Release date:
2026-10-22 20:44:01 UTC
Description:
- update to CKBI 2.92 from NSS 3.131.1
- updated certificates:
- # Certificate "OISTE Server Root RSA G1"
- # Certificate "Amazon Root CA 1"
- # Certificate "Amazon Root CA 2"
- # Certificate "Amazon Root CA 3"
- # Certificate "Amazon Root CA 4"
- # Certificate "GlobalSign ECC Root CA - R4"
- # Certificate "GTS Root R1"
- # Certificate "GTS Root R3"
- # Certificate "GTS Root R4"
- # Certificate "TrustAsia Global Root CA G3"
- # Certificate "TrustAsia Global Root CA G4"
- removed certificates:
- # Certificate "CFCA GT CA"
- # Certificate "E-Tugra Global Root CA ECC v3"
- # Certificate "E-Tugra Global Root CA RSA v3"
- # Certificate "GeoTrust Primary Certification Authority"
- # Certificate "GeoTrust Primary Certification Authority - G2"
- # Certificate "GeoTrust Primary Certification Authority - G3"
- # Certificate "GeoTrust Universal CA"
- # Certificate "GeoTrust Universal CA 2"
- # Certificate "VeriSign Class 2 Public Primary Certification Authority - G3"
- # Certificate "VeriSign Class 3 Public Primary Certification Authority - G3"
- # Certificate "VeriSign Class 3 Public Primary Certification Authority - G4"
- # Certificate "VeriSign Class 3 Public Primary Certification Authority - G5"
- # Certificate "VeriSign Universal Root Certification Authority"
- # Certificate "emSign ECC Root CA - G3"
- # Certificate "thawte Primary Root CA"
- # Certificate "thawte Primary Root CA - G2"
- # Certificate "thawte Primary Root CA - G3"
- added certificates:
- # Certificate "e-Szigno TLS Root CA 2023"
- # Certificate "SecureSign Root CA16"
- # Certificate "SECOM TLS RSA Root CA 2024"
- # Certificate "SECOM TLS ECC Root CA 2024"
- # Certificate "SECOM SMIME RSA Root CA 2024"
- # Certificate "Telia EC Email Root CA v3"
- # Certificate "Telia EC TLS Root CA v3"
- # Certificate "Telia RSA Email Root CA v3"
- # Certificate "Telia RSA TLS Root CA v3"
- distrusted certificates:
- # Certificate "AC Raíz Certicámara S.A."
- # Certificate "ACEDICOM Root"
- # Certificate "AffirmTrust Networking"
- # Certificate "America Online Root Certification Authority 1"
- # Certificate "CA Disig Root R1"
- # Certificate "Certinomis - Autorité Racine"
- # Certificate "ComSign CA"
- # Certificate "ComSign Secured CA"
- # Certificate "EC-ACC"
- # Certificate "EE Certification Centre Root CA"
- # Certificate "Entrust Root Certification Authority"
- # Certificate "Hellenic Academic and Research Institutions RootCA 2011"
- # Certificate "S-TRUST Authentication and Encryption Root CA 2005:PN"
- # Certificate "Secure Global CA"
- # Certificate "SecureSign RootCA11"
- # Certificate "SecureTrust CA"
- # Certificate "SECOM Trust Systems CO.,LTD."
- # Certificate "SwissSign Platinum CA - G2"
- # Certificate "SwissSign Silver CA - G2"
- # Certificate "TeliaSonera Root CA v1"
- # Certificate "XRamp Global CA Root"
- # Certificate "certSIGN ROOT CA"
- # Certificate "ePKI Root Certification Authority"
- no longer trusted for TLS server authentication:
- # Certificate "QuoVadis Root CA 2"
- # Certificate "QuoVadis Root CA 3"
- # Certificate "DigiCert Assured ID Root CA"
- # Certificate "DigiCert Global Root CA"
- # Certificate "DigiCert High Assurance EV Root CA"
- # Certificate "SwissSign Gold CA - G2"
- # Certificate "COMODO Certification Authority"
- # Certificate "Certigna"
- # Certificate "Atos TrustedRoot 2011"
- # Certificate "Entrust Root Certification Authority - G2"
- # Certificate "Entrust Root Certification Authority - EC1"
- # Certificate "GTS Root R2"
Updated packages:
-
ca-certificates-2026.2.92_v8.0.303-71.0.1.el7_9.tuxcare.els1.noarch.rpm
sha:a2f82356d8eb0273b5774ac49b63110ad725d4e981b82c8461df3d452f9a3b01
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.