31JPwWnWPmkWRrAkTbPX +40sQfHI9mpR7Rbktu3ngg6W+BBSXSechtMCnBmWXj/EaVlmV5cY1jD2HoTfhBQ3A +acpCNMLJK4NpZaNjMGEwHwYDVR0jBBgwFoAU1GToQ4g6cy/QGnGCNgtehd7H3kMw +HQYDVR0OBBYEFNRk6EOIOnMv0BpxgjYLXoXex95DMA4GA1UdDwEB/wQEAwIBBjAP +BgNVHRMBAf8EBTADAQH/MAoGCCqGSM49BAMDA2kAMGYCMQCXAUdS/9bbJ8A1JYaG +f/bWt/s7Ta0ot5Ulno8OjSNYRWQIlS4tVWldvTAVA7heOFgCMQCvKr8+Z2Rn+OBr +5UHzlgBObpad1LuwNTRcdNgUJxIWadcki+UBLEi1/AURKV5md2M= +-----END CERTIFICATE----- diff --git a/secure/caroot/trusted/Telia_RSA_TLS_Root_CA_v3.pem b/secure/caroot/trusted/Telia_RSA_TLS_Root_CA_v3.pem new file mode 100644 index 000000000000..b890f308a736 --- /dev/null +++ b/secure/caroot/trusted/Telia_RSA_TLS_Root_CA_v3.pem @@ -0,0 +1,134 @@ +## +## Telia RSA TLS Root CA v3 +## +## This is a single X.509 certificate for a public Certificate +## Authority (CA). It was automatically extracted from Mozilla's +## root CA list (the file `certdata.txt' in security/nss) +## licensed under the MPL 2.0, http://mozilla.org/MPL/2.0/. +## +## @generated +## +Certificate: + Data: + Version: 3 (0x2) + Serial Number: + 01:8b:d2:50:ab:42:55:2c:47:5a:bd:a1:dc:1a:c5 + Signature Algorithm: sha384WithRSAEncryption + Issuer: C=SE, O=Telia Company AB, CN=Telia RSA TLS Root CA v3 + Validity + Not Before: Nov 15 09:47:42 2023 GMT + Not After : May 23 11:00:00 2048 GMT + Subject: C=SE, O=Telia Company AB, CN=Telia RSA TLS Root CA v3 + Subject Public Key Info: + Public Key Algorithm: rsaEncryption + Public-Key: (4096 bit) + Modulus: + 00:b1:5f:3d:28:6d:7d:84:27:f8:4b:51:6f:93:c0: + f7:4f:20:c4:46:19:9c:bf:1f:05:ec:a9:9b:e1:60: + 13:c7:78:a3:7b:58:9d:dc:a1:f1:44:4d:13:2a:67: + 0d:09:b0:10:e7:b6:ef:1c:51:18:6b:88:51:da:5d: + b4:56:35:5a:74:4c:6a:39:6f:b6:95:df:7d:31:b1: + 22:3b:e8:d1:54:ec:fe:05:bc:4b:c4:99:e6:1b:00: + aa:23:e0:5f:b9:38:e3:55:17:83:c6:cc:63:42:f8: + e0:06:c0:a5:68:ef:ec:9b:98:bb:d2:79:59:71:61: + 91:b4:89:2f:58:32:b7:34:d9:13:e5:1b:70:5d:cf: + ce:f0:d4:c5:56:96:d4:a9:3e:9c:46:32:23:de:89: + 40:6e:54:7e:95:17:f8:15:fc:b9:a3:e4:3d:7d:a6: + e3:62:7f:59:f5:2e:22:b6:bb:84:95:c1:05:7f:d2: + e3:93:b7:f0:75:3c:9c:4f:fa:ef:25:6f:70:fc:1d: + c6:d9:ad:eb:d1:ff:f3:5c:d3:95:ae:e2:01:72:a1: + 3a:a6:44:a8:b2:90:02:53:66:c6:e3:67:d8:2a:b6: + cc:fc:65:a7:a7:bb:be:a7:d1:6b:cf:88:da:37:0a: + 5b:e1:81:ee:11:e4:bc:06:b6:ad:35:c3:fc:5f:ad: + a3:5c:8b:ef:28:7c:65:b0:c0:c9:0a:76:f8:53:c2: + 73:14:e2:ec:53:a9:a8:85:56:39:f0:17:59:ae:f8: + b4:1a:4f:54:3a:ea:a6:82:81:ba:76:c9:07:a2:4b: + 23:65:39:4a:eb:50:ff:22:7c:e6:12:80:35:c8:06: + 09:14:35:72:b2:34:71:0d:43:ae:f5:c0:30:00:d6: + ea:9a:ae:fb:58:81:4b:e8:1a:67:66:05:6a:3e:d3: + 1f:1b:ac:0d:f0:1a:d3:29:d6:a9:be:29:55:b1:84: + 79:f4:11:60:22:c0:15:04:cc:6b:1a:1f:96:f9:07: + 2f:98:96:9f:52:90:12:be:50:2b:2a:f5:46:d8:52: + 38:8b:a3:e2:2e:34:81:4f:4f:ba:17:a1:10:2e:b6: + 2a:79:f3:90:17:f7:c1:34:45:db:fa:78:d4:43:44: + 94:56:b0:2a:b4:7e:18:f8:e8:c2:23:f6:b8:fc:92: + 50:a6:9c:5e:7a:66:5c:43:44:94:4a:18:22:23:90: + 0c:e7:11:ce:e6:2c:9a:52:b4:e3:60:7e:33:c5:4c: + fd:8f:ed:45:11:b0:c7:ff:1a:6c:b6:bd:60:5c:1c: + a4:b2:9b:a9:fa:14:53:68:97:1b:03:e5:1b:a4:9a: + ad:59:99:dd:00:f7:5d:26:6b:7a:60:94:3e:75:4d: + e9:0e:ef + Exponent: 65537 (0x10001) + X509v3 extensions: + X509v3 Authority Key Identifier: + B0:C7:A9:D2:DD:B2:28:56:73:04:94:8C:14:5C:48:6F:37:52:92:A8 + X509v3 Subject Key Identifier: + B0:C7:A9:D2:DD:B2:28:56:73:04:94:8C:14:5C:48:6F:37:52:92:A8 + X509v3 Key Usage: critical + Certificate Sign, CRL Sign + X509v3 Basic Constraints: critical + CA:TRUE + Signature Algorithm: sha384WithRSAEncryption + Signature Value: + 5d:63:31:6c:34:60:d1:93:b6:d1:fc:08:11:2a:af:b9:eb:7e: + d8:b8:e5:be:c3:ab:a1:a6:84:b4:56:72:8c:52:9c:87:0b:09: + 2e:f3:a8:44:be:a8:af:6a:43:ed:7e:69:66:e1:b1:70:b7:ef: + ac:6f:ff:0e:5e:c5:81:aa:d7:db:5c:c6:81:34:34:d9:97:c5: + d1:30:9b:8b:58:e5:b6:26:b6:ca:91:1c:e0:1b:47:81:51:cb: + ec:69:d1:b5:ae:b8:5b:99:9a:98:bc:55:da:01:93:bb:a3:84: + dd:39:9c:f1:84:10:79:18:e0:16:59:70:77:21:ea:da:34:fe: + 09:eb:7c:f2:a3:d9:fc:1a:ac:37:b0:90:46:e3:87:a6:e6:1a: + 18:8c:17:df:3f:e9:e9:89:bc:ac:96:7b:25:46:2e:0b:eb:11: + ec:09:88:ff:3d:a6:fe:3a:5a:9b:30:20:7a:bf:eb:13:08:b7: + 84:22:e9:11:57:3a:11:f5:a4:38:e6:91:0a:ed:9d:50:06:74: + ac:6c:02:90:b6:cb:34:24:a0:fd:77:f9:97:d7:8d:c7:d7:17: + 8f:8c:f8:53:5e:5b:f9:24:29:21:ad:c8:fe:49:28:73:d0:ff: + 7e:10:7a:16:7b:a9:bd:97:25:04:38:85:67:d2:ba:7e:c9:52: + 56:35:b9:b2:0e:fd:d5:93:01:71:1c:2d:40:a5:24:2c:81:28: + a6:8c:64:38:c2:da:fa:71:29:a8:ad:d6:31:91:5f:91:a3:c9: + 4e:20:88:51:92:c5:cf:c8:39:36:ee:05:ba:22:35:17:0a:46: + 4a:a7:11:63:90:bd:e3:88:14:9c:f1:29:31:9f:00:96:b5:78: + 3c:c7:03:70:74:55:4d:04:62:c2:0a:e2:67:b2:77:98:5e:32: + 4d:ab:34:6a:51:ca:06:c3:3b:2f:17:74:22:fd:99:c7:50:db: + c8:49:d7:af:96:02:00:5c:be:16:be:bc:5a:aa:fa:1a:d3:5c: + 01:f8:60:9f:b3:9e:d1:4c:61:38:4e:f0:06:84:a3:4a:ba:cf: + 0a:de:14:53:d4:14:a9:8a:0c:cc:21:1c:d2:c6:d0:0e:ae:a3: + cd:ea:3f:ff:41:29:96:f5:ff:09:72:77:2b:8b:88:f6:8a:14: + a9:56:b1:54:d0:d7:4d:90:c8:59:78:02:a2:75:31:4f:b3:10: + 95:16:e5:b8:02:78:b3:ee:3a:a2:c3:9b:16:b6:36:d0:ae:55: + b4:df:98:b3:20:45:38:b1:8c:10:a0:2d:4d:c7:44:af:cb:e9: + 8c:4d:16:a2:e7:42:ea:15:0f:80:d7:f1:ea:eb:11:c7:0c:dc: + 7b:08:8f:37:77:6d:c4:af +SHA1 Fingerprint=B5:2E:88:4E:40:C1:11:FB:50:C7:E2:4F:AC:18:2B:BD:68:15:D2:34 +-----BEGIN CERTIFICATE----- +MIIFgjCCA2qgAwIBAgIPAYvSUKtCVSxHWr2h3BrFMA0GCSqGSIb3DQEBDAUAMEsx +CzAJBgNVBAYTAlNFMRkwFwYDVQQKDBBUZWxpYSBDb21wYW55IEFCMSEwHwYDVQQD +DBhUZWxpYSBSU0EgVExTIFJvb3QgQ0EgdjMwHhcNMjMxMTE1MDk0NzQyWhcNNDgw +NTIzMTEwMDAwWjBLMQswCQYDVQQGEwJTRTEZMBcGA1UECgwQVGVsaWEgQ29tcGFu +eSBBQjEhMB8GA1UEAwwYVGVsaWEgUlNBIFRMUyBSb290IENBIHYzMIICIjANBgkq +hkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAsV89KG19hCf4S1Fvk8D3TyDERhmcvx8F +7Kmb4WATx3ije1id3KHxRE0TKmcNCbAQ57bvHFEYa4hR2l20VjVadExqOW+2ld99 +MbEiO+jRVOz+BbxLxJnmGwCqI+BfuTjjVReDxsxjQvjgBsClaO/sm5i70nlZcWGR +tIkvWDK3NNkT5RtwXc/O8NTFVpbUqT6cRjIj3olAblR+lRf4Ffy5o+Q9fabjYn9Z +9S4itruElcEFf9Ljk7fwdTycT/rvJW9w/B3G2a3r0f/zXNOVruIBcqE6pkSospAC +U2bG42fYKrbM/GWnp7u+p9Frz4jaNwpb4YHuEeS8BratNcP8X62jXIvvKHxlsMDJ +Cnb4U8JzFOLsU6mohVY58BdZrvi0Gk9UOuqmgoG6dskHoksjZTlK61D/InzmEoA1 +yAYJFDVysjRxDUOu9cAwANbqmq77WIFL6BpnZgVqPtMfG6wN8BrTKdapvilVsYR5 +9BFgIsAVBMxrGh+W+QcvmJafUpASvlArKvVG2FI4i6PiLjSBT0+6F6EQLrYqefOQ +F/fBNEXb+njUQ0SUVrAqtH4Y+OjCI/a4/JJQppxeemZcQ0SUShgiI5AM5xHO5iya +UrTjYH4zxUz9j+1FEbDH/xpstr1gXBykspup+hRTaJcbA+UbpJqtWZndAPddJmt6 +YJQ+dU3pDu8CAwEAAaNjMGEwHwYDVR0jBBgwFoAUsMep0t2yKFZzBJSMFFxIbzdS +kqgwHQYDVR0OBBYEFLDHqdLdsihWcwSUjBRcSG83UpKoMA4GA1UdDwEB/wQEAwIB +BjAPBgNVHRMBAf8EBTADAQH/MA0GCSqGSIb3DQEBDAUAA4ICAQBdYzFsNGDRk7bR +/AgRKq+5637YuOW+w6uhpoS0VnKMUpyHCwku86hEvqivakPtfmlm4bFwt++sb/8O +XsWBqtfbXMaBNDTZl8XRMJuLWOW2JrbKkRzgG0eBUcvsadG1rrhbmZqYvFXaAZO7 +o4TdOZzxhBB5GOAWWXB3IeraNP4J63zyo9n8Gqw3sJBG44em5hoYjBffP+npibys +lnslRi4L6xHsCYj/Pab+OlqbMCB6v+sTCLeEIukRVzoR9aQ45pEK7Z1QBnSsbAKQ +tss0JKD9d/mX143H1xePjPhTXlv5JCkhrcj+SShz0P9+EHoWe6m9lyUEOIVn0rp+ +yVJWNbmyDv3VkwFxHC1ApSQsgSimjGQ4wtr6cSmordYxkV+Ro8lOIIhRksXPyDk2 +7gW6IjUXCkZKpxFjkL3jiBSc8SkxnwCWtXg8xwNwdFVNBGLCCuJnsneYXjJNqzRq +UcoGwzsvF3Qi/ZnHUNvISdevlgIAXL4Wvrxaqvoa01wB+GCfs57RTGE4TvAGhKNK +us8K3hRT1BSpigzMIRzSxtAOrqPN6j//QSmW9f8Jcncri4j2ihSpVrFU0NdNkMhZ +eAKidTFPsxCVFuW4Aniz7jqiw5sWtjbQrlW035izIEU4sYwQoC1Nx0Svy+mMTRai +50LqFQ+A1/Hq6xHHDNx7CI83d23Erw== +-----END CERTIFICATE----- diff --git a/secure/caroot/trusted/ePKI_Root_Certification_Authority.pem b/secure/caroot/trusted/ePKI_Root_Certification_Authority.pem deleted file mode 100644 index 5c2747c1b6d6..000000000000 --- a/secure/caroot/trusted/ePKI_Root_Certification_Authority.pem +++ /dev/null @@ -1,134 +0,0 @@ -## -## ePKI Root Certification Authority -## -## This is a single X.509 certificate for a public Certificate -## Authority (CA). It was automatically extracted from Mozilla's -## root CA list (the file `certdata.txt' in security/nss) -## licensed under the MPL 2.0, http://mozilla.org/MPL/2.0/. -## -## @generated -## -Certificate: - Data: - Version: 3 (0x2) - Serial Number: - 15:c8:bd:65:47:5c:af:b8:97:00:5e:e4:06:d2:bc:9d - Signature Algorithm: sha1WithRSAEncryption - Issuer: C=TW, O=Chunghwa Telecom Co., Ltd., OU=ePKI Root Certification Authority - Validity - Not Before: Dec 20 02:31:27 2004 GMT - Not After : Dec 20 02:31:27 2034 GMT - Subject: C=TW, O=Chunghwa Telecom Co., Ltd., OU=ePKI Root Certification Authority - Subject Public Key Info: - Public Key Algorithm: rsaEncryption - Public-Key: (4096 bit) - Modulus: - 00:e1:25:0f:ee:8d:db:88:33:75:67:cd:ad:1f:7d: - 3a:4e:6d:9d:d3:2f:14:f3:63:74:cb:01:21:6a:37: - ea:84:50:07:4b:26:5b:09:43:6c:21:9e:6a:c8:d5: - 03:f5:60:69:8f:cc:f0:22:e4:1f:e7:f7:6a:22:31: - b7:2c:15:f2:e0:fe:00:6a:43:ff:87:65:c6:b5:1a: - c1:a7:4c:6d:22:70:21:8a:31:f2:97:74:89:09:12: - 26:1c:9e:ca:d9:12:a2:95:3c:da:e9:67:bf:08:a0: - 64:e3:d6:42:b7:45:ef:97:f4:f6:f5:d7:b5:4a:15: - 02:58:7d:98:58:4b:60:bc:cd:d7:0d:9a:13:33:53: - d1:61:f9:7a:d5:d7:78:b3:9a:33:f7:00:86:ce:1d: - 4d:94:38:af:a8:ec:78:51:70:8a:5c:10:83:51:21: - f7:11:3d:34:86:5e:e5:48:cd:97:81:82:35:4c:19: - ec:65:f6:6b:c5:05:a1:ee:47:13:d6:b3:21:27:94: - 10:0a:d9:24:3b:ba:be:44:13:46:30:3f:97:3c:d8: - d7:d7:6a:ee:3b:38:e3:2b:d4:97:0e:b9:1b:e7:07: - 49:7f:37:2a:f9:77:78:cf:54:ed:5b:46:9d:a3:80: - 0e:91:43:c1:d6:5b:5f:14:ba:9f:a6:8d:24:47:40: - 59:bf:72:38:b2:36:6c:37:ff:99:d1:5d:0e:59:0a: - ab:69:f7:c0:b2:04:45:7a:54:00:ae:be:53:f6:b5: - e7:e1:f8:3c:a3:31:d2:a9:fe:21:52:64:c5:a6:67: - f0:75:07:06:94:14:81:55:c6:27:e4:01:8f:17:c1: - 6a:71:d7:be:4b:fb:94:58:7d:7e:11:33:b1:42:f7: - 62:6c:18:d6:cf:09:68:3e:7f:6c:f6:1e:8f:62:ad: - a5:63:db:09:a7:1f:22:42:41:1e:6f:99:8a:3e:d7: - f9:3f:40:7a:79:b0:a5:01:92:d2:9d:3d:08:15:a5: - 10:01:2d:b3:32:76:a8:95:0d:b3:7a:9a:fb:07:10: - 78:11:6f:e1:8f:c7:ba:0f:25:1a:74:2a:e5:1c:98: - 41:99:df:21:87:e8:95:06:6a:0a:b3:6a:47:76:65: - f6:3a:cf:8f:62:17:19:7b:0a:28:cd:1a:d2:83:1e: - 21:c7:2c:bf:be:ff:61:68:b7:67:1b:bb:78:4d:8d: - ce:67:e5:e4:c1:8e:b7:23:66:e2:9d:90:75:34:98: - a9:36:2b:8a:9a:94:b9:9d:ec:cc:8a:b1:f8:25:89: - 5c:5a:b6:2f:8c:1f:6d:79:24:a7:52:68:c3:84:35: - e2:66:8d:63:0e:25:4d:d5:19:b2:e6:79:37:a7:22: - 9d:54:31 - Exponent: 65537 (0x10001) - X509v3 extensions: - X509v3 Subject Key Identifier: - 1E:0C:F7:B6:67:F2:E1:92:26:09:45:C0:55:39:2E:77:3F:42:4A:A2 - X509v3 Basic Constraints: - CA:TRUE - setCext-hashedRoot: - 0/0-...0...+......0...g*.....E... -V|.[x....S..... - Signature Algorithm: sha1WithRSAEncryption - Signature Value: - 09:b3:83:53:59:01:3e:95:49:b9:f1:81:ba:f9:76:20:23:b5: - 27:60:74:d4:6a:99:34:5e:6c:00:53:d9:9f:f2:a6:b1:24:07: - 44:6a:2a:c6:a5:8e:78:12:e8:47:d9:58:1b:13:2a:5e:79:9b: - 9f:0a:2a:67:a6:25:3f:06:69:56:73:c3:8a:66:48:fb:29:81: - 57:74:06:ca:9c:ea:28:e8:38:67:26:2b:f1:d5:b5:3f:65:93: - f8:36:5d:8e:8d:8d:40:20:87:19:ea:ef:27:c0:3d:b4:39:0f: - 25:7b:68:50:74:55:9c:0c:59:7d:5a:3d:41:94:25:52:08:e0: - 47:2c:15:31:19:d5:bf:07:55:c6:bb:12:b5:97:f4:5f:83:85: - ba:71:c1:d9:6c:81:11:76:0a:0a:b0:bf:82:97:f7:ea:3d:fa: - fa:ec:2d:a9:28:94:3b:56:dd:d2:51:2e:ae:c0:bd:08:15:8c: - 77:52:34:96:d6:9b:ac:d3:1d:8e:61:0f:35:7b:9b:ae:39:69: - 0b:62:60:40:20:36:8f:af:fb:36:ee:2d:08:4a:1d:b8:bf:9b: - 5c:f8:ea:a5:1b:a0:73:a6:d8:f8:6e:e0:33:04:5f:68:aa:27: - 87:ed:d9:c1:90:9c:ed:bd:e3:6a:35:af:63:df:ab:18:d9:ba: - e6:e9:4a:ea:50:8a:0f:61:93:1e:e2:2d:19:e2:30:94:35:92: - 5d:0e:b6:07:af:19:80:8f:47:90:51:4b:2e:4d:dd:85:e2:d2: - 0a:52:0a:17:9a:fc:1a:b0:50:02:e5:01:a3:63:37:21:4c:44: - c4:9b:51:99:11:0e:73:9c:06:8f:54:2e:a7:28:5e:44:39:87: - 56:2d:37:bd:85:44:94:e1:0c:4b:2c:9c:c3:92:85:34:61:cb: - 0f:b8:9b:4a:43:52:fe:34:3a:7d:b8:e9:29:dc:76:a9:c8:30: - f8:14:71:80:c6:1e:36:48:74:22:41:5c:87:82:e8:18:71:8b: - 41:89:44:e7:7e:58:5b:a8:b8:8d:13:e9:a7:6c:c3:47:ed:b3: - 1a:9d:62:ae:8d:82:ea:94:9e:dd:59:10:c3:ad:dd:e2:4d:e3: - 31:d5:c7:ec:e8:f2:b0:fe:92:1e:16:0a:1a:fc:d9:f3:f8:27: - b6:c9:be:1d:b4:6c:64:90:7f:f4:e4:c4:5b:d7:37:ae:42:0e: - dd:a4:1a:6f:7c:88:54:c5:16:6e:e1:7a:68:2e:f8:3a:bf:0d: - a4:3c:89:3b:78:a7:4e:63:83:04:21:08:67:8d:f2:82:49:d0: - 5b:fd:b1:cd:0f:83:84:d4:3e:20:85:f7:4a:3d:2b:9c:fd:2a: - 0a:09:4d:ea:81:f8:11:9c -SHA1 Fingerprint=67:65:0D:F1:7E:8E:7E:5B:82:40:A4:F4:56:4B:CF:E2:3D:69:C6:F0 ------BEGIN CERTIFICATE----- -MIIFsDCCA5igAwIBAgIQFci9ZUdcr7iXAF7kBtK8nTANBgkqhkiG9w0BAQUFADBe -MQswCQYDVQQGEwJUVzEjMCEGA1UECgwaQ2h1bmdod2EgVGVsZWNvbSBDby4sIEx0 -ZC4xKjAoBgNVBAsMIWVQS0kgUm9vdCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTAe -Fw0wNDEyMjAwMjMxMjdaFw0zNDEyMjAwMjMxMjdaMF4xCzAJBgNVBAYTAlRXMSMw -IQYDVQQKDBpDaHVuZ2h3YSBUZWxlY29tIENvLiwgTHRkLjEqMCgGA1UECwwhZVBL -SSBSb290IENlcnRpZmljYXRpb24gQXV0aG9yaXR5MIICIjANBgkqhkiG9w0BAQEF -AAOCAg8AMIICCgKCAgEA4SUP7o3biDN1Z82tH306Tm2d0y8U82N0ywEhajfqhFAH -SyZbCUNsIZ5qyNUD9WBpj8zwIuQf5/dqIjG3LBXy4P4AakP/h2XGtRrBp0xtInAh -ijHyl3SJCRImHJ7K2RKilTza6We/CKBk49ZCt0Xvl/T29de1ShUCWH2YWEtgvM3X -DZoTM1PRYfl61dd4s5oz9wCGzh1NlDivqOx4UXCKXBCDUSH3ET00hl7lSM2XgYI1 -TBnsZfZrxQWh7kcT1rMhJ5QQCtkkO7q+RBNGMD+XPNjX12ruOzjjK9SXDrkb5wdJ -fzcq+Xd4z1TtW0ado4AOkUPB1ltfFLqfpo0kR0BZv3I4sjZsN/+Z0V0OWQqraffA -sgRFelQArr5T9rXn4fg8ozHSqf4hUmTFpmfwdQcGlBSBVcYn5AGPF8Fqcde+S/uU -WH1+ETOxQvdibBjWzwloPn9s9h6PYq2lY9sJpx8iQkEeb5mKPtf5P0B6ebClAZLS -nT0IFaUQAS2zMnaolQ2zepr7BxB4EW/hj8e6DyUadCrlHJhBmd8hh+iVBmoKs2pH -dmX2Os+PYhcZewoozRrSgx4hxyy/vv9haLdnG7t4TY3OZ+XkwY63I2binZB1NJip -NiuKmpS5nezMirH4JYlcWrYvjB9teSSnUmjDhDXiZo1jDiVN1Rmy5nk3pyKdVDEC -AwEAAaNqMGgwHQYDVR0OBBYEFB4M97Zn8uGSJglFwFU5Lnc/QkqiMAwGA1UdEwQF -MAMBAf8wOQYEZyoHAAQxMC8wLQIBADAJBgUrDgMCGgUAMAcGBWcqAwAABBRFsMLH -ClZ87lt4DJX5GFPBphzYEDANBgkqhkiG9w0BAQUFAAOCAgEACbODU1kBPpVJufGB -uvl2ICO1J2B01GqZNF5sAFPZn/KmsSQHRGoqxqWOeBLoR9lYGxMqXnmbnwoqZ6Yl -PwZpVnPDimZI+ymBV3QGypzqKOg4ZyYr8dW1P2WT+DZdjo2NQCCHGervJ8A9tDkP -JXtoUHRVnAxZfVo9QZQlUgjgRywVMRnVvwdVxrsStZf0X4OFunHB2WyBEXYKCrC/ -gpf36j36+uwtqSiUO1bd0lEursC9CBWMd1I0ltabrNMdjmEPNXubrjlpC2JgQCA2 -j6/7Nu4tCEoduL+bXPjqpRugc6bY+G7gMwRfaKonh+3ZwZCc7b3jajWvY9+rGNm6 -5ulK6lCKD2GTHuItGeIwlDWSXQ62B68ZgI9HkFFLLk3dheLSClIKF5r8GrBQAuUB -o2M3IUxExJtRmREOc5wGj1QupyheRDmHVi03vYVElOEMSyycw5KFNGHLD7ibSkNS -/jQ6fbjpKdx2qcgw+BRxgMYeNkh0IkFch4LoGHGLQYlE535YW6i4jRPpp2zDR+2z -Gp1iro2C6pSe3VkQw63d4k3jMdXH7OjysP6SHhYKGvzZ8/gntsm+HbRsZJB/9OTE -W9c3rkIO3aQab3yIVMUWbuF6aC74Or8NpDyJO3inTmODBCEIZ43ygknQW/2xzQ+D -hNQ+IIX3Sj0rnP0qCglN6oH4EZw= ------END CERTIFICATE----- diff --git a/secure/caroot/trusted/emSign_ECC_Root_CA_-_C3.pem b/secure/caroot/trusted/emSign_ECC_Root_CA_-_C3.pem deleted file mode 100644 index 511aa4e7b7d9..000000000000 --- a/secure/caroot/trusted/emSign_ECC_Root_CA_-_C3.pem +++ /dev/null @@ -1,64 +0,0 @@ -## -## emSign ECC Root CA - C3 -## -## This is a single X.509 certificate for a public Certificate -## Authority (CA). It was automatically extracted from Mozilla's -## root CA list (the file `certdata.txt' in security/nss) -## licensed under the MPL 2.0, http://mozilla.org/MPL/2.0/. -## -## @generated -## -Certificate: - Data: - Version: 3 (0x2) - Serial Number: - 7b:71:b6:82:56:b8:12:7c:9c:a8 - Signature Algorithm: ecdsa-with-SHA384 - Issuer: C=US, OU=emSign PKI, O=eMudhra Inc, CN=emSign ECC Root CA - C3 - Validity - Not Before: Feb 18 18:30:00 2018 GMT - Not After : Feb 18 18:30:00 2043 GMT - Subject: C=US, OU=emSign PKI, O=eMudhra Inc, CN=emSign ECC Root CA - C3 - Subject Public Key Info: - Public Key Algorithm: id-ecPublicKey - Public-Key: (384 bit) - pub: - 04:fd:a5:61:ae:7b:26:10:1d:e9:b7:22:30:ae:06: - f4:81:b3:b1:42:71:95:39:bc:d3:52:e3:af:af:f9: - f2:97:35:92:36:46:0e:87:95:8d:b9:39:5a:e9:bb: - df:d0:fe:c8:07:41:3c:bb:55:6f:83:a3:6a:fb:62: - b0:81:89:02:70:7d:48:c5:4a:e3:e9:22:54:22:4d: - 93:bb:42:0c:af:77:9c:23:a6:7d:d7:61:11:ce:65: - c7:f8:7f:fe:f5:f2:a9 - ASN1 OID: secp384r1 - NIST CURVE: P-384 - X509v3 extensions: - X509v3 Subject Key Identifier: - FB:5A:48:D0:80:20:40:F2:A8:E9:00:07:69:19:77:A7:E6:C3:F4:CF - X509v3 Key Usage: critical - Certificate Sign, CRL Sign - X509v3 Basic Constraints: critical - CA:TRUE - Signature Algorithm: ecdsa-with-SHA384 - Signature Value: - 30:65:02:31:00:b4:d8:2f:02:89:fd:b6:4c:62:ba:43:4e:13: - 84:72:b5:ae:dd:1c:de:d6:b5:dc:56:8f:58:40:5a:2d:de:20: - 4c:22:83:ca:93:a8:7e:ee:12:40:c7:d6:87:4f:f8:df:85:02: - 30:1c:14:64:e4:7c:96:83:11:9c:b0:d1:5a:61:4b:a6:0f:49: - d3:00:fc:a1:fc:e4:a5:ff:7f:ad:d7:30:d0:c7:77:7f:be:81: - 07:55:30:50:20:14:f5:57:38:0a:a8:31:51 -SHA1 Fingerprint=B6:AF:43:C2:9B:81:53:7D:F6:EF:6B:C3:1F:1F:60:15:0C:EE:48:66 ------BEGIN CERTIFICATE----- -MIICKzCCAbGgAwIBAgIKe3G2gla4EnycqDAKBggqhkjOPQQDAzBaMQswCQYDVQQG -EwJVUzETMBEGA1UECxMKZW1TaWduIFBLSTEUMBIGA1UEChMLZU11ZGhyYSBJbmMx -IDAeBgNVBAMTF2VtU2lnbiBFQ0MgUm9vdCBDQSAtIEMzMB4XDTE4MDIxODE4MzAw -MFoXDTQzMDIxODE4MzAwMFowWjELMAkGA1UEBhMCVVMxEzARBgNVBAsTCmVtU2ln -biBQS0kxFDASBgNVBAoTC2VNdWRocmEgSW5jMSAwHgYDVQQDExdlbVNpZ24gRUND -IFJvb3QgQ0EgLSBDMzB2MBAGByqGSM49AgEGBSuBBAAiA2IABP2lYa57JhAd6bci -MK4G9IGzsUJxlTm801Ljr6/58pc1kjZGDoeVjbk5Wum739D+yAdBPLtVb4Ojavti -sIGJAnB9SMVK4+kiVCJNk7tCDK93nCOmfddhEc5lx/h//vXyqaNCMEAwHQYDVR0O -BBYEFPtaSNCAIEDyqOkAB2kZd6fmw/TPMA4GA1UdDwEB/wQEAwIBBjAPBgNVHRMB -Af8EBTADAQH/MAoGCCqGSM49BAMDA2gAMGUCMQC02C8Cif22TGK6Q04ThHK1rt0c -3ta13FaPWEBaLd4gTCKDypOofu4SQMfWh0/434UCMBwUZOR8loMRnLDRWmFLpg9J -0wD8ofzkpf9/rdcw0Md3f76BB1UwUCAU9Vc4CqgxUQ== ------END CERTIFICATE----- diff --git a/secure/caroot/trusted/emSign_Root_CA_-_C1.pem b/secure/caroot/trusted/emSign_Root_CA_-_C1.pem deleted file mode 100644 index cbcf39649fd4..000000000000 --- a/secure/caroot/trusted/emSign_Root_CA_-_C1.pem +++ /dev/null @@ -1,90 +0,0 @@ -## -## emSign Root CA - C1 -## -## This is a single X.509 certificate for a public Certificate -## Authority (CA). It was automatically extracted from Mozilla's -## root CA list (the file `certdata.txt' in security/nss) -## licensed under the MPL 2.0, http://mozilla.org/MPL/2.0/. -## -## @generated -## -Certificate: - Data: - Version: 3 (0x2) - Serial Number: - ae:cf:00:ba:c4:cf:32:f8:43:b2 - Signature Algorithm: sha256WithRSAEncryption - Issuer: C=US, OU=emSign PKI, O=eMudhra Inc, CN=emSign Root CA - C1 - Validity - Not Before: Feb 18 18:30:00 2018 GMT - Not After : Feb 18 18:30:00 2043 GMT - Subject: C=US, OU=emSign PKI, O=eMudhra Inc, CN=emSign Root CA - C1 - Subject Public Key Info: - Public Key Algorithm: rsaEncryption - Public-Key: (2048 bit) - Modulus: - 00:cf:eb:a9:b9:f1:99:05:cc:d8:28:21:4a:f3:73: - 34:51:84:56:10:f5:a0:4f:2c:12:e3:fa:13:9a:27: - d0:cf:f9:79:1a:74:5f:1d:79:39:fc:5b:f8:70:8e: - e0:92:52:f7:e4:25:f9:54:83:d9:1d:d3:c8:5a:85: - 3f:5e:c7:b6:07:ee:3e:c0:ce:9a:af:ac:56:42:2a: - 39:25:70:d6:bf:b5:7b:36:ad:ac:f6:73:dc:cd:d7: - 1d:8a:83:a5:fb:2b:90:15:37:6b:1c:26:47:dc:3b: - 29:56:93:6a:b3:c1:6a:3a:9d:3d:f5:c1:97:38:58: - 05:8b:1c:11:e3:e4:b4:b8:5d:85:1d:83:fe:78:5f: - 0b:45:68:18:48:a5:46:73:34:3b:fe:0f:c8:76:bb: - c7:18:f3:05:d1:86:f3:85:ed:e7:b9:d9:32:ad:55: - 88:ce:a6:b6:91:b0:4f:ac:7e:15:23:96:f6:3f:f0: - 20:34:16:de:0a:c6:c4:04:45:79:7f:a7:fd:be:d2: - a9:a5:af:9c:c5:23:2a:f7:3c:21:6c:bd:af:8f:4e: - c5:3a:b2:f3:34:12:fc:df:80:1a:49:a4:d4:a9:95: - f7:9e:89:5e:a2:89:ac:94:cb:a8:68:9b:af:8a:65: - 27:cd:89:ee:dd:8c:b5:6b:29:70:43:a0:69:0b:e4: - b9:0f - Exponent: 65537 (0x10001) - X509v3 extensions: - X509v3 Subject Key Identifier: - FE:A1:E0:70:1E:2A:03:39:52:5A:42:BE:5C:91:85:7A:18:AA:4D:B5 - X509v3 Key Usage: critical - Certificate Sign, CRL Sign - X509v3 Basic Constraints: critical - CA:TRUE - Signature Algorithm: sha256WithRSAEncryption - Signature Value: - c2:4a:56:fa:15:21:7b:28:a2:e9:e5:1d:fb:f8:2d:c4:39:96: - 41:4c:3b:27:2c:c4:6c:18:15:80:c6:ac:af:47:59:2f:26:0b: - e3:36:b0:ef:3b:fe:43:97:49:32:99:12:15:5b:df:11:29:ff: - ab:53:f8:bb:c1:78:0f:ac:9c:53:af:57:bd:68:8c:3d:69:33: - f0:a3:a0:23:63:3b:64:67:22:44:ad:d5:71:cb:56:2a:78:92: - a3:4f:12:31:36:36:e2:de:fe:00:c4:a3:60:0f:27:ad:a0:b0: - 8a:b5:36:7a:52:a1:bd:27:f4:20:27:62:e8:4d:94:24:13:e4: - 0a:04:e9:3c:ab:2e:c8:43:09:4a:c6:61:04:e5:49:34:7e:d3: - c4:c8:f5:0f:c0:aa:e9:ba:54:5e:f3:63:2b:4f:4f:50:d4:fe: - b9:7b:99:8c:3d:c0:2e:bc:02:2b:d3:c4:40:e4:8a:07:31:1e: - 9b:ce:26:99:13:fb:11:ea:9a:22:0c:11:19:c7:5e:1b:81:50: - 30:c8:96:12:6e:e7:cb:41:7f:91:3b:a2:47:b7:54:80:1b:dc: - 00:cc:9a:90:ea:c3:c3:50:06:62:0c:30:c0:15:48:a7:a8:59: - 7c:e1:ae:22:a2:e2:0a:7a:0f:fa:62:ab:52:4c:e1:f1:df:ca: - be:83:0d:42 -SHA1 Fingerprint=E7:2E:F1:DF:FC:B2:09:28:CF:5D:D4:D5:67:37:B1:51:CB:86:4F:01 ------BEGIN CERTIFICATE----- -MIIDczCCAlugAwIBAgILAK7PALrEzzL4Q7IwDQYJKoZIhvcNAQELBQAwVjELMAkG -A1UEBhMCVVMxEzARBgNVBAsTCmVtU2lnbiBQS0kxFDASBgNVBAoTC2VNdWRocmEg -SW5jMRwwGgYDVQQDExNlbVNpZ24gUm9vdCBDQSAtIEMxMB4XDTE4MDIxODE4MzAw -MFoXDTQzMDIxODE4MzAwMFowVjELMAkGA1UEBhMCVVMxEzARBgNVBAsTCmVtU2ln -biBQS0kxFDASBgNVBAoTC2VNdWRocmEgSW5jMRwwGgYDVQQDExNlbVNpZ24gUm9v -dCBDQSAtIEMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz+upufGZ -BczYKCFK83M0UYRWEPWgTywS4/oTmifQz/l5GnRfHXk5/Fv4cI7gklL35CX5VIPZ -HdPIWoU/Xse2B+4+wM6ar6xWQio5JXDWv7V7Nq2s9nPczdcdioOl+yuQFTdrHCZH -3DspVpNqs8FqOp099cGXOFgFixwR4+S0uF2FHYP+eF8LRWgYSKVGczQ7/g/IdrvH -GPMF0Ybzhe3nudkyrVWIzqa2kbBPrH4VI5b2P/AgNBbeCsbEBEV5f6f9vtKppa+c -xSMq9zwhbL2vj07FOrLzNBL834AaSaTUqZX3noleoomslMuoaJuvimUnzYnu3Yy1 -aylwQ6BpC+S5DwIDAQABo0IwQDAdBgNVHQ4EFgQU/qHgcB4qAzlSWkK+XJGFehiq -TbUwDgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wDQYJKoZIhvcNAQEL -BQADggEBAMJKVvoVIXsoounlHfv4LcQ5lkFMOycsxGwYFYDGrK9HWS8mC+M2sO87 -/kOXSTKZEhVb3xEp/6tT+LvBeA+snFOvV71ojD1pM/CjoCNjO2RnIkSt1XHLVip4 -kqNPEjE2NuLe/gDEo2APJ62gsIq1NnpSob0n9CAnYuhNlCQT5AoE6TyrLshDCUrG -YQTlSTR+08TI9Q/Aqum6VF7zYytPT1DU/rl7mYw9wC68AivTxEDkigcxHpvOJpkT -+xHqmiIMERnHXhuBUDDIlhJu58tBf5E7oke3VIAb3ADMmpDqw8NQBmIMMMAVSKeo -WXzhriKi4gp6D/piq1JM4fHfyr6DDUI= ------END CERTIFICATE----- diff --git a/secure/caroot/trusted/Atos_TrustedRoot_2011.pem b/secure/caroot/untrusted/Atos_TrustedRoot_2011.pem similarity index 100% rename from secure/caroot/trusted/Atos_TrustedRoot_2011.pem rename to secure/caroot/untrusted/Atos_TrustedRoot_2011.pem diff --git a/secure/caroot/untrusted/Entrust_Root_Certification_Authority.pem b/secure/caroot/untrusted/Entrust_Root_Certification_Authority.pem deleted file mode 100644 index 1a605e5a1208..000000000000 --- a/secure/caroot/untrusted/Entrust_Root_Certification_Authority.pem +++ /dev/null @@ -1,101 +0,0 @@ -## -## Entrust Root Certification Authority -## -## This is a single X.509 certificate for a public Certificate -## Authority (CA). It was automatically extracted from Mozilla's -## root CA list (the file `certdata.txt' in security/nss) -## licensed under the MPL 2.0, http://mozilla.org/MPL/2.0/. -## -## @generated -## -Certificate: - Data: - Version: 3 (0x2) - Serial Number: 1164660820 (0x456b5054) - Signature Algorithm: sha1WithRSAEncryption - Issuer: C=US, O=Entrust, Inc., OU=www.entrust.net/CPS is incorporated by reference, OU=(c) 2006 Entrust, Inc., CN=Entrust Root Certification Authority - Validity - Not Before: Nov 27 20:23:42 2006 GMT - Not After : Nov 27 20:53:42 2026 GMT - Subject: C=US, O=Entrust, Inc., OU=www.entrust.net/CPS is incorporated by reference, OU=(c) 2006 Entrust, Inc., CN=Entrust Root Certification Authority - Subject Public Key Info: - Public Key Algorithm: rsaEncryption - Public-Key: (2048 bit) - Modulus: - 00:b6:95:b6:43:42:fa:c6:6d:2a:6f:48:df:94:4c: - 39:57:05:ee:c3:79:11:41:68:36:ed:ec:fe:9a:01: - 8f:a1:38:28:fc:f7:10:46:66:2e:4d:1e:1a:b1:1a: - 4e:c6:d1:c0:95:88:b0:c9:ff:31:8b:33:03:db:b7: - 83:7b:3e:20:84:5e:ed:b2:56:28:a7:f8:e0:b9:40: - 71:37:c5:cb:47:0e:97:2a:68:c0:22:95:62:15:db: - 47:d9:f5:d0:2b:ff:82:4b:c9:ad:3e:de:4c:db:90: - 80:50:3f:09:8a:84:00:ec:30:0a:3d:18:cd:fb:fd: - 2a:59:9a:23:95:17:2c:45:9e:1f:6e:43:79:6d:0c: - 5c:98:fe:48:a7:c5:23:47:5c:5e:fd:6e:e7:1e:b4: - f6:68:45:d1:86:83:5b:a2:8a:8d:b1:e3:29:80:fe: - 25:71:88:ad:be:bc:8f:ac:52:96:4b:aa:51:8d:e4: - 13:31:19:e8:4e:4d:9f:db:ac:b3:6a:d5:bc:39:54: - 71:ca:7a:7a:7f:90:dd:7d:1d:80:d9:81:bb:59:26: - c2:11:fe:e6:93:e2:f7:80:e4:65:fb:34:37:0e:29: - 80:70:4d:af:38:86:2e:9e:7f:57:af:9e:17:ae:eb: - 1c:cb:28:21:5f:b6:1c:d8:e7:a2:04:22:f9:d3:da: - d8:cb - Exponent: 65537 (0x10001) - X509v3 extensions: - X509v3 Key Usage: critical - Certificate Sign, CRL Sign - X509v3 Basic Constraints: critical - CA:TRUE - X509v3 Private Key Usage Period: - Not Before: Nov 27 20:23:42 2006 GMT, Not After: Nov 27 20:53:42 2026 GMT - X509v3 Authority Key Identifier: - 68:90:E4:67:A4:A6:53:80:C7:86:66:A4:F1:F7:4B:43:FB:84:BD:6D - X509v3 Subject Key Identifier: - 68:90:E4:67:A4:A6:53:80:C7:86:66:A4:F1:F7:4B:43:FB:84:BD:6D - 1.2.840.113533.7.65.0: - 0...V7.1:4.0.... - Signature Algorithm: sha1WithRSAEncryption - Signature Value: - 93:d4:30:b0:d7:03:20:2a:d0:f9:63:e8:91:0c:05:20:a9:5f: - 19:ca:7b:72:4e:d4:b1:db:d0:96:fb:54:5a:19:2c:0c:08:f7: - b2:bc:85:a8:9d:7f:6d:3b:52:b3:2a:db:e7:d4:84:8c:63:f6: - 0f:cb:26:01:91:50:6c:f4:5f:14:e2:93:74:c0:13:9e:30:3a: - 50:e3:b4:60:c5:1c:f0:22:44:8d:71:47:ac:c8:1a:c9:e9:9b: - 9a:00:60:13:ff:70:7e:5f:11:4d:49:1b:b3:15:52:7b:c9:54: - da:bf:9d:95:af:6b:9a:d8:9e:e9:f1:e4:43:8d:e2:11:44:3a: - bf:af:bd:83:42:73:52:8b:aa:bb:a7:29:cf:f5:64:1c:0a:4d: - d1:bc:aa:ac:9f:2a:d0:ff:7f:7f:da:7d:ea:b1:ed:30:25:c1: - 84:da:34:d2:5b:78:83:56:ec:9c:36:c3:26:e2:11:f6:67:49: - 1d:92:ab:8c:fb:eb:ff:7a:ee:85:4a:a7:50:80:f0:a7:5c:4a: - 94:2e:5f:05:99:3c:52:41:e0:cd:b4:63:cf:01:43:ba:9c:83: - dc:8f:60:3b:f3:5a:b4:b4:7b:ae:da:0b:90:38:75:ef:81:1d: - 66:d2:f7:57:70:36:b3:bf:fc:28:af:71:25:85:5b:13:fe:1e: - 7f:5a:b4:3c -SHA1 Fingerprint=B3:1E:B1:B7:40:E3:6C:84:02:DA:DC:37:D4:4D:F5:D4:67:49:52:F9 ------BEGIN CERTIFICATE----- -MIIEkTCCA3mgAwIBAgIERWtQVDANBgkqhkiG9w0BAQUFADCBsDELMAkGA1UEBhMC -VVMxFjAUBgNVBAoTDUVudHJ1c3QsIEluYy4xOTA3BgNVBAsTMHd3dy5lbnRydXN0 -Lm5ldC9DUFMgaXMgaW5jb3Jwb3JhdGVkIGJ5IHJlZmVyZW5jZTEfMB0GA1UECxMW -KGMpIDIwMDYgRW50cnVzdCwgSW5jLjEtMCsGA1UEAxMkRW50cnVzdCBSb290IENl -cnRpZmljYXRpb24gQXV0aG9yaXR5MB4XDTA2MTEyNzIwMjM0MloXDTI2MTEyNzIw -NTM0MlowgbAxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1FbnRydXN0LCBJbmMuMTkw -NwYDVQQLEzB3d3cuZW50cnVzdC5uZXQvQ1BTIGlzIGluY29ycG9yYXRlZCBieSBy -ZWZlcmVuY2UxHzAdBgNVBAsTFihjKSAyMDA2IEVudHJ1c3QsIEluYy4xLTArBgNV -BAMTJEVudHJ1c3QgUm9vdCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTCCASIwDQYJ -KoZIhvcNAQEBBQADggEPADCCAQoCggEBALaVtkNC+sZtKm9I35RMOVcF7sN5EUFo -Nu3s/poBj6E4KPz3EEZmLk0eGrEaTsbRwJWIsMn/MYszA9u3g3s+IIRe7bJWKKf4 -4LlAcTfFy0cOlypowCKVYhXbR9n10Cv/gkvJrT7eTNuQgFA/CYqEAOwwCj0Yzfv9 -KlmaI5UXLEWeH25DeW0MXJj+SKfFI0dcXv1u5x609mhF0YaDW6KKjbHjKYD+JXGI -rb68j6xSlkuqUY3kEzEZ6E5Nn9uss2rVvDlUccp6en+Q3X0dgNmBu1kmwhH+5pPi -94DkZfs0Nw4pgHBNrziGLp5/V6+eF67rHMsoIV+2HNjnogQi+dPa2MsCAwEAAaOB -sDCBrTAOBgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zArBgNVHRAEJDAi -gA8yMDA2MTEyNzIwMjM0MlqBDzIwMjYxMTI3MjA1MzQyWjAfBgNVHSMEGDAWgBRo -kORnpKZTgMeGZqTx90tD+4S9bTAdBgNVHQ4EFgQUaJDkZ6SmU4DHhmak8fdLQ/uE -vW0wHQYJKoZIhvZ9B0EABBAwDhsIVjcuMTo0LjADAgSQMA0GCSqGSIb3DQEBBQUA -A4IBAQCT1DCw1wMgKtD5Y+iRDAUgqV8ZyntyTtSx29CW+1RaGSwMCPeyvIWonX9t -O1KzKtvn1ISMY/YPyyYBkVBs9F8U4pN0wBOeMDpQ47RgxRzwIkSNcUesyBrJ6Zua -AGAT/3B+XxFNSRuzFVJ7yVTav52Vr2ua2J7p8eRDjeIRRDq/r72DQnNSi6q7pynP -9WQcCk3RvKqsnyrQ/39/2n3qse0wJcGE2jTSW3iDVuycNsMm4hH2Z0kdkquM++v/ *** 498 LINES SKIPPED ***