@@ -1,9 +1,10 @@

 Summary:  Certificate Authority certificates 

 Name:   ca-certificates

-Version:  20170406

-Release:  3%{?dist}

+Version:  20180919

+Release:  1%{?dist}

 License:  Custom

-URL:    http://mxr.mozilla.org/mozilla/source/security/nss/lib/ckfw/builtins/

+# http://anduin.linuxfromscratch.org/BLFS/other/certdata.txt

+URL:    http://anduin.linuxfromscratch.org/BLFS/other/

 Group:    System Environment/Security

 Vendor:   VMware, Inc.

 Distribution: Photon

@@ -242,6 +243,8 @@ exit 0

 %defattr(-,root,root)

 /etc/pki/tls/certs/ca-bundle.crt

 %changelog

+* Tue Sep 25 2018 Ankit Jain <ankitja@vmware.com> 20180919-1

+- Updating mozilla certdata.txt to latest revision

 * Wed May  3 2017 Bo Gan <ganb@vmware.com> 20170406-3

 - Fixed dependency on coreutils

 * Fri Apr 14 2017 Alexey Makhalov <amakhalov@vmware.com> 20170406-2

@@ -1,4 +1,4 @@

-#CVS_ID @# $ RCSfile: certdata.txt $ $Revision: 20170406 $ $Date: $

+#CVS_ID @# $ RCSfile: certdata.txt $ $Revision: 20180919 $ $Date: $

 # 

 # This Source Code Form is subject to the terms of the Mozilla Public

 # License, v. 2.0. If a copy of the MPL was not distributed with this

@@ -70,34 +70,6 @@ CKA_PRIVATE CK_BBOOL CK_FALSE

 CKA_MODIFIABLE CK_BBOOL CK_FALSE

 CKA_LABEL UTF8 "Mozilla Builtin Roots"

-# Distrust "Distrust a pb.com certificate that does not comply with the baseline requirements."

-# Issuer: OU=Equifax Secure Certificate Authority,O=Equifax,C=US

-# Serial Number: 1407252 (0x157914)

-# Subject: CN=*.pb.com,OU=Meters,O=Pitney Bowes,L=Danbury,ST=Connecticut,C=US

-# Not Valid Before: Mon Feb 01 14:54:04 2010

-# Not Valid After : Tue Sep 30 00:00:00 2014

-# Fingerprint (MD5): 8F:46:BE:99:47:6F:93:DC:5C:01:54:50:D0:4A:BD:AC

-# Fingerprint (SHA1): 30:F1:82:CA:1A:5E:4E:4F:F3:6E:D0:E6:38:18:B8:B9:41:CB:5F:8C

-CKA_CLASS CK_OBJECT_CLASS CKO_NSS_TRUST

-CKA_TOKEN CK_BBOOL CK_TRUE

-CKA_PRIVATE CK_BBOOL CK_FALSE

-CKA_MODIFIABLE CK_BBOOL CK_FALSE

-CKA_LABEL UTF8 "Distrust a pb.com certificate that does not comply with the baseline requirements."

-CKA_ISSUER MULTILINE_OCTAL

-\060\116\061\013\060\011\006\003\125\004\006\023\002\125\123\061

-\020\060\016\006\003\125\004\012\023\007\105\161\165\151\146\141

-\170\061\055\060\053\006\003\125\004\013\023\044\105\161\165\151

-\146\141\170\040\123\145\143\165\162\145\040\103\145\162\164\151

-\146\151\143\141\164\145\040\101\165\164\150\157\162\151\164\171

-END

-CKA_SERIAL_NUMBER MULTILINE_OCTAL

-\002\003\025\171\024

-END

-CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_NOT_TRUSTED

-CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_NOT_TRUSTED

-CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_NOT_TRUSTED

-CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE

-

 #

 # Certificate "GlobalSign Root CA"

 #

@@ -192,6 +164,7 @@ CKA_VALUE MULTILINE_OCTAL

 \034\305\037\244\200\157\025\040\311\336\014\210\012\035\326\146

 \125\342\374\110\311\051\046\151\340

 END

+CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE

 # Trust for Certificate "GlobalSign Root CA"

 # Issuer: CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

@@ -226,7 +199,7 @@ CKA_SERIAL_NUMBER MULTILINE_OCTAL

 END

 CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_TRUSTED_DELEGATOR

 CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_TRUSTED_DELEGATOR

-CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_TRUSTED_DELEGATOR

+CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_MUST_VERIFY_TRUST

 CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE

 #

@@ -325,6 +298,7 @@ CKA_VALUE MULTILINE_OCTAL

 \035\111\367\252\336\225\317\040\170\302\140\022\333\045\100\214

 \152\374\176\102\070\100\144\022\367\236\201\341\223\056

 END

+CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE

 # Trust for Certificate "GlobalSign Root CA - R2"

 # Issuer: CN=GlobalSign,O=GlobalSign,OU=GlobalSign Root CA - R2

@@ -358,7 +332,7 @@ CKA_SERIAL_NUMBER MULTILINE_OCTAL

 END

 CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_TRUSTED_DELEGATOR

 CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_TRUSTED_DELEGATOR

-CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_TRUSTED_DELEGATOR

+CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_MUST_VERIFY_TRUST

 CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE

 #

@@ -480,6 +454,7 @@ CKA_VALUE MULTILINE_OCTAL

 \363\334\017\337\012\207\304\357\206\005\325\070\024\140\231\243

 \113\336\006\226\161\054\362\333\266\037\244\357\077\356

 END

+CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE

 # Trust for Certificate "Verisign Class 1 Public Primary Certification Authority - G3"

 # Issuer: CN=VeriSign Class 1 Public Primary Certification Authority - G3,OU="(c) 1999 VeriSign, Inc. - For authorized use only",OU=VeriSign Trust Network,O="VeriSign, Inc.",C=US

@@ -644,6 +619,7 @@ CKA_VALUE MULTILINE_OCTAL

 \377\343\030\174\211\213\063\135\254\063\327\247\371\332\072\125

 \311\130\020\371\252\357\132\266\317\113\113\337\052

 END

+CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE

 # Trust for Certificate "Verisign Class 2 Public Primary Certification Authority - G3"

 # Issuer: CN=VeriSign Class 2 Public Primary Certification Authority - G3,OU="(c) 1999 VeriSign, Inc. - For authorized use only",OU=VeriSign Trust Network,O="VeriSign, Inc.",C=US

@@ -808,6 +784,7 @@ CKA_VALUE MULTILINE_OCTAL

 \200\332\267\155\027\217\235\036\201\144\341\376\305\105\272\255

 \153\271\012\172\116\117\113\204\356\113\361\175\335\021

 END

+CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE

 # Trust for Certificate "Verisign Class 3 Public Primary Certification Authority - G3"

 # Issuer: CN=VeriSign Class 3 Public Primary Certification Authority - G3,OU="(c) 1999 VeriSign, Inc. - For authorized use only",OU=VeriSign Trust Network,O="VeriSign, Inc.",C=US

@@ -850,7 +827,7 @@ CKA_SERIAL_NUMBER MULTILINE_OCTAL

 END

 CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_TRUSTED_DELEGATOR

 CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_TRUSTED_DELEGATOR

-CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_TRUSTED_DELEGATOR

+CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_MUST_VERIFY_TRUST

 CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE

 # Distrust "Distrust: O=Egypt Trust, OU=VeriSign Trust Network (cert 1/3)"

@@ -1082,6 +1059,7 @@ CKA_VALUE MULTILINE_OCTAL

 \334\200\220\215\263\147\233\157\110\010\025\126\317\277\361\053

 \174\136\232\166\351\131\220\305\174\203\065\021\145\121

 END

+CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE

 # Trust for "Entrust.net Premium 2048 Secure Server CA"

 # Issuer: CN=Entrust.net Certification Authority (2048),OU=(c) 1999 Entrust.net Limited,OU=www.entrust.net/CPS_2048 incorp. by ref. (limits liab.),O=Entrust.net

@@ -1122,7 +1100,7 @@ CKA_SERIAL_NUMBER MULTILINE_OCTAL

 END

 CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_TRUSTED_DELEGATOR

 CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_TRUSTED_DELEGATOR

-CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_TRUSTED_DELEGATOR

+CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_MUST_VERIFY_TRUST

 CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE

 #

@@ -1219,6 +1197,7 @@ CKA_VALUE MULTILINE_OCTAL

 \107\322\070\056\320\376\201\334\062\152\036\265\356\074\325\374

 \347\201\035\031\303\044\102\352\143\071\251

 END

+CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE

 # Trust for Certificate "Baltimore CyberTrust Root"

 # Issuer: CN=Baltimore CyberTrust Root,OU=CyberTrust,O=Baltimore,C=IE

@@ -1362,6 +1341,7 @@ CKA_VALUE MULTILINE_OCTAL

 \213\343\161\314\036\033\040\104\010\300\172\266\100\375\304\344

 \065\341\035\026\034\320\274\053\216\326\161\331

 END

+CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE

 # Trust for Certificate "AddTrust Low-Value Services Root"

 # Issuer: CN=AddTrust Class 1 CA Root,OU=AddTrust TTP Network,O=AddTrust AB,C=SE

@@ -1395,7 +1375,7 @@ END

 CKA_SERIAL_NUMBER MULTILINE_OCTAL

 \002\001\001

 END

-CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_TRUSTED_DELEGATOR

+CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_MUST_VERIFY_TRUST

 CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_TRUSTED_DELEGATOR

 CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_MUST_VERIFY_TRUST

 CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE

@@ -1510,6 +1490,7 @@ CKA_VALUE MULTILINE_OCTAL

 \232\171\017\040\012\056\325\236\143\046\036\125\222\224\330\202

 \027\132\173\320\274\307\217\116\206\004

 END

+CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE

 # Trust for Certificate "AddTrust External Root"

 # Issuer: CN=AddTrust External CA Root,OU=AddTrust External TTP Network,O=AddTrust AB,C=SE

@@ -1546,296 +1527,7 @@ CKA_SERIAL_NUMBER MULTILINE_OCTAL

 END

 CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_TRUSTED_DELEGATOR

 CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_TRUSTED_DELEGATOR

-CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_TRUSTED_DELEGATOR

-CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE

-

-#

-# Certificate "AddTrust Public Services Root"

-#

-# Issuer: CN=AddTrust Public CA Root,OU=AddTrust TTP Network,O=AddTrust AB,C=SE

-# Serial Number: 1 (0x1)

-# Subject: CN=AddTrust Public CA Root,OU=AddTrust TTP Network,O=AddTrust AB,C=SE

-# Not Valid Before: Tue May 30 10:41:50 2000

-# Not Valid After : Sat May 30 10:41:50 2020

-# Fingerprint (MD5): C1:62:3E:23:C5:82:73:9C:03:59:4B:2B:E9:77:49:7F

-# Fingerprint (SHA1): 2A:B6:28:48:5E:78:FB:F3:AD:9E:79:10:DD:6B:DF:99:72:2C:96:E5

-CKA_CLASS CK_OBJECT_CLASS CKO_CERTIFICATE

-CKA_TOKEN CK_BBOOL CK_TRUE

-CKA_PRIVATE CK_BBOOL CK_FALSE

-CKA_MODIFIABLE CK_BBOOL CK_FALSE

-CKA_LABEL UTF8 "AddTrust Public Services Root"

-CKA_CERTIFICATE_TYPE CK_CERTIFICATE_TYPE CKC_X_509

-CKA_SUBJECT MULTILINE_OCTAL

-\060\144\061\013\060\011\006\003\125\004\006\023\002\123\105\061

-\024\060\022\006\003\125\004\012\023\013\101\144\144\124\162\165

-\163\164\040\101\102\061\035\060\033\006\003\125\004\013\023\024

-\101\144\144\124\162\165\163\164\040\124\124\120\040\116\145\164

-\167\157\162\153\061\040\060\036\006\003\125\004\003\023\027\101

-\144\144\124\162\165\163\164\040\120\165\142\154\151\143\040\103

-\101\040\122\157\157\164

-END

-CKA_ID UTF8 "0"

-CKA_ISSUER MULTILINE_OCTAL

-\060\144\061\013\060\011\006\003\125\004\006\023\002\123\105\061

-\024\060\022\006\003\125\004\012\023\013\101\144\144\124\162\165

-\163\164\040\101\102\061\035\060\033\006\003\125\004\013\023\024

-\101\144\144\124\162\165\163\164\040\124\124\120\040\116\145\164

-\167\157\162\153\061\040\060\036\006\003\125\004\003\023\027\101

-\144\144\124\162\165\163\164\040\120\165\142\154\151\143\040\103

-\101\040\122\157\157\164

-END

-CKA_SERIAL_NUMBER MULTILINE_OCTAL

-\002\001\001

-END

-CKA_VALUE MULTILINE_OCTAL

-\060\202\004\025\060\202\002\375\240\003\002\001\002\002\001\001

-\060\015\006\011\052\206\110\206\367\015\001\001\005\005\000\060

-\144\061\013\060\011\006\003\125\004\006\023\002\123\105\061\024

-\060\022\006\003\125\004\012\023\013\101\144\144\124\162\165\163

-\164\040\101\102\061\035\060\033\006\003\125\004\013\023\024\101

-\144\144\124\162\165\163\164\040\124\124\120\040\116\145\164\167

-\157\162\153\061\040\060\036\006\003\125\004\003\023\027\101\144

-\144\124\162\165\163\164\040\120\165\142\154\151\143\040\103\101

-\040\122\157\157\164\060\036\027\015\060\060\060\065\063\060\061

-\060\064\061\065\060\132\027\015\062\060\060\065\063\060\061\060

-\064\061\065\060\132\060\144\061\013\060\011\006\003\125\004\006

-\023\002\123\105\061\024\060\022\006\003\125\004\012\023\013\101

-\144\144\124\162\165\163\164\040\101\102\061\035\060\033\006\003

-\125\004\013\023\024\101\144\144\124\162\165\163\164\040\124\124

-\120\040\116\145\164\167\157\162\153\061\040\060\036\006\003\125

-\004\003\023\027\101\144\144\124\162\165\163\164\040\120\165\142

-\154\151\143\040\103\101\040\122\157\157\164\060\202\001\042\060

-\015\006\011\052\206\110\206\367\015\001\001\001\005\000\003\202

-\001\017\000\060\202\001\012\002\202\001\001\000\351\032\060\217

-\203\210\024\301\040\330\074\233\217\033\176\003\164\273\332\151

-\323\106\245\370\216\302\014\021\220\121\245\057\146\124\100\125

-\352\333\037\112\126\356\237\043\156\364\071\313\241\271\157\362

-\176\371\135\207\046\141\236\034\370\342\354\246\201\370\041\305

-\044\314\021\014\077\333\046\162\172\307\001\227\007\027\371\327

-\030\054\060\175\016\172\036\142\036\306\113\300\375\175\142\167

-\323\104\036\047\366\077\113\104\263\267\070\331\071\037\140\325

-\121\222\163\003\264\000\151\343\363\024\116\356\321\334\011\317

-\167\064\106\120\260\370\021\362\376\070\171\367\007\071\376\121

-\222\227\013\133\010\137\064\206\001\255\210\227\353\146\315\136

-\321\377\334\175\362\204\332\272\167\255\334\200\010\307\247\207

-\326\125\237\227\152\350\310\021\144\272\347\031\051\077\021\263

-\170\220\204\040\122\133\021\357\170\320\203\366\325\110\220\320

-\060\034\317\200\371\140\376\171\344\210\362\335\000\353\224\105

-\353\145\224\151\100\272\300\325\264\270\272\175\004\021\250\353

-\061\005\226\224\116\130\041\216\237\320\140\375\002\003\001\000

-\001\243\201\321\060\201\316\060\035\006\003\125\035\016\004\026

-\004\024\201\076\067\330\222\260\037\167\237\134\264\253\163\252

-\347\366\064\140\057\372\060\013\006\003\125\035\017\004\004\003

-\002\001\006\060\017\006\003\125\035\023\001\001\377\004\005\060

-\003\001\001\377\060\201\216\006\003\125\035\043\004\201\206\060

-\201\203\200\024\201\076\067\330\222\260\037\167\237\134\264\253

-\163\252\347\366\064\140\057\372\241\150\244\146\060\144\061\013

-\060\011\006\003\125\004\006\023\002\123\105\061\024\060\022\006

-\003\125\004\012\023\013\101\144\144\124\162\165\163\164\040\101

-\102\061\035\060\033\006\003\125\004\013\023\024\101\144\144\124

-\162\165\163\164\040\124\124\120\040\116\145\164\167\157\162\153

-\061\040\060\036\006\003\125\004\003\023\027\101\144\144\124\162

-\165\163\164\040\120\165\142\154\151\143\040\103\101\040\122\157

-\157\164\202\001\001\060\015\006\011\052\206\110\206\367\015\001

-\001\005\005\000\003\202\001\001\000\003\367\025\112\370\044\332

-\043\126\026\223\166\335\066\050\271\256\033\270\303\361\144\272

-\040\030\170\225\051\047\127\005\274\174\052\364\271\121\125\332

-\207\002\336\017\026\027\061\370\252\171\056\011\023\273\257\262

-\040\031\022\345\223\371\113\371\203\350\104\325\262\101\045\277

-\210\165\157\377\020\374\112\124\320\137\360\372\357\066\163\175

-\033\066\105\306\041\155\264\025\270\116\317\234\134\245\075\132

-\000\216\006\343\074\153\062\173\362\237\360\266\375\337\360\050

-\030\110\360\306\274\320\277\064\200\226\302\112\261\155\216\307

-\220\105\336\057\147\254\105\004\243\172\334\125\222\311\107\146

-\330\032\214\307\355\234\116\232\340\022\273\265\152\114\204\341

-\341\042\015\207\000\144\376\214\175\142\071\145\246\357\102\266

-\200\045\022\141\001\250\044\023\160\000\021\046\137\372\065\120

-\305\110\314\006\107\350\047\330\160\215\137\144\346\241\104\046

-\136\042\354\222\315\377\102\232\104\041\155\134\305\343\042\035

-\137\107\022\347\316\137\135\372\330\252\261\063\055\331\166\362

-\116\072\063\014\053\263\055\220\006

-END

-

-# Trust for Certificate "AddTrust Public Services Root"

-# Issuer: CN=AddTrust Public CA Root,OU=AddTrust TTP Network,O=AddTrust AB,C=SE

-# Serial Number: 1 (0x1)

-# Subject: CN=AddTrust Public CA Root,OU=AddTrust TTP Network,O=AddTrust AB,C=SE

-# Not Valid Before: Tue May 30 10:41:50 2000

-# Not Valid After : Sat May 30 10:41:50 2020

-# Fingerprint (MD5): C1:62:3E:23:C5:82:73:9C:03:59:4B:2B:E9:77:49:7F

-# Fingerprint (SHA1): 2A:B6:28:48:5E:78:FB:F3:AD:9E:79:10:DD:6B:DF:99:72:2C:96:E5

-CKA_CLASS CK_OBJECT_CLASS CKO_NSS_TRUST

-CKA_TOKEN CK_BBOOL CK_TRUE

-CKA_PRIVATE CK_BBOOL CK_FALSE

-CKA_MODIFIABLE CK_BBOOL CK_FALSE

-CKA_LABEL UTF8 "AddTrust Public Services Root"

-CKA_CERT_SHA1_HASH MULTILINE_OCTAL

-\052\266\050\110\136\170\373\363\255\236\171\020\335\153\337\231

-\162\054\226\345

-END

-CKA_CERT_MD5_HASH MULTILINE_OCTAL

-\301\142\076\043\305\202\163\234\003\131\113\053\351\167\111\177

-END

-CKA_ISSUER MULTILINE_OCTAL

-\060\144\061\013\060\011\006\003\125\004\006\023\002\123\105\061

-\024\060\022\006\003\125\004\012\023\013\101\144\144\124\162\165

-\163\164\040\101\102\061\035\060\033\006\003\125\004\013\023\024

-\101\144\144\124\162\165\163\164\040\124\124\120\040\116\145\164

-\167\157\162\153\061\040\060\036\006\003\125\004\003\023\027\101

-\144\144\124\162\165\163\164\040\120\165\142\154\151\143\040\103

-\101\040\122\157\157\164

-END

-CKA_SERIAL_NUMBER MULTILINE_OCTAL

-\002\001\001

-END

-CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_TRUSTED_DELEGATOR

-CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_TRUSTED_DELEGATOR

-CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_TRUSTED_DELEGATOR

-CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE

-

-#

-# Certificate "AddTrust Qualified Certificates Root"

-#

-# Issuer: CN=AddTrust Qualified CA Root,OU=AddTrust TTP Network,O=AddTrust AB,C=SE

-# Serial Number: 1 (0x1)

-# Subject: CN=AddTrust Qualified CA Root,OU=AddTrust TTP Network,O=AddTrust AB,C=SE

-# Not Valid Before: Tue May 30 10:44:50 2000

-# Not Valid After : Sat May 30 10:44:50 2020

-# Fingerprint (MD5): 27:EC:39:47:CD:DA:5A:AF:E2:9A:01:65:21:A9:4C:BB

-# Fingerprint (SHA1): 4D:23:78:EC:91:95:39:B5:00:7F:75:8F:03:3B:21:1E:C5:4D:8B:CF

-CKA_CLASS CK_OBJECT_CLASS CKO_CERTIFICATE

-CKA_TOKEN CK_BBOOL CK_TRUE

-CKA_PRIVATE CK_BBOOL CK_FALSE

-CKA_MODIFIABLE CK_BBOOL CK_FALSE

-CKA_LABEL UTF8 "AddTrust Qualified Certificates Root"

-CKA_CERTIFICATE_TYPE CK_CERTIFICATE_TYPE CKC_X_509

-CKA_SUBJECT MULTILINE_OCTAL

-\060\147\061\013\060\011\006\003\125\004\006\023\002\123\105\061

-\024\060\022\006\003\125\004\012\023\013\101\144\144\124\162\165

-\163\164\040\101\102\061\035\060\033\006\003\125\004\013\023\024

-\101\144\144\124\162\165\163\164\040\124\124\120\040\116\145\164

-\167\157\162\153\061\043\060\041\006\003\125\004\003\023\032\101

-\144\144\124\162\165\163\164\040\121\165\141\154\151\146\151\145

-\144\040\103\101\040\122\157\157\164

-END

-CKA_ID UTF8 "0"

-CKA_ISSUER MULTILINE_OCTAL

-\060\147\061\013\060\011\006\003\125\004\006\023\002\123\105\061

-\024\060\022\006\003\125\004\012\023\013\101\144\144\124\162\165

-\163\164\040\101\102\061\035\060\033\006\003\125\004\013\023\024

-\101\144\144\124\162\165\163\164\040\124\124\120\040\116\145\164

-\167\157\162\153\061\043\060\041\006\003\125\004\003\023\032\101

-\144\144\124\162\165\163\164\040\121\165\141\154\151\146\151\145

-\144\040\103\101\040\122\157\157\164

-END

-CKA_SERIAL_NUMBER MULTILINE_OCTAL

-\002\001\001

-END

-CKA_VALUE MULTILINE_OCTAL

-\060\202\004\036\060\202\003\006\240\003\002\001\002\002\001\001

-\060\015\006\011\052\206\110\206\367\015\001\001\005\005\000\060

-\147\061\013\060\011\006\003\125\004\006\023\002\123\105\061\024

-\060\022\006\003\125\004\012\023\013\101\144\144\124\162\165\163

-\164\040\101\102\061\035\060\033\006\003\125\004\013\023\024\101

-\144\144\124\162\165\163\164\040\124\124\120\040\116\145\164\167

-\157\162\153\061\043\060\041\006\003\125\004\003\023\032\101\144

-\144\124\162\165\163\164\040\121\165\141\154\151\146\151\145\144

-\040\103\101\040\122\157\157\164\060\036\027\015\060\060\060\065

-\063\060\061\060\064\064\065\060\132\027\015\062\060\060\065\063

-\060\061\060\064\064\065\060\132\060\147\061\013\060\011\006\003

-\125\004\006\023\002\123\105\061\024\060\022\006\003\125\004\012

-\023\013\101\144\144\124\162\165\163\164\040\101\102\061\035\060

-\033\006\003\125\004\013\023\024\101\144\144\124\162\165\163\164

-\040\124\124\120\040\116\145\164\167\157\162\153\061\043\060\041

-\006\003\125\004\003\023\032\101\144\144\124\162\165\163\164\040

-\121\165\141\154\151\146\151\145\144\040\103\101\040\122\157\157

-\164\060\202\001\042\060\015\006\011\052\206\110\206\367\015\001

-\001\001\005\000\003\202\001\017\000\060\202\001\012\002\202\001

-\001\000\344\036\232\376\334\011\132\207\244\237\107\276\021\137

-\257\204\064\333\142\074\171\170\267\351\060\265\354\014\034\052

-\304\026\377\340\354\161\353\212\365\021\156\355\117\015\221\322

-\022\030\055\111\025\001\302\244\042\023\307\021\144\377\042\022

-\232\271\216\134\057\010\317\161\152\263\147\001\131\361\135\106

-\363\260\170\245\366\016\102\172\343\177\033\314\320\360\267\050

-\375\052\352\236\263\260\271\004\252\375\366\307\264\261\270\052

-\240\373\130\361\031\240\157\160\045\176\076\151\112\177\017\042

-\330\357\255\010\021\232\051\231\341\252\104\105\232\022\136\076

-\235\155\122\374\347\240\075\150\057\360\113\160\174\023\070\255

-\274\025\045\361\326\316\253\242\300\061\326\057\237\340\377\024

-\131\374\204\223\331\207\174\114\124\023\353\237\321\055\021\370

-\030\072\072\336\045\331\367\323\100\355\244\006\022\304\073\341

-\221\301\126\065\360\024\334\145\066\011\156\253\244\007\307\065

-\321\302\003\063\066\133\165\046\155\102\361\022\153\103\157\113

-\161\224\372\064\035\355\023\156\312\200\177\230\057\154\271\145

-\330\351\002\003\001\000\001\243\201\324\060\201\321\060\035\006

-\003\125\035\016\004\026\004\024\071\225\213\142\213\134\311\324

-\200\272\130\017\227\077\025\010\103\314\230\247\060\013\006\003

-\125\035\017\004\004\003\002\001\006\060\017\006\003\125\035\023

-\001\001\377\004\005\060\003\001\001\377\060\201\221\006\003\125

-\035\043\004\201\211\060\201\206\200\024\071\225\213\142\213\134

-\311\324\200\272\130\017\227\077\025\010\103\314\230\247\241\153

-\244\151\060\147\061\013\060\011\006\003\125\004\006\023\002\123

-\105\061\024\060\022\006\003\125\004\012\023\013\101\144\144\124

-\162\165\163\164\040\101\102\061\035\060\033\006\003\125\004\013

-\023\024\101\144\144\124\162\165\163\164\040\124\124\120\040\116

-\145\164\167\157\162\153\061\043\060\041\006\003\125\004\003\023

-\032\101\144\144\124\162\165\163\164\040\121\165\141\154\151\146

-\151\145\144\040\103\101\040\122\157\157\164\202\001\001\060\015

-\006\011\052\206\110\206\367\015\001\001\005\005\000\003\202\001

-\001\000\031\253\165\352\370\213\145\141\225\023\272\151\004\357

-\206\312\023\240\307\252\117\144\033\077\030\366\250\055\054\125

-\217\005\267\060\352\102\152\035\300\045\121\055\247\277\014\263

-\355\357\010\177\154\074\106\032\352\030\103\337\166\314\371\146

-\206\234\054\150\365\351\027\370\061\263\030\304\326\110\175\043

-\114\150\301\176\273\001\024\157\305\331\156\336\273\004\102\152

-\370\366\134\175\345\332\372\207\353\015\065\122\147\320\236\227

-\166\005\223\077\225\307\001\346\151\125\070\177\020\141\231\311

-\343\137\246\312\076\202\143\110\252\342\010\110\076\252\362\262

-\205\142\246\264\247\331\275\067\234\150\265\055\126\175\260\267

-\077\240\261\007\326\351\117\334\336\105\161\060\062\177\033\056

-\011\371\277\122\241\356\302\200\076\006\134\056\125\100\301\033

-\365\160\105\260\334\135\372\366\162\132\167\322\143\315\317\130

-\211\000\102\143\077\171\071\320\104\260\202\156\101\031\350\335

-\340\301\210\132\321\036\161\223\037\044\060\164\345\036\250\336

-\074\047\067\177\203\256\236\167\317\360\060\261\377\113\231\350

-\306\241

-END

-

-# Trust for Certificate "AddTrust Qualified Certificates Root"

-# Issuer: CN=AddTrust Qualified CA Root,OU=AddTrust TTP Network,O=AddTrust AB,C=SE

-# Serial Number: 1 (0x1)

-# Subject: CN=AddTrust Qualified CA Root,OU=AddTrust TTP Network,O=AddTrust AB,C=SE

-# Not Valid Before: Tue May 30 10:44:50 2000

-# Not Valid After : Sat May 30 10:44:50 2020

-# Fingerprint (MD5): 27:EC:39:47:CD:DA:5A:AF:E2:9A:01:65:21:A9:4C:BB

-# Fingerprint (SHA1): 4D:23:78:EC:91:95:39:B5:00:7F:75:8F:03:3B:21:1E:C5:4D:8B:CF

-CKA_CLASS CK_OBJECT_CLASS CKO_NSS_TRUST

-CKA_TOKEN CK_BBOOL CK_TRUE

-CKA_PRIVATE CK_BBOOL CK_FALSE

-CKA_MODIFIABLE CK_BBOOL CK_FALSE

-CKA_LABEL UTF8 "AddTrust Qualified Certificates Root"

-CKA_CERT_SHA1_HASH MULTILINE_OCTAL

-\115\043\170\354\221\225\071\265\000\177\165\217\003\073\041\036

-\305\115\213\317

-END

-CKA_CERT_MD5_HASH MULTILINE_OCTAL

-\047\354\071\107\315\332\132\257\342\232\001\145\041\251\114\273

-END

-CKA_ISSUER MULTILINE_OCTAL

-\060\147\061\013\060\011\006\003\125\004\006\023\002\123\105\061

-\024\060\022\006\003\125\004\012\023\013\101\144\144\124\162\165

-\163\164\040\101\102\061\035\060\033\006\003\125\004\013\023\024

-\101\144\144\124\162\165\163\164\040\124\124\120\040\116\145\164

-\167\157\162\153\061\043\060\041\006\003\125\004\003\023\032\101

-\144\144\124\162\165\163\164\040\121\165\141\154\151\146\151\145

-\144\040\103\101\040\122\157\157\164

-END

-CKA_SERIAL_NUMBER MULTILINE_OCTAL

-\002\001\001

-END

-CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_TRUSTED_DELEGATOR

-CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_TRUSTED_DELEGATOR

-CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_TRUSTED_DELEGATOR

+CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_MUST_VERIFY_TRUST

 CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE

 #

@@ -1962,6 +1654,7 @@ CKA_VALUE MULTILINE_OCTAL

 \322\367\127\160\066\263\277\374\050\257\161\045\205\133\023\376

 \036\177\132\264\074

 END

+CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE

 # Trust for Certificate "Entrust Root Certification Authority"

 # Issuer: CN=Entrust Root Certification Authority,OU="(c) 2006 Entrust, Inc.",OU=www.entrust.net/CPS is incorporated by reference,O="Entrust, Inc.",C=US

@@ -2095,6 +1788,7 @@ CKA_VALUE MULTILINE_OCTAL

 \331\027\264\321\343\121\053\136\165\350\325\320\334\117\064\355

 \302\005\146\200\241\313\346\063

 END

+CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE

 # Trust for Certificate "GeoTrust Global CA"

 # Issuer: CN=GeoTrust Global CA,O=GeoTrust Inc.,C=US

@@ -2128,134 +1822,7 @@ CKA_SERIAL_NUMBER MULTILINE_OCTAL

 END

 CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_TRUSTED_DELEGATOR

 CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_TRUSTED_DELEGATOR

-CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_TRUSTED_DELEGATOR

-CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE

-

-#

-# Certificate "GeoTrust Global CA 2"

-#

-# Issuer: CN=GeoTrust Global CA 2,O=GeoTrust Inc.,C=US

-# Serial Number: 1 (0x1)

-# Subject: CN=GeoTrust Global CA 2,O=GeoTrust Inc.,C=US

-# Not Valid Before: Thu Mar 04 05:00:00 2004

-# Not Valid After : Mon Mar 04 05:00:00 2019

-# Fingerprint (MD5): 0E:40:A7:6C:DE:03:5D:8F:D1:0F:E4:D1:8D:F9:6C:A9

-# Fingerprint (SHA1): A9:E9:78:08:14:37:58:88:F2:05:19:B0:6D:2B:0D:2B:60:16:90:7D

-CKA_CLASS CK_OBJECT_CLASS CKO_CERTIFICATE

-CKA_TOKEN CK_BBOOL CK_TRUE

-CKA_PRIVATE CK_BBOOL CK_FALSE

-CKA_MODIFIABLE CK_BBOOL CK_FALSE

-CKA_LABEL UTF8 "GeoTrust Global CA 2"

-CKA_CERTIFICATE_TYPE CK_CERTIFICATE_TYPE CKC_X_509

-CKA_SUBJECT MULTILINE_OCTAL

-\060\104\061\013\060\011\006\003\125\004\006\023\002\125\123\061

-\026\060\024\006\003\125\004\012\023\015\107\145\157\124\162\165

-\163\164\040\111\156\143\056\061\035\060\033\006\003\125\004\003

-\023\024\107\145\157\124\162\165\163\164\040\107\154\157\142\141

-\154\040\103\101\040\062

-END

-CKA_ID UTF8 "0"

-CKA_ISSUER MULTILINE_OCTAL

-\060\104\061\013\060\011\006\003\125\004\006\023\002\125\123\061

-\026\060\024\006\003\125\004\012\023\015\107\145\157\124\162\165

-\163\164\040\111\156\143\056\061\035\060\033\006\003\125\004\003

-\023\024\107\145\157\124\162\165\163\164\040\107\154\157\142\141

-\154\040\103\101\040\062

-END

-CKA_SERIAL_NUMBER MULTILINE_OCTAL

-\002\001\001

-END

-CKA_VALUE MULTILINE_OCTAL

-\060\202\003\146\060\202\002\116\240\003\002\001\002\002\001\001

-\060\015\006\011\052\206\110\206\367\015\001\001\005\005\000\060

-\104\061\013\060\011\006\003\125\004\006\023\002\125\123\061\026

-\060\024\006\003\125\004\012\023\015\107\145\157\124\162\165\163

-\164\040\111\156\143\056\061\035\060\033\006\003\125\004\003\023

-\024\107\145\157\124\162\165\163\164\040\107\154\157\142\141\154

-\040\103\101\040\062\060\036\027\015\060\064\060\063\060\064\060

-\065\060\060\060\060\132\027\015\061\071\060\063\060\064\060\065

-\060\060\060\060\132\060\104\061\013\060\011\006\003\125\004\006

-\023\002\125\123\061\026\060\024\006\003\125\004\012\023\015\107

-\145\157\124\162\165\163\164\040\111\156\143\056\061\035\060\033

-\006\003\125\004\003\023\024\107\145\157\124\162\165\163\164\040

-\107\154\157\142\141\154\040\103\101\040\062\060\202\001\042\060

-\015\006\011\052\206\110\206\367\015\001\001\001\005\000\003\202

-\001\017\000\060\202\001\012\002\202\001\001\000\357\074\115\100

-\075\020\337\073\123\000\341\147\376\224\140\025\076\205\210\361

-\211\015\220\310\050\043\231\005\350\053\040\235\306\363\140\106

-\330\301\262\325\214\061\331\334\040\171\044\201\277\065\062\374

-\143\151\333\261\052\153\356\041\130\362\010\351\170\313\157\313

-\374\026\122\310\221\304\377\075\163\336\261\076\247\302\175\146

-\301\365\176\122\044\032\342\325\147\221\320\202\020\327\170\113

-\117\053\102\071\275\144\055\100\240\260\020\323\070\110\106\210

-\241\014\273\072\063\052\142\230\373\000\235\023\131\177\157\073

-\162\252\356\246\017\206\371\005\141\352\147\177\014\067\226\213

-\346\151\026\107\021\302\047\131\003\263\246\140\302\041\100\126

-\372\240\307\175\072\023\343\354\127\307\263\326\256\235\211\200

-\367\001\347\054\366\226\053\023\015\171\054\331\300\344\206\173

-\113\214\014\162\202\212\373\027\315\000\154\072\023\074\260\204

-\207\113\026\172\051\262\117\333\035\324\013\363\146\067\275\330

-\366\127\273\136\044\172\270\074\213\271\372\222\032\032\204\236

-\330\164\217\252\033\177\136\364\376\105\042\041\002\003\001\000

-\001\243\143\060\141\060\017\006\003\125\035\023\001\001\377\004

-\005\060\003\001\001\377\060\035\006\003\125\035\016\004\026\004

-\024\161\070\066\362\002\061\123\107\053\156\272\145\106\251\020

-\025\130\040\005\011\060\037\006\003\125\035\043\004\030\060\026

-\200\024\161\070\066\362\002\061\123\107\053\156\272\145\106\251

-\020\025\130\040\005\011\060\016\006\003\125\035\017\001\001\377

-\004\004\003\002\001\206\060\015\006\011\052\206\110\206\367\015

-\001\001\005\005\000\003\202\001\001\000\003\367\265\053\253\135

-\020\374\173\262\262\136\254\233\016\176\123\170\131\076\102\004

-\376\165\243\255\254\201\116\327\002\213\136\304\055\310\122\166

-\307\054\037\374\201\062\230\321\113\306\222\223\063\065\061\057

-\374\330\035\104\335\340\201\177\235\351\213\341\144\221\142\013

-\071\010\214\254\164\235\131\331\172\131\122\227\021\271\026\173

-\157\105\323\226\331\061\175\002\066\017\234\073\156\317\054\015

-\003\106\105\353\240\364\177\110\104\306\010\100\314\336\033\160

-\265\051\255\272\213\073\064\145\165\033\161\041\035\054\024\012

-\260\226\225\270\326\352\362\145\373\051\272\117\352\221\223\164

-\151\266\362\377\341\032\320\014\321\166\205\313\212\045\275\227

-\136\054\157\025\231\046\347\266\051\377\042\354\311\002\307\126

-\000\315\111\271\263\154\173\123\004\032\342\250\311\252\022\005

-\043\302\316\347\273\004\002\314\300\107\242\344\304\051\057\133

-\105\127\211\121\356\074\353\122\010\377\007\065\036\237\065\152

-\107\112\126\230\321\132\205\037\214\365\042\277\253\316\203\363

-\342\042\051\256\175\203\100\250\272\154

-END

-

-# Trust for Certificate "GeoTrust Global CA 2"

-# Issuer: CN=GeoTrust Global CA 2,O=GeoTrust Inc.,C=US

-# Serial Number: 1 (0x1)

-# Subject: CN=GeoTrust Global CA 2,O=GeoTrust Inc.,C=US

-# Not Valid Before: Thu Mar 04 05:00:00 2004

-# Not Valid After : Mon Mar 04 05:00:00 2019

-# Fingerprint (MD5): 0E:40:A7:6C:DE:03:5D:8F:D1:0F:E4:D1:8D:F9:6C:A9

-# Fingerprint (SHA1): A9:E9:78:08:14:37:58:88:F2:05:19:B0:6D:2B:0D:2B:60:16:90:7D

-CKA_CLASS CK_OBJECT_CLASS CKO_NSS_TRUST

-CKA_TOKEN CK_BBOOL CK_TRUE

-CKA_PRIVATE CK_BBOOL CK_FALSE

-CKA_MODIFIABLE CK_BBOOL CK_FALSE

-CKA_LABEL UTF8 "GeoTrust Global CA 2"

-CKA_CERT_SHA1_HASH MULTILINE_OCTAL

-\251\351\170\010\024\067\130\210\362\005\031\260\155\053\015\053

-\140\026\220\175

-END

-CKA_CERT_MD5_HASH MULTILINE_OCTAL

-\016\100\247\154\336\003\135\217\321\017\344\321\215\371\154\251

-END

-CKA_ISSUER MULTILINE_OCTAL

-\060\104\061\013\060\011\006\003\125\004\006\023\002\125\123\061

-\026\060\024\006\003\125\004\012\023\015\107\145\157\124\162\165

-\163\164\040\111\156\143\056\061\035\060\033\006\003\125\004\003

-\023\024\107\145\157\124\162\165\163\164\040\107\154\157\142\141

-\154\040\103\101\040\062

-END

-CKA_SERIAL_NUMBER MULTILINE_OCTAL

-\002\001\001

-END

-CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_TRUSTED_DELEGATOR

-CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_TRUSTED_DELEGATOR

-CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_TRUSTED_DELEGATOR

+CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_MUST_VERIFY_TRUST

 CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE

 #

@@ -2381,6 +1948,7 @@ CKA_VALUE MULTILINE_OCTAL

 \247\110\301\134\220\017\313\310\077\372\346\062\341\215\033\157

 \244\346\216\330\371\051\110\212\316\163\376\054

 END

+CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE

 # Trust for Certificate "GeoTrust Universal CA"

 # Issuer: CN=GeoTrust Universal CA,O=GeoTrust Inc.,C=US

@@ -2414,7 +1982,7 @@ CKA_SERIAL_NUMBER MULTILINE_OCTAL

 END

 CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_TRUSTED_DELEGATOR

 CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_TRUSTED_DELEGATOR

-CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_TRUSTED_DELEGATOR

+CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_MUST_VERIFY_TRUST

 CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE

 #

@@ -2540,6 +2108,7 @@ CKA_VALUE MULTILINE_OCTAL

 \370\351\242\054\114\246\321\046\137\176\257\132\114\332\037\246

 \362\034\054\176\256\002\026\322\126\320\057\127\123\107\350\222

 END

+CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE

 # Trust for Certificate "GeoTrust Universal CA 2"

 # Issuer: CN=GeoTrust Universal CA 2,O=GeoTrust Inc.,C=US

@@ -2573,7 +2142,7 @@ CKA_SERIAL_NUMBER MULTILINE_OCTAL

 END

 CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_TRUSTED_DELEGATOR

 CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_TRUSTED_DELEGATOR

-CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_TRUSTED_DELEGATOR

+CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_MUST_VERIFY_TRUST

 CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE

 #

@@ -2676,6 +2245,7 @@ CKA_VALUE MULTILINE_OCTAL

 \337\337\063\234\317\343\255\256\216\324\216\346\117\121\257\026

 \222\340\134\366\007\017

 END

+CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE

 # Trust for Certificate "Visa eCommerce Root"

 # Issuer: CN=Visa eCommerce Root,OU=Visa International Service Association,O=VISA,C=US

@@ -2712,7 +2282,7 @@ CKA_SERIAL_NUMBER MULTILINE_OCTAL

 END

 CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_TRUSTED_DELEGATOR

 CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_TRUSTED_DELEGATOR

-CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_TRUSTED_DELEGATOR

+CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_MUST_VERIFY_TRUST

 CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE

 #

@@ -2798,6 +2368,7 @@ CKA_VALUE MULTILINE_OCTAL

 \355\200\316\211\100\110\152\016\065\312\051\146\025\041\224\054

 \350\140\052\233\205\112\100\363\153\212\044\354\006\026\054\163

 END

+CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE

 # Trust for Certificate "Certum Root CA"

 # Issuer: CN=Certum CA,O=Unizeto Sp. z o.o.,C=PL

@@ -2828,9 +2399,9 @@ END

 CKA_SERIAL_NUMBER MULTILINE_OCTAL

 \002\003\001\000\040

 END

-CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_TRUSTED_DELEGATOR

+CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_MUST_VERIFY_TRUST

 CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_TRUSTED_DELEGATOR

-CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_TRUSTED_DELEGATOR

+CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_MUST_VERIFY_TRUST

 CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE

 #

@@ -2943,6 +2514,7 @@ CKA_VALUE MULTILINE_OCTAL

 \262\143\342\365\142\054\202\324\152\000\101\120\361\071\203\237

 \225\351\066\226\230\156

 END

+CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE

 # Trust for Certificate "Comodo AAA Services root"

 # Issuer: CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

@@ -2979,310 +2551,7 @@ CKA_SERIAL_NUMBER MULTILINE_OCTAL

 END

 CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_TRUSTED_DELEGATOR

 CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_TRUSTED_DELEGATOR

-CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_TRUSTED_DELEGATOR

-CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE

-

-#

-# Certificate "Comodo Secure Services root"

-#

-# Issuer: CN=Secure Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

-# Serial Number: 1 (0x1)

-# Subject: CN=Secure Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

-# Not Valid Before: Thu Jan 01 00:00:00 2004

-# Not Valid After : Sun Dec 31 23:59:59 2028

-# Fingerprint (MD5): D3:D9:BD:AE:9F:AC:67:24:B3:C8:1B:52:E1:B9:A9:BD

-# Fingerprint (SHA1): 4A:65:D5:F4:1D:EF:39:B8:B8:90:4A:4A:D3:64:81:33:CF:C7:A1:D1

-CKA_CLASS CK_OBJECT_CLASS CKO_CERTIFICATE

-CKA_TOKEN CK_BBOOL CK_TRUE

-CKA_PRIVATE CK_BBOOL CK_FALSE

-CKA_MODIFIABLE CK_BBOOL CK_FALSE

-CKA_LABEL UTF8 "Comodo Secure Services root"

-CKA_CERTIFICATE_TYPE CK_CERTIFICATE_TYPE CKC_X_509

-CKA_SUBJECT MULTILINE_OCTAL

-\060\176\061\013\060\011\006\003\125\004\006\023\002\107\102\061

-\033\060\031\006\003\125\004\010\014\022\107\162\145\141\164\145

-\162\040\115\141\156\143\150\145\163\164\145\162\061\020\060\016

-\006\003\125\004\007\014\007\123\141\154\146\157\162\144\061\032

-\060\030\006\003\125\004\012\014\021\103\157\155\157\144\157\040

-\103\101\040\114\151\155\151\164\145\144\061\044\060\042\006\003

-\125\004\003\014\033\123\145\143\165\162\145\040\103\145\162\164

-\151\146\151\143\141\164\145\040\123\145\162\166\151\143\145\163

-END

-CKA_ID UTF8 "0"

-CKA_ISSUER MULTILINE_OCTAL

-\060\176\061\013\060\011\006\003\125\004\006\023\002\107\102\061

-\033\060\031\006\003\125\004\010\014\022\107\162\145\141\164\145

-\162\040\115\141\156\143\150\145\163\164\145\162\061\020\060\016

-\006\003\125\004\007\014\007\123\141\154\146\157\162\144\061\032

-\060\030\006\003\125\004\012\014\021\103\157\155\157\144\157\040

-\103\101\040\114\151\155\151\164\145\144\061\044\060\042\006\003

-\125\004\003\014\033\123\145\143\165\162\145\040\103\145\162\164

-\151\146\151\143\141\164\145\040\123\145\162\166\151\143\145\163

-END

-CKA_SERIAL_NUMBER MULTILINE_OCTAL

-\002\001\001

-END

-CKA_VALUE MULTILINE_OCTAL

-\060\202\004\077\060\202\003\047\240\003\002\001\002\002\001\001

-\060\015\006\011\052\206\110\206\367\015\001\001\005\005\000\060

-\176\061\013\060\011\006\003\125\004\006\023\002\107\102\061\033

-\060\031\006\003\125\004\010\014\022\107\162\145\141\164\145\162

-\040\115\141\156\143\150\145\163\164\145\162\061\020\060\016\006

-\003\125\004\007\014\007\123\141\154\146\157\162\144\061\032\060

-\030\006\003\125\004\012\014\021\103\157\155\157\144\157\040\103

-\101\040\114\151\155\151\164\145\144\061\044\060\042\006\003\125

-\004\003\014\033\123\145\143\165\162\145\040\103\145\162\164\151

-\146\151\143\141\164\145\040\123\145\162\166\151\143\145\163\060

-\036\027\015\060\064\060\061\060\061\060\060\060\060\060\060\132

-\027\015\062\070\061\062\063\061\062\063\065\071\065\071\132\060

-\176\061\013\060\011\006\003\125\004\006\023\002\107\102\061\033

-\060\031\006\003\125\004\010\014\022\107\162\145\141\164\145\162

-\040\115\141\156\143\150\145\163\164\145\162\061\020\060\016\006

-\003\125\004\007\014\007\123\141\154\146\157\162\144\061\032\060

-\030\006\003\125\004\012\014\021\103\157\155\157\144\157\040\103

-\101\040\114\151\155\151\164\145\144\061\044\060\042\006\003\125

-\004\003\014\033\123\145\143\165\162\145\040\103\145\162\164\151

-\146\151\143\141\164\145\040\123\145\162\166\151\143\145\163\060

-\202\001\042\060\015\006\011\052\206\110\206\367\015\001\001\001

-\005\000\003\202\001\017\000\060\202\001\012\002\202\001\001\000

-\300\161\063\202\212\320\160\353\163\207\202\100\325\035\344\313

-\311\016\102\220\371\336\064\271\241\272\021\364\045\205\363\314

-\162\155\362\173\227\153\263\007\361\167\044\221\137\045\217\366

-\164\075\344\200\302\370\074\015\363\277\100\352\367\310\122\321

-\162\157\357\310\253\101\270\156\056\027\052\225\151\014\315\322

-\036\224\173\055\224\035\252\165\327\263\230\313\254\274\144\123

-\100\274\217\254\254\066\313\134\255\273\335\340\224\027\354\321

-\134\320\277\357\245\225\311\220\305\260\254\373\033\103\337\172

-\010\135\267\270\362\100\033\053\047\236\120\316\136\145\202\210

-\214\136\323\116\014\172\352\010\221\266\066\252\053\102\373\352

-\302\243\071\345\333\046\070\255\213\012\356\031\143\307\034\044

-\337\003\170\332\346\352\301\107\032\013\013\106\011\335\002\374

-\336\313\207\137\327\060\143\150\241\256\334\062\241\272\276\376

-\104\253\150\266\245\027\025\375\275\325\247\247\232\344\104\063

-\351\210\216\374\355\121\353\223\161\116\255\001\347\104\216\253

-\055\313\250\376\001\111\110\360\300\335\307\150\330\222\376\075

-\002\003\001\000\001\243\201\307\060\201\304\060\035\006\003\125

-\035\016\004\026\004\024\074\330\223\210\302\300\202\011\314\001

-\231\006\223\040\351\236\160\011\143\117\060\016\006\003\125\035

-\017\001\001\377\004\004\003\002\001\006\060\017\006\003\125\035

-\023\001\001\377\004\005\060\003\001\001\377\060\201\201\006\003

-\125\035\037\004\172\060\170\060\073\240\071\240\067\206\065\150

-\164\164\160\072\057\057\143\162\154\056\143\157\155\157\144\157

-\143\141\056\143\157\155\057\123\145\143\165\162\145\103\145\162

-\164\151\146\151\143\141\164\145\123\145\162\166\151\143\145\163

-\056\143\162\154\060\071\240\067\240\065\206\063\150\164\164\160

-\072\057\057\143\162\154\056\143\157\155\157\144\157\056\156\145

-\164\057\123\145\143\165\162\145\103\145\162\164\151\146\151\143

-\141\164\145\123\145\162\166\151\143\145\163\056\143\162\154\060

-\015\006\011\052\206\110\206\367\015\001\001\005\005\000\003\202

-\001\001\000\207\001\155\043\035\176\133\027\175\301\141\062\317

-\217\347\363\212\224\131\146\340\236\050\250\136\323\267\364\064

-\346\252\071\262\227\026\305\202\157\062\244\351\214\347\257\375

-\357\302\350\271\113\252\243\364\346\332\215\145\041\373\272\200

-\353\046\050\205\032\376\071\214\336\133\004\004\264\124\371\243

-\147\236\101\372\011\122\314\005\110\250\311\077\041\004\036\316

-\110\153\374\205\350\302\173\257\177\267\314\370\137\072\375\065

-\306\015\357\227\334\114\253\021\341\153\313\061\321\154\373\110

-\200\253\334\234\067\270\041\024\113\015\161\075\354\203\063\156

-\321\156\062\026\354\230\307\026\213\131\246\064\253\005\127\055

-\223\367\252\023\313\322\023\342\267\056\073\315\153\120\027\011

-\150\076\265\046\127\356\266\340\266\335\271\051\200\171\175\217

-\243\360\244\050\244\025\304\205\364\047\324\153\277\345\134\344

-\145\002\166\124\264\343\067\146\044\323\031\141\310\122\020\345

-\213\067\232\271\251\371\035\277\352\231\222\141\226\377\001\315

-\241\137\015\274\161\274\016\254\013\035\107\105\035\301\354\174

-\354\375\051

-END

-

-# Trust for Certificate "Comodo Secure Services root"

-# Issuer: CN=Secure Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

-# Serial Number: 1 (0x1)

-# Subject: CN=Secure Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

-# Not Valid Before: Thu Jan 01 00:00:00 2004

-# Not Valid After : Sun Dec 31 23:59:59 2028

-# Fingerprint (MD5): D3:D9:BD:AE:9F:AC:67:24:B3:C8:1B:52:E1:B9:A9:BD

-# Fingerprint (SHA1): 4A:65:D5:F4:1D:EF:39:B8:B8:90:4A:4A:D3:64:81:33:CF:C7:A1:D1

-CKA_CLASS CK_OBJECT_CLASS CKO_NSS_TRUST

-CKA_TOKEN CK_BBOOL CK_TRUE

-CKA_PRIVATE CK_BBOOL CK_FALSE

-CKA_MODIFIABLE CK_BBOOL CK_FALSE

-CKA_LABEL UTF8 "Comodo Secure Services root"

-CKA_CERT_SHA1_HASH MULTILINE_OCTAL

-\112\145\325\364\035\357\071\270\270\220\112\112\323\144\201\063

-\317\307\241\321

-END

-CKA_CERT_MD5_HASH MULTILINE_OCTAL

-\323\331\275\256\237\254\147\044\263\310\033\122\341\271\251\275

-END

-CKA_ISSUER MULTILINE_OCTAL

-\060\176\061\013\060\011\006\003\125\004\006\023\002\107\102\061

-\033\060\031\006\003\125\004\010\014\022\107\162\145\141\164\145

-\162\040\115\141\156\143\150\145\163\164\145\162\061\020\060\016

-\006\003\125\004\007\014\007\123\141\154\146\157\162\144\061\032

-\060\030\006\003\125\004\012\014\021\103\157\155\157\144\157\040

-\103\101\040\114\151\155\151\164\145\144\061\044\060\042\006\003

-\125\004\003\014\033\123\145\143\165\162\145\040\103\145\162\164

-\151\146\151\143\141\164\145\040\123\145\162\166\151\143\145\163

-END

-CKA_SERIAL_NUMBER MULTILINE_OCTAL

-\002\001\001

-END

-CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_TRUSTED_DELEGATOR

-CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_TRUSTED_DELEGATOR

-CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_TRUSTED_DELEGATOR

-CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE

-

-#

-# Certificate "Comodo Trusted Services root"

-#

-# Issuer: CN=Trusted Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

-# Serial Number: 1 (0x1)

-# Subject: CN=Trusted Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

-# Not Valid Before: Thu Jan 01 00:00:00 2004

-# Not Valid After : Sun Dec 31 23:59:59 2028

-# Fingerprint (MD5): 91:1B:3F:6E:CD:9E:AB:EE:07:FE:1F:71:D2:B3:61:27

-# Fingerprint (SHA1): E1:9F:E3:0E:8B:84:60:9E:80:9B:17:0D:72:A8:C5:BA:6E:14:09:BD

-CKA_CLASS CK_OBJECT_CLASS CKO_CERTIFICATE

-CKA_TOKEN CK_BBOOL CK_TRUE

-CKA_PRIVATE CK_BBOOL CK_FALSE

-CKA_MODIFIABLE CK_BBOOL CK_FALSE

-CKA_LABEL UTF8 "Comodo Trusted Services root"

-CKA_CERTIFICATE_TYPE CK_CERTIFICATE_TYPE CKC_X_509

-CKA_SUBJECT MULTILINE_OCTAL

-\060\177\061\013\060\011\006\003\125\004\006\023\002\107\102\061

-\033\060\031\006\003\125\004\010\014\022\107\162\145\141\164\145

-\162\040\115\141\156\143\150\145\163\164\145\162\061\020\060\016

-\006\003\125\004\007\014\007\123\141\154\146\157\162\144\061\032

-\060\030\006\003\125\004\012\014\021\103\157\155\157\144\157\040

-\103\101\040\114\151\155\151\164\145\144\061\045\060\043\006\003

-\125\004\003\014\034\124\162\165\163\164\145\144\040\103\145\162

-\164\151\146\151\143\141\164\145\040\123\145\162\166\151\143\145

-\163

-END

-CKA_ID UTF8 "0"