- update to CKBI 2.92 from NSS 3.131.1 - updated certificates: - # Certificate "Izenpe.com" - # Certificate "GlobalSign Root CA" - # Certificate "Entrust.net Premium 2048 Secure Server CA" - # Certificate "Certum Root CA" - # Certificate "Comodo AAA Services root" - # Certificate "Go Daddy Class 2 CA" - # Certificate "Starfield Class 2 CA" - # Certificate "COMODO ECC Certification Authority" - # Certificate "OISTE WISeKey Global Root GA CA" - # Certificate "NetLock Arany (Class Gold) Főtanúsítvány" - # Certificate "Microsec e-Szigno Root CA 2009" - # Certificate "GlobalSign Root CA - R3" - # Certificate "Go Daddy Root Certificate Authority - G2" - # Certificate "Starfield Root Certificate Authority - G2" - # Certificate "Starfield Services Root Certificate Authority - G2" - # Certificate "Certum Trusted Network CA" - # Certificate "TWCA Root Certification Authority" - # Certificate "Security Communication RootCA2" - # Certificate "Actalis Authentication Root CA" - # Certificate "D-TRUST Root Class 3 CA 2 2009" - # Certificate "D-TRUST Root Class 3 CA 2 EV 2009" - # Certificate "CA Disig Root R2" - # Certificate "ACCVRAIZ1" - # Certificate "TWCA Global Root CA" - # Certificate "QuoVadis Root CA 1 G3" - # Certificate "QuoVadis Root CA 2 G3" - # Certificate "QuoVadis Root CA 3 G3" - # Certificate "DigiCert Assured ID Root G2" - # Certificate "DigiCert Assured ID Root G3" - # Certificate "DigiCert Global Root G2" - # Certificate "DigiCert Global Root G3" - # Certificate "DigiCert Trusted Root G4" - # Certificate "COMODO RSA Certification Authority" - # Certificate "USERTrust RSA Certification Authority" - # Certificate "USERTrust ECC Certification Authority" - # Certificate "GlobalSign ECC Root CA - R5" - # Certificate "IdenTrust Commercial Root CA 1" - # Certificate "CFCA EV ROOT" - # Certificate "OISTE WISeKey Global Root GB CA" - # Certificate "Certum Trusted Network CA 2" - # Certificate "Hellenic Academic and Research Institutions RootCA 2015" - # Certificate "Hellenic Academic and Research Institutions ECC RootCA 2015" - # Certificate "AC RAIZ FNMT-RCM" - # Certificate "Amazon Root CA 1" - # Certificate "Amazon Root CA 2" - # Certificate "Amazon Root CA 3" - # Certificate "Amazon Root CA 4" - # Certificate "GDCA TrustAUTH R5 ROOT" - # Certificate "SSL.com Root Certification Authority RSA" - # Certificate "SSL.com Root Certification Authority ECC" - # Certificate "SSL.com EV Root Certification Authority RSA R2" - # Certificate "SSL.com EV Root Certification Authority ECC" - # Certificate "GlobalSign Root CA - R6" - # Certificate "OISTE WISeKey Global Root GC CA" - # Certificate "UCA Global G2 Root" - # Certificate "UCA Extended Validation Root" - # Certificate "Certigna Root CA" - # Certificate "Entrust Root Certification Authority - G4" - # Certificate "e-Szigno Root CA 2017" - # Certificate "Certum EC-384 CA" - # Certificate "Certum Trusted Root CA" - # Certificate "Autoridad de Certificacion Firmaprofesional CIF A62634068" - # Certificate "GlobalSign ECC Root CA - R4" - # Certificate "GTS Root R1" - # Certificate "GTS Root R3" - # Certificate "GTS Root R4" - # Certificate "Security Communication ECC RootCA1" - # Certificate "TrustAsia Global Root CA G3" - # Certificate "TrustAsia Global Root CA G4" - removed certificates: - # Certificate "Certification Authority of WoSign G2" - # Certificate "CA WoSign ECC Root" - # Certificate "CCA India 2015 SPL" - # Certificate "A-Trust-Root-05" - # Certificate "A-Trust-Qual-02" - # Certificate "Certification Authority of WoSign" - # Certificate "CA 沃通根证书" - # Certificate "E-Tugra Certification Authority" - # Certificate "ADOCA02" - # Certificate "StartCom Certification Authority G2" - # Certificate "CFCA GT CA" - # Certificate "Macao Post eSignTrust Root Certification Authority (G02)" - # Certificate "Autoridade Certificadora Raiz Brasileira v2" - # Certificate "LuxTrust Global Root" - # Certificate "AC1 RAIZ MTIN" - # Certificate "CCA India 2011" - # Certificate "China Internet Network Information Center EV Certificates Root" - # Certificate "SITHS CA v3" - # Certificate "ANF Server CA" - # Certificate "KEYNECTIS ROOT CA" - # Certificate "I.CA - Standard Certification Authority, 09/2009" - # Certificate "I.CA - Qualified Certification Authority, 09/2009" - # Certificate "VI Registru Centras RCSC (RootCA)" - # Certificate "Autoridade Certificadora Raiz Brasileira v1" - # Certificate "Actalis Authentication CA G1" - # Certificate "A-Trust-Qual-03" - # Certificate "AddTrust External CA Root" - # Certificate "StartCom Certification Authority" - # Certificate "Autoridad Certificadora Raiz de la Secretaria de Economia" - # Certificate "Chambers of Commerce Root - 2008" - # Certificate "Global Chambersign Root - 2008" - # Certificate "CNNIC ROOT" - # Certificate "Staat der Nederlanden Root CA - G2" - # Certificate "CA Disig" - # Certificate "I.CA - Qualified root certificate" - # Certificate "I.CA - Standard root certificate" - # Certificate "e-Guven Kok Elektronik Sertifika Hizmet Saglayicisi" - # Certificate "Japanese Government" - # Certificate "AdminCA-CD-T01" - # Certificate "Admin-Root-CA" - # Certificate "TÜBİTAK UEKAE Kök Sertifika Hizmet Sağlayıcısı - Sürüm 3" - # Certificate "Halcom CA FO" - # Certificate "Halcom CA PO 2" - # Certificate "ACNLB" - # Certificate "state-institutions" - # Certificate "D-TRUST Root Class 2 CA 2007" - # Certificate "D-TRUST Root Class 3 CA 2007" - # Certificate "Root CA Generalitat Valenciana" - # Certificate "EBG Elektronik Sertifika Hizmet Sağlayıcısı" - # Certificate "VAS Latvijas Pasts SSI(RCA)" - # Certificate "ANCERT Certificados CGN" - # Certificate "ANCERT Certificados Notariales" - # Certificate "ANCERT Corporaciones de Derecho Publico" - # Certificate "Certipost E-Trust TOP Root CA" - # Certificate "Certipost E-Trust Primary Qualified CA" - # Certificate "Certipost E-Trust Primary Normalised CA" - # Certificate "Cybertrust Global Root" - # Certificate "GlobalSign" - # Certificate "IGC/A" - # Certificate "Swisscom Root CA 1" - # Certificate "Microsec e-Szigno Root CA" - # Certificate "LGPKI" - # Certificate "A-Trust-nQual-03" - # Certificate "KISA RootCA 1" - # Certificate "NetLock Minositett Kozjegyzoi (Class QA) Tanusitvanykiado" - # Certificate "Staat der Nederlanden Root CA" - # Certificate "Juur-SK" - # Certificate "SECOM Trust.net" - # Certificate "Chambers of Commerce Root" - # Certificate "Global Chambersign Root" - # Certificate "GeoTrust Global CA" - # Certificate "GeoTrust Global CA 2" - # Certificate "QuoVadis Root Certification Authority" - # Certificate "Sonera Class2 CA" - # Certificate "Baltimore CyberTrust Root" - # Certificate "VeriSign, Inc." - # Certificate "Microsoft Root Authority" - # Certificate "Microsoft Root Certificate Authority" - # Certificate "GTE CyberTrust Global Root" - # Certificate "Thawte Server CA" - # Certificate "Thawte Premium Server CA" - # Certificate "Equifax Secure Global eBusiness CA-1" - # Certificate "Equifax" - # Certificate "Class 1 Primary CA" - # Certificate "UTN-USERFirst-Object" - # Certificate "CHAMBERS OF COMMERCE ROOT - 2016" - # Certificate "E-Tugra Global Root CA ECC v3" - # Certificate "E-Tugra Global Root CA RSA v3" - # Certificate "GeoTrust Primary Certification Authority" - # Certificate "GeoTrust Primary Certification Authority - G2" - # Certificate "GeoTrust Primary Certification Authority - G3" - # Certificate "GeoTrust Universal CA" - # Certificate "GeoTrust Universal CA 2" - # Certificate "VeriSign Class 2 Public Primary Certification Authority - G3" - # Certificate "VeriSign Class 3 Public Primary Certification Authority - G3" - # Certificate "VeriSign Class 3 Public Primary Certification Authority - G4" - # Certificate "VeriSign Class 3 Public Primary Certification Authority - G5" - # Certificate "VeriSign Universal Root Certification Authority" - # Certificate "emSign ECC Root CA - G3" - # Certificate "thawte Primary Root CA" - # Certificate "thawte Primary Root CA - G2" - # Certificate "thawte Primary Root CA - G3" - added certificates: - # Certificate "OISTE Client Root ECC G1" - # Certificate "OISTE Client Root RSA G1" - # Certificate "OISTE Server Root ECC G1" - # Certificate "OISTE Server Root RSA G1" - # Certificate "e-Szigno TLS Root CA 2023" - # Certificate "SecureSign Root CA16" - # Certificate "SECOM TLS RSA Root CA 2024" - # Certificate "SECOM TLS ECC Root CA 2024" - # Certificate "SECOM SMIME RSA Root CA 2024" - # Certificate "Telia EC Email Root CA v3" - # Certificate "Telia EC TLS Root CA v3" - # Certificate "Telia RSA Email Root CA v3" - # Certificate "Telia RSA TLS Root CA v3" - distrusted certificates: - # Certificate "AC Raíz Certicámara S.A." - # Certificate "ACEDICOM Root" - # Certificate "AffirmTrust Networking" - # Certificate "America Online Root Certification Authority 1" - # Certificate "CA Disig Root R1" - # Certificate "Certinomis - Autorité Racine" - # Certificate "ComSign CA" - # Certificate "ComSign Secured CA" - # Certificate "EC-ACC" - # Certificate "EE Certification Centre Root CA" - # Certificate "Entrust Root Certification Authority" - # Certificate "Hellenic Academic and Research Institutions RootCA 2011" - # Certificate "S-TRUST Authentication and Encryption Root CA 2005:PN" - # Certificate "Secure Global CA" - # Certificate "SecureSign RootCA11" - # Certificate "SecureTrust CA" - # Certificate "SECOM Trust Systems CO.,LTD." - # Certificate "SwissSign Platinum CA - G2" - # Certificate "SwissSign Silver CA - G2" - # Certificate "TeliaSonera Root CA v1" - # Certificate "XRamp Global CA Root" - # Certificate "certSIGN ROOT CA" - # Certificate "ePKI Root Certification Authority" - no longer trusted for TLS server authentication: - # Certificate "QuoVadis Root CA 2" - # Certificate "QuoVadis Root CA 3" - # Certificate "DigiCert Assured ID Root CA" - # Certificate "DigiCert Global Root CA" - # Certificate "DigiCert High Assurance EV Root CA" - # Certificate "SwissSign Gold CA - G2" - # Certificate "COMODO Certification Authority" - # Certificate "Certigna" - # Certificate "Atos TrustedRoot 2011" - # Certificate "Entrust Root Certification Authority - G2" - # Certificate "Entrust Root Certification Authority - EC1" - # Certificate "GTS Root R2"