diff --git a/ca-certificates/PKGBUILD b/ca-certificates/PKGBUILD index 8b0f8204..f204e844 100644 --- a/ca-certificates/PKGBUILD +++ b/ca-certificates/PKGBUILD @@ -1,8 +1,8 @@ # Maintainer: Alexey Pavlov pkgname=ca-certificates -pkgver=20141019 -pkgrel=2 +pkgver=20150426 +pkgrel=1 pkgdesc='Common CA certificates' arch=('any') url='http://www.mozilla.org/projects/security/certs/' @@ -10,19 +10,21 @@ license=('MPL' 'GPL') source=("http://ftp.debian.org/debian/pool/main/c/${pkgname}/${pkgname}_${pkgver}.tar.xz" 'CAcert.org_root.crt::http://www.cacert.org/certs/root.crt' 'CAcert.org_class3.crt::http://www.cacert.org/certs/class3.crt' + 'StartSSL.sub.class1.server.ca.pem'::'http://www.startssl.com/certs/sub.class1.server.ca.pem' 'certdata2pem-redhat.patch' - 'diff-from-upstream-2.2.patch' + 'diff-from-upstream-2.3.patch' 'trust-fixes' 'update-ca-trust' 'update-ca-trust.8') depends=('bash' 'openssl' 'findutils' 'coreutils' 'sed' 'p11-kit') makedepends=('asciidoc' 'python2' 'libxslt' 'sed' 'grep') install='ca-certificates.install' -sha256sums=('684902d3f4e9ad27829f4af0d9d2d588afed03667997579b9c2be86fcd1eb73a' +sha256sums=('37dbaa93ed64cc4ae93ac295f9248fbc741bd51376438cfb1257f17efab5494f' 'c0e0773a79dceb622ef6410577c19c1e177fb2eb9c623a49340de3c9f1de2560' 'f5badaa5da1cc05b110a9492455a2c2790d00c7175dcf3a7bcb5441af71bf84f' + '4eed32f02c1321685e08a06e104d69aa69bb5f1e2e9c251dc8d7e0b4c6e24a5e' '4b44df3a92438555e347f74a2b2da3670eaae3c38b349308fff5fb6b80b938aa' - 'ac5fb6d6ecd77668a4fff8a90ec35e719d39eaf456a89c8edc219d5d21b35fcf' + '5f7981a4bea23ac5e3726b64cc65f79863567b75fc0f8d671ee3db6dd54400a2' 'eeebba0de2635ba4115c05b2acc95d475d47aa58796bb0868203805212f50381' '75ef2f4b0fddd2ca3c69b234a6abb66fd732e4af96814b65dcedb0dd52018381' 'a73c6430e734178b9aa4d303709470383bc2b1cfbeb0d44fe34615df812f479d') @@ -33,7 +35,7 @@ prepare() { cp ${srcdir}/update-ca-trust sbin/ cp ${srcdir}/update-ca-trust.8 sbin/ patch -p1 -i ${srcdir}/certdata2pem-redhat.patch - patch -p1 -i ${srcdir}/diff-from-upstream-2.2.patch + patch -p0 -i ${srcdir}/diff-from-upstream-2.3.patch sed "s|/usr/bin/python|/usr/bin/python2|g" -i mozilla/certdata2pem.py } @@ -68,80 +70,87 @@ EOF > info.trust > info.notrust + # Add custom certificate + echo '# alias="StartCom Class 1 Primary Intermediate Server CA"' > StartSSL.sub.class1.server.ca.crt + echo '# trust=CKA_TRUST_CODE_SIGNING CKA_TRUST_EMAIL_PROTECTION CKA_TRUST_SERVER_AUTH' >> StartSSL.sub.class1.server.ca.crt + echo '# distrust=' >> StartSSL.sub.class1.server.ca.crt + echo '# openssl-trust=codeSigning emailProtection serverAuth' >> StartSSL.sub.class1.server.ca.crt + cat "${srcdir}/StartSSL.sub.class1.server.ca.pem" >> StartSSL.sub.class1.server.ca.crt + local f= for f in *.crt do - echo "processing $f" - tbits=`sed -n '/^# openssl-trust/{s/^.*=//;p;}' $f` - distbits=`sed -n '/^# openssl-distrust/{s/^.*=//;p;}' $f` - alias=`sed -n '/^# alias=/{s/^.*=//;p;q;}' $f | sed "s/'//g" | sed 's/"//g'` + echo "processing ${f}" + tbits=`sed -n '/^# openssl-trust/{s/^.*=//;p;}' ${f}` + distbits=`sed -n '/^# openssl-distrust/{s/^.*=//;p;}' ${f}` + alias=`sed -n '/^# alias=/{s/^.*=//;p;q;}' ${f} | sed "s/'//g" | sed 's/"//g'` targs="" - if [ -n "$tbits" ] + if [ -n "${tbits}" ] then - for t in $tbits + for t in ${tbits} do - targs="${targs} -addtrust $t" + targs="${targs} -addtrust ${t}" done fi - if [ -n "$distbits" ] + if [ -n "${distbits}" ] then - for t in $distbits + for t in ${distbits} do - targs="${targs} -addreject $t" + targs="${targs} -addreject ${t}" done fi - if [ -n "$targs" ] + if [ -n "${targs}" ] then - echo "trust flags $targs for $f" >> info.trust - openssl x509 -text -in "$f" -trustout $targs -setalias "$alias" >> ${srcdir}/${pkgname}-${pkgver}/ca-bundle.trust.crt + echo "trust flags ${targs} for ${f}" >> info.trust + openssl x509 -text -in "${f}" -trustout ${targs} -setalias "${alias}" >> ${srcdir}/${pkgname}-${pkgver}/ca-bundle.trust.crt else - echo "no trust flags for $f" >> tee -a info.notrust + echo "no trust flags for ${f}" >> tee -a info.notrust # p11-kit-trust defines empty trust lists as "rejected for all purposes". # That's why we use the simple file format # (BEGIN CERTIFICATE, no trust information) # because p11-kit-trust will treat it as a certificate with neutral trust. # This means we cannot use the -setalias feature for neutral trust certs. - openssl x509 -text -in "$f" >> ${srcdir}/${pkgname}-${pkgver}/ca-bundle.neutral-trust.crt + openssl x509 -text -in "${f}" >> ${srcdir}/${pkgname}-${pkgver}/ca-bundle.neutral-trust.crt fi done - + for f in legacy-enable/*.crt; do - echo "processing $f" - tbits=`sed -n '/^# openssl-trust/{s/^.*=//;p;}' $f` + echo "processing ${f}" + tbits=`sed -n '/^# openssl-trust/{s/^.*=//;p;}' ${f}` alias=`sed -n '/^# alias=/{s/^.*=//;p;q;}' $f | sed "s/'//g" | sed 's/"//g'` targs="" - if [ -n "$tbits" ]; then + if [ -n "${tbits}" ]; then for t in $tbits; do - targs="${targs} -addtrust $t" + targs="${targs} -addtrust ${t}" done fi - if [ -n "$targs" ]; then - echo "legacy enable flags $targs for $f" >> info.trust - openssl x509 -text -in "$f" -trustout $targs -setalias "$alias" >> ${srcdir}/${pkgname}-${pkgver}/ca-bundle.legacy.enable.crt + if [ -n "${targs}" ]; then + echo "legacy enable flags $targs for ${f}" >> info.trust + openssl x509 -text -in "${f}" -trustout ${targs} -setalias "${alias}" >> ${srcdir}/${pkgname}-${pkgver}/ca-bundle.legacy.enable.crt fi done for f in legacy-disable/*.crt; do - echo "processing $f" - tbits=`sed -n '/^# openssl-trust/{s/^.*=//;p;}' $f` + echo "processing ${f}" + tbits=`sed -n '/^# openssl-trust/{s/^.*=//;p;}' ${f}` alias=`sed -n '/^# alias=/{s/^.*=//;p;q;}' $f | sed "s/'//g" | sed 's/"//g'` targs="" - if [ -n "$tbits" ]; then - for t in $tbits; do - targs="${targs} -addtrust $t" + if [ -n "${tbits}" ]; then + for t in ${tbits}; do + targs="${targs} -addtrust ${t}" done fi - if [ -n "$targs" ]; then - echo "legacy disable flags $targs for $f" >> info.trust - openssl x509 -text -in "$f" -trustout $targs -setalias "$alias" >> ${srcdir}/${pkgname}-${pkgver}/ca-bundle.legacy.disable.crt + if [ -n "${targs}" ]; then + echo "legacy disable flags $targs for ${f}" >> info.trust + openssl x509 -text -in "${f}" -trustout ${targs} -setalias "${alias}" >> ${srcdir}/${pkgname}-${pkgver}/ca-bundle.legacy.disable.crt fi done - local P11FILES=`find . -name *.p11-kit | wc -l` - if [ $P11FILES -ne 0 ]; then + local P11FILES=`find . -name "*.p11-kit" | wc -l` + if [ ${P11FILES} -ne 0 ]; then for p in *.p11-kit; do - cat "$p" >> ${srcdir}/${pkgname}-${pkgver}/ca-bundle.supplement.p11-kit + cat "${p}" >> ${srcdir}/${pkgname}-${pkgver}/ca-bundle.supplement.p11-kit done fi cat trust-fixes >> ${srcdir}/${pkgname}-${pkgver}/ca-bundle.supplement.p11-kit @@ -181,6 +190,6 @@ package() { cp -f ${pkgdir}/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem ${pkgdir}/usr/ssl/cert.pem cp -f ${pkgdir}/etc/pki/ca-trust/extracted/openssl/ca-bundle.trust.crt ${pkgdir}/usr/ssl/certs/ca-bundle.trust.crt - install -t "$pkgdir/etc/pki/ca-trust/source/anchors" -m644 ${srcdir}/CAcert.org_root.crt - install -t "$pkgdir/etc/pki/ca-trust/source/anchors" -m644 ${srcdir}/CAcert.org_class3.crt + install -t "${pkgdir}/etc/pki/ca-trust/source/anchors" -m644 ${srcdir}/CAcert.org_root.crt + install -t "${pkgdir}/etc/pki/ca-trust/source/anchors" -m644 ${srcdir}/CAcert.org_class3.crt } diff --git a/ca-certificates/diff-from-upstream-2.2.patch b/ca-certificates/diff-from-upstream-2.3.patch similarity index 65% rename from ca-certificates/diff-from-upstream-2.2.patch rename to ca-certificates/diff-from-upstream-2.3.patch index 8dba8ddb..588bbaa0 100644 --- a/ca-certificates/diff-from-upstream-2.2.patch +++ b/ca-certificates/diff-from-upstream-2.3.patch @@ -1,273 +1,471 @@ ---- a-certificates/mozilla/certdata.txt.orig 2014-10-16 21:05:24.000000000 +0400 -+++ a-certificates/mozilla/certdata.txt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mozilla/certdata-2.3.txt 2015-03-17 00:03:37.000000000 +0100 ++++ mozilla/certdata.txt 2015-03-20 22:02:52.672993593 +0100 +@@ -23,100 +23,515 @@ + # CKA_SUBJECT DER+base64 (varies) + # CKA_ID byte array (varies) + # CKA_ISSUER DER+base64 (varies) + # CKA_SERIAL_NUMBER DER+base64 (varies) + # CKA_VALUE DER+base64 (varies) + # CKA_NSS_EMAIL ASCII7 (unused here) + # + # Trust + # + # -- Attribute -- -- type -- -- value -- + # CKA_CLASS CK_OBJECT_CLASS CKO_TRUST + # CKA_TOKEN CK_BBOOL CK_TRUE + # CKA_PRIVATE CK_BBOOL CK_FALSE + # CKA_MODIFIABLE CK_BBOOL CK_FALSE + # CKA_LABEL UTF8 (varies) + # CKA_ISSUER DER+base64 (varies) + # CKA_SERIAL_NUMBER DER+base64 (varies) + # CKA_CERT_HASH binary+base64 (varies) + # CKA_EXPIRES CK_DATE (not used here) + # CKA_TRUST_DIGITAL_SIGNATURE CK_TRUST (varies) + # CKA_TRUST_NON_REPUDIATION CK_TRUST (varies) + # CKA_TRUST_KEY_ENCIPHERMENT CK_TRUST (varies) + # CKA_TRUST_DATA_ENCIPHERMENT CK_TRUST (varies) + # CKA_TRUST_KEY_AGREEMENT CK_TRUST (varies) + # CKA_TRUST_KEY_CERT_SIGN CK_TRUST (varies) + # CKA_TRUST_CRL_SIGN CK_TRUST (varies) + # CKA_TRUST_SERVER_AUTH CK_TRUST (varies) + # CKA_TRUST_CLIENT_AUTH CK_TRUST (varies) + # CKA_TRUST_CODE_SIGNING CK_TRUST (varies) + # CKA_TRUST_EMAIL_PROTECTION CK_TRUST (varies) + # CKA_TRUST_IPSEC_END_SYSTEM CK_TRUST (varies) + # CKA_TRUST_IPSEC_TUNNEL CK_TRUST (varies) + # CKA_TRUST_IPSEC_USER CK_TRUST (varies) + # CKA_TRUST_TIME_STAMPING CK_TRUST (varies) + # CKA_TRUST_STEP_UP_APPROVED CK_BBOOL (varies) + # (other trust attributes can be defined) + # - # Trust for Certificate "GTE CyberTrust Global Root" - # Issuer: CN=GTE CyberTrust Global Root,OU="GTE CyberTrust Solutions, Inc.",O=GTE Corporation,C=US - # Serial Number: 421 (0x1a5) - # Subject: CN=GTE CyberTrust Global Root,OU="GTE CyberTrust Solutions, Inc.",O=GTE Corporation,C=US - # Not Valid Before: Thu Aug 13 00:29:00 1998 - # Not Valid After : Mon Aug 13 23:59:00 2018 - # Fingerprint (MD5): CA:3D:D3:68:F1:03:5C:D0:32:FA:B8:2B:59:E8:5A:DB - # Fingerprint (SHA1): 97:81:79:50:D8:1C:96:70:CC:34:D8:09:CF:79:44:31:36:7E:F4:74 - CKA_CLASS CK_OBJECT_CLASS CKO_NSS_TRUST + # + # The object to tell NSS that this is a root list and we don't + # have to go looking for others. + # + BEGINDATA + CKA_CLASS CK_OBJECT_CLASS CKO_NSS_BUILTIN_ROOT_LIST CKA_TOKEN CK_BBOOL CK_TRUE CKA_PRIVATE CK_BBOOL CK_FALSE CKA_MODIFIABLE CK_BBOOL CK_FALSE - CKA_LABEL UTF8 "GTE CyberTrust Global Root" - CKA_CERT_SHA1_HASH MULTILINE_OCTAL - \227\201\171\120\330\034\226\160\314\064\330\011\317\171\104\061 - \066\176\364\164 - END - CKA_CERT_MD5_HASH MULTILINE_OCTAL - \312\075\323\150\361\003\134\320\062\372\270\053\131\350\132\333 - END - CKA_ISSUER MULTILINE_OCTAL - \060\165\061\013\060\011\006\003\125\004\006\023\002\125\123\061 - \030\060\026\006\003\125\004\012\023\017\107\124\105\040\103\157 - \162\160\157\162\141\164\151\157\156\061\047\060\045\006\003\125 - \004\013\023\036\107\124\105\040\103\171\142\145\162\124\162\165 - \163\164\040\123\157\154\165\164\151\157\156\163\054\040\111\156 - \143\056\061\043\060\041\006\003\125\004\003\023\032\107\124\105 - \040\103\171\142\145\162\124\162\165\163\164\040\107\154\157\142 - \141\154\040\122\157\157\164 - END - CKA_SERIAL_NUMBER MULTILINE_OCTAL - \002\002\001\245 - END + CKA_LABEL UTF8 "Mozilla Builtin Roots" + + # ++# Certificate "GTE CyberTrust Global Root" ++# ++# Issuer: CN=GTE CyberTrust Global Root,OU="GTE CyberTrust Solutions, Inc.",O=GTE Corporation,C=US ++# Serial Number: 421 (0x1a5) ++# Subject: CN=GTE CyberTrust Global Root,OU="GTE CyberTrust Solutions, Inc.",O=GTE Corporation,C=US ++# Not Valid Before: Thu Aug 13 00:29:00 1998 ++# Not Valid After : Mon Aug 13 23:59:00 2018 ++# Fingerprint (MD5): CA:3D:D3:68:F1:03:5C:D0:32:FA:B8:2B:59:E8:5A:DB ++# Fingerprint (SHA1): 97:81:79:50:D8:1C:96:70:CC:34:D8:09:CF:79:44:31:36:7E:F4:74 ++CKA_CLASS CK_OBJECT_CLASS CKO_CERTIFICATE ++CKA_TOKEN CK_BBOOL CK_TRUE ++CKA_PRIVATE CK_BBOOL CK_FALSE ++CKA_MODIFIABLE CK_BBOOL CK_FALSE ++CKA_LABEL UTF8 "GTE CyberTrust Global Root" ++CKA_CERTIFICATE_TYPE CK_CERTIFICATE_TYPE CKC_X_509 ++CKA_SUBJECT MULTILINE_OCTAL ++\060\165\061\013\060\011\006\003\125\004\006\023\002\125\123\061 ++\030\060\026\006\003\125\004\012\023\017\107\124\105\040\103\157 ++\162\160\157\162\141\164\151\157\156\061\047\060\045\006\003\125 ++\004\013\023\036\107\124\105\040\103\171\142\145\162\124\162\165 ++\163\164\040\123\157\154\165\164\151\157\156\163\054\040\111\156 ++\143\056\061\043\060\041\006\003\125\004\003\023\032\107\124\105 ++\040\103\171\142\145\162\124\162\165\163\164\040\107\154\157\142 ++\141\154\040\122\157\157\164 ++END ++CKA_ID UTF8 "0" ++CKA_ISSUER MULTILINE_OCTAL ++\060\165\061\013\060\011\006\003\125\004\006\023\002\125\123\061 ++\030\060\026\006\003\125\004\012\023\017\107\124\105\040\103\157 ++\162\160\157\162\141\164\151\157\156\061\047\060\045\006\003\125 ++\004\013\023\036\107\124\105\040\103\171\142\145\162\124\162\165 ++\163\164\040\123\157\154\165\164\151\157\156\163\054\040\111\156 ++\143\056\061\043\060\041\006\003\125\004\003\023\032\107\124\105 ++\040\103\171\142\145\162\124\162\165\163\164\040\107\154\157\142 ++\141\154\040\122\157\157\164 ++END ++CKA_SERIAL_NUMBER MULTILINE_OCTAL ++\002\002\001\245 ++END ++CKA_VALUE MULTILINE_OCTAL ++\060\202\002\132\060\202\001\303\002\002\001\245\060\015\006\011 ++\052\206\110\206\367\015\001\001\004\005\000\060\165\061\013\060 ++\011\006\003\125\004\006\023\002\125\123\061\030\060\026\006\003 ++\125\004\012\023\017\107\124\105\040\103\157\162\160\157\162\141 ++\164\151\157\156\061\047\060\045\006\003\125\004\013\023\036\107 ++\124\105\040\103\171\142\145\162\124\162\165\163\164\040\123\157 ++\154\165\164\151\157\156\163\054\040\111\156\143\056\061\043\060 ++\041\006\003\125\004\003\023\032\107\124\105\040\103\171\142\145 ++\162\124\162\165\163\164\040\107\154\157\142\141\154\040\122\157 ++\157\164\060\036\027\015\071\070\060\070\061\063\060\060\062\071 ++\060\060\132\027\015\061\070\060\070\061\063\062\063\065\071\060 ++\060\132\060\165\061\013\060\011\006\003\125\004\006\023\002\125 ++\123\061\030\060\026\006\003\125\004\012\023\017\107\124\105\040 ++\103\157\162\160\157\162\141\164\151\157\156\061\047\060\045\006 ++\003\125\004\013\023\036\107\124\105\040\103\171\142\145\162\124 ++\162\165\163\164\040\123\157\154\165\164\151\157\156\163\054\040 ++\111\156\143\056\061\043\060\041\006\003\125\004\003\023\032\107 ++\124\105\040\103\171\142\145\162\124\162\165\163\164\040\107\154 ++\157\142\141\154\040\122\157\157\164\060\201\237\060\015\006\011 ++\052\206\110\206\367\015\001\001\001\005\000\003\201\215\000\060 ++\201\211\002\201\201\000\225\017\240\266\360\120\234\350\172\307 ++\210\315\335\027\016\056\260\224\320\033\075\016\366\224\300\212 ++\224\307\006\310\220\227\310\270\144\032\172\176\154\074\123\341 ++\067\050\163\140\177\262\227\123\007\237\123\371\155\130\224\322 ++\257\215\155\210\147\200\346\355\262\225\317\162\061\312\245\034 ++\162\272\134\002\347\144\102\347\371\251\054\326\072\015\254\215 ++\102\252\044\001\071\346\234\077\001\205\127\015\130\207\105\370 ++\323\205\252\223\151\046\205\160\110\200\077\022\025\307\171\264 ++\037\005\057\073\142\231\002\003\001\000\001\060\015\006\011\052 ++\206\110\206\367\015\001\001\004\005\000\003\201\201\000\155\353 ++\033\011\351\136\331\121\333\147\042\141\244\052\074\110\167\343 ++\240\174\246\336\163\242\024\003\205\075\373\253\016\060\305\203 ++\026\063\201\023\010\236\173\064\116\337\100\310\164\327\271\175 ++\334\364\166\125\175\233\143\124\030\351\360\352\363\134\261\331 ++\213\102\036\271\300\225\116\272\372\325\342\174\365\150\141\277 ++\216\354\005\227\137\133\260\327\243\205\064\304\044\247\015\017 ++\225\223\357\313\224\330\236\037\235\134\205\155\307\252\256\117 ++\037\042\265\315\225\255\272\247\314\371\253\013\172\177 ++END ++ ++# Trust for Certificate "GTE CyberTrust Global Root" ++# Issuer: CN=GTE CyberTrust Global Root,OU="GTE CyberTrust Solutions, Inc.",O=GTE Corporation,C=US ++# Serial Number: 421 (0x1a5) ++# Subject: CN=GTE CyberTrust Global Root,OU="GTE CyberTrust Solutions, Inc.",O=GTE Corporation,C=US ++# Not Valid Before: Thu Aug 13 00:29:00 1998 ++# Not Valid After : Mon Aug 13 23:59:00 2018 ++# Fingerprint (MD5): CA:3D:D3:68:F1:03:5C:D0:32:FA:B8:2B:59:E8:5A:DB ++# Fingerprint (SHA1): 97:81:79:50:D8:1C:96:70:CC:34:D8:09:CF:79:44:31:36:7E:F4:74 ++CKA_CLASS CK_OBJECT_CLASS CKO_NSS_TRUST ++CKA_TOKEN CK_BBOOL CK_TRUE ++CKA_PRIVATE CK_BBOOL CK_FALSE ++CKA_MODIFIABLE CK_BBOOL CK_FALSE ++CKA_LABEL UTF8 "GTE CyberTrust Global Root" ++CKA_CERT_SHA1_HASH MULTILINE_OCTAL ++\227\201\171\120\330\034\226\160\314\064\330\011\317\171\104\061 ++\066\176\364\164 ++END ++CKA_CERT_MD5_HASH MULTILINE_OCTAL ++\312\075\323\150\361\003\134\320\062\372\270\053\131\350\132\333 ++END ++CKA_ISSUER MULTILINE_OCTAL ++\060\165\061\013\060\011\006\003\125\004\006\023\002\125\123\061 ++\030\060\026\006\003\125\004\012\023\017\107\124\105\040\103\157 ++\162\160\157\162\141\164\151\157\156\061\047\060\045\006\003\125 ++\004\013\023\036\107\124\105\040\103\171\142\145\162\124\162\165 ++\163\164\040\123\157\154\165\164\151\157\156\163\054\040\111\156 ++\143\056\061\043\060\041\006\003\125\004\003\023\032\107\124\105 ++\040\103\171\142\145\162\124\162\165\163\164\040\107\154\157\142 ++\141\154\040\122\157\157\164 ++END ++CKA_SERIAL_NUMBER MULTILINE_OCTAL ++\002\002\001\245 ++END +LEGACY_CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_TRUSTED_DELEGATOR +LEGACY_CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_TRUSTED_DELEGATOR +LEGACY_CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_TRUSTED_DELEGATOR - CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_TRUSTED_DELEGATOR - CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_TRUSTED_DELEGATOR - CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_TRUSTED_DELEGATOR - CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE - - # - # Certificate "Thawte Server CA" - # - # Issuer: E=server-certs@thawte.com,CN=Thawte Server CA,OU=Certification Services Division,O=Thawte Consulting cc,L=Cape Town,ST=Western Cape,C=ZA - # Serial Number: 1 (0x1) - # Subject: E=server-certs@thawte.com,CN=Thawte Server CA,OU=Certification Services Division,O=Thawte Consulting cc,L=Cape Town,ST=Western Cape,C=ZA - # Not Valid Before: Thu Aug 01 00:00:00 1996 - # Not Valid After : Thu Dec 31 23:59:59 2020 - # Fingerprint (MD5): C5:70:C4:A2:ED:53:78:0C:C8:10:53:81:64:CB:D0:1D - # Fingerprint (SHA1): 23:E5:94:94:51:95:F2:41:48:03:B4:D5:64:D2:A3:A3:F5:D8:8B:8C - CKA_CLASS CK_OBJECT_CLASS CKO_CERTIFICATE - CKA_TOKEN CK_BBOOL CK_TRUE - CKA_PRIVATE CK_BBOOL CK_FALSE - CKA_MODIFIABLE CK_BBOOL CK_FALSE - CKA_LABEL UTF8 "Thawte Server CA" - CKA_CERTIFICATE_TYPE CK_CERTIFICATE_TYPE CKC_X_509 - CKA_SUBJECT MULTILINE_OCTAL - \060\201\304\061\013\060\011\006\003\125\004\006\023\002\132\101 - \061\025\060\023\006\003\125\004\010\023\014\127\145\163\164\145 - \162\156\040\103\141\160\145\061\022\060\020\006\003\125\004\007 - \023\011\103\141\160\145\040\124\157\167\156\061\035\060\033\006 - \003\125\004\012\023\024\124\150\141\167\164\145\040\103\157\156 - \163\165\154\164\151\156\147\040\143\143\061\050\060\046\006\003 - \125\004\013\023\037\103\145\162\164\151\146\151\143\141\164\151 - \157\156\040\123\145\162\166\151\143\145\163\040\104\151\166\151 - \163\151\157\156\061\031\060\027\006\003\125\004\003\023\020\124 - \150\141\167\164\145\040\123\145\162\166\145\162\040\103\101\061 - \046\060\044\006\011\052\206\110\206\367\015\001\011\001\026\027 - \163\145\162\166\145\162\055\143\145\162\164\163\100\164\150\141 - \167\164\145\056\143\157\155 - END - CKA_ID UTF8 "0" - CKA_ISSUER MULTILINE_OCTAL - \060\201\304\061\013\060\011\006\003\125\004\006\023\002\132\101 - \061\025\060\023\006\003\125\004\010\023\014\127\145\163\164\145 - \162\156\040\103\141\160\145\061\022\060\020\006\003\125\004\007 - \023\011\103\141\160\145\040\124\157\167\156\061\035\060\033\006 - \003\125\004\012\023\024\124\150\141\167\164\145\040\103\157\156 - \163\165\154\164\151\156\147\040\143\143\061\050\060\046\006\003 - \125\004\013\023\037\103\145\162\164\151\146\151\143\141\164\151 - \157\156\040\123\145\162\166\151\143\145\163\040\104\151\166\151 - \163\151\157\156\061\031\060\027\006\003\125\004\003\023\020\124 - \150\141\167\164\145\040\123\145\162\166\145\162\040\103\101\061 - \046\060\044\006\011\052\206\110\206\367\015\001\011\001\026\027 - \163\145\162\166\145\162\055\143\145\162\164\163\100\164\150\141 -@@ -282,100 +285,103 @@ - \003\001\001\377\060\015\006\011\052\206\110\206\367\015\001\001 - \004\005\000\003\201\201\000\007\372\114\151\134\373\225\314\106 - \356\205\203\115\041\060\216\312\331\250\157\111\032\346\332\121 - \343\140\160\154\204\141\021\241\032\310\110\076\131\103\175\117 - \225\075\241\213\267\013\142\230\172\165\212\335\210\116\116\236 - \100\333\250\314\062\164\271\157\015\306\343\263\104\013\331\212 - \157\232\051\233\231\030\050\073\321\343\100\050\232\132\074\325 - \265\347\040\033\213\312\244\253\215\351\121\331\342\114\054\131 - \251\332\271\262\165\033\366\102\362\357\307\362\030\371\211\274 - \243\377\212\043\056\160\107 - END - - # Trust for Certificate "Thawte Server CA" - # Issuer: E=server-certs@thawte.com,CN=Thawte Server CA,OU=Certification Services Division,O=Thawte Consulting cc,L=Cape Town,ST=Western Cape,C=ZA - # Serial Number: 1 (0x1) - # Subject: E=server-certs@thawte.com,CN=Thawte Server CA,OU=Certification Services Division,O=Thawte Consulting cc,L=Cape Town,ST=Western Cape,C=ZA - # Not Valid Before: Thu Aug 01 00:00:00 1996 - # Not Valid After : Thu Dec 31 23:59:59 2020 - # Fingerprint (MD5): C5:70:C4:A2:ED:53:78:0C:C8:10:53:81:64:CB:D0:1D - # Fingerprint (SHA1): 23:E5:94:94:51:95:F2:41:48:03:B4:D5:64:D2:A3:A3:F5:D8:8B:8C - CKA_CLASS CK_OBJECT_CLASS CKO_NSS_TRUST - CKA_TOKEN CK_BBOOL CK_TRUE - CKA_PRIVATE CK_BBOOL CK_FALSE - CKA_MODIFIABLE CK_BBOOL CK_FALSE - CKA_LABEL UTF8 "Thawte Server CA" - CKA_CERT_SHA1_HASH MULTILINE_OCTAL - \043\345\224\224\121\225\362\101\110\003\264\325\144\322\243\243 - \365\330\213\214 - END - CKA_CERT_MD5_HASH MULTILINE_OCTAL - \305\160\304\242\355\123\170\014\310\020\123\201\144\313\320\035 - END - CKA_ISSUER MULTILINE_OCTAL - \060\201\304\061\013\060\011\006\003\125\004\006\023\002\132\101 - \061\025\060\023\006\003\125\004\010\023\014\127\145\163\164\145 - \162\156\040\103\141\160\145\061\022\060\020\006\003\125\004\007 - \023\011\103\141\160\145\040\124\157\167\156\061\035\060\033\006 - \003\125\004\012\023\024\124\150\141\167\164\145\040\103\157\156 - \163\165\154\164\151\156\147\040\143\143\061\050\060\046\006\003 - \125\004\013\023\037\103\145\162\164\151\146\151\143\141\164\151 - \157\156\040\123\145\162\166\151\143\145\163\040\104\151\166\151 - \163\151\157\156\061\031\060\027\006\003\125\004\003\023\020\124 - \150\141\167\164\145\040\123\145\162\166\145\162\040\103\101\061 - \046\060\044\006\011\052\206\110\206\367\015\001\011\001\026\027 - \163\145\162\166\145\162\055\143\145\162\164\163\100\164\150\141 - \167\164\145\056\143\157\155 - END - CKA_SERIAL_NUMBER MULTILINE_OCTAL - \002\001\001 - END ++CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE ++ ++# ++# Certificate "Thawte Server CA" ++# ++# Issuer: E=server-certs@thawte.com,CN=Thawte Server CA,OU=Certification Services Division,O=Thawte Consulting cc,L=Cape Town,ST=Western Cape,C=ZA ++# Serial Number: 1 (0x1) ++# Subject: E=server-certs@thawte.com,CN=Thawte Server CA,OU=Certification Services Division,O=Thawte Consulting cc,L=Cape Town,ST=Western Cape,C=ZA ++# Not Valid Before: Thu Aug 01 00:00:00 1996 ++# Not Valid After : Thu Dec 31 23:59:59 2020 ++# Fingerprint (MD5): C5:70:C4:A2:ED:53:78:0C:C8:10:53:81:64:CB:D0:1D ++# Fingerprint (SHA1): 23:E5:94:94:51:95:F2:41:48:03:B4:D5:64:D2:A3:A3:F5:D8:8B:8C ++CKA_CLASS CK_OBJECT_CLASS CKO_CERTIFICATE ++CKA_TOKEN CK_BBOOL CK_TRUE ++CKA_PRIVATE CK_BBOOL CK_FALSE ++CKA_MODIFIABLE CK_BBOOL CK_FALSE ++CKA_LABEL UTF8 "Thawte Server CA" ++CKA_CERTIFICATE_TYPE CK_CERTIFICATE_TYPE CKC_X_509 ++CKA_SUBJECT MULTILINE_OCTAL ++\060\201\304\061\013\060\011\006\003\125\004\006\023\002\132\101 ++\061\025\060\023\006\003\125\004\010\023\014\127\145\163\164\145 ++\162\156\040\103\141\160\145\061\022\060\020\006\003\125\004\007 ++\023\011\103\141\160\145\040\124\157\167\156\061\035\060\033\006 ++\003\125\004\012\023\024\124\150\141\167\164\145\040\103\157\156 ++\163\165\154\164\151\156\147\040\143\143\061\050\060\046\006\003 ++\125\004\013\023\037\103\145\162\164\151\146\151\143\141\164\151 ++\157\156\040\123\145\162\166\151\143\145\163\040\104\151\166\151 ++\163\151\157\156\061\031\060\027\006\003\125\004\003\023\020\124 ++\150\141\167\164\145\040\123\145\162\166\145\162\040\103\101\061 ++\046\060\044\006\011\052\206\110\206\367\015\001\011\001\026\027 ++\163\145\162\166\145\162\055\143\145\162\164\163\100\164\150\141 ++\167\164\145\056\143\157\155 ++END ++CKA_ID UTF8 "0" ++CKA_ISSUER MULTILINE_OCTAL ++\060\201\304\061\013\060\011\006\003\125\004\006\023\002\132\101 ++\061\025\060\023\006\003\125\004\010\023\014\127\145\163\164\145 ++\162\156\040\103\141\160\145\061\022\060\020\006\003\125\004\007 ++\023\011\103\141\160\145\040\124\157\167\156\061\035\060\033\006 ++\003\125\004\012\023\024\124\150\141\167\164\145\040\103\157\156 ++\163\165\154\164\151\156\147\040\143\143\061\050\060\046\006\003 ++\125\004\013\023\037\103\145\162\164\151\146\151\143\141\164\151 ++\157\156\040\123\145\162\166\151\143\145\163\040\104\151\166\151 ++\163\151\157\156\061\031\060\027\006\003\125\004\003\023\020\124 ++\150\141\167\164\145\040\123\145\162\166\145\162\040\103\101\061 ++\046\060\044\006\011\052\206\110\206\367\015\001\011\001\026\027 ++\163\145\162\166\145\162\055\143\145\162\164\163\100\164\150\141 ++\167\164\145\056\143\157\155 ++END ++CKA_SERIAL_NUMBER MULTILINE_OCTAL ++\002\001\001 ++END ++CKA_VALUE MULTILINE_OCTAL ++\060\202\003\023\060\202\002\174\240\003\002\001\002\002\001\001 ++\060\015\006\011\052\206\110\206\367\015\001\001\004\005\000\060 ++\201\304\061\013\060\011\006\003\125\004\006\023\002\132\101\061 ++\025\060\023\006\003\125\004\010\023\014\127\145\163\164\145\162 ++\156\040\103\141\160\145\061\022\060\020\006\003\125\004\007\023 ++\011\103\141\160\145\040\124\157\167\156\061\035\060\033\006\003 ++\125\004\012\023\024\124\150\141\167\164\145\040\103\157\156\163 ++\165\154\164\151\156\147\040\143\143\061\050\060\046\006\003\125 ++\004\013\023\037\103\145\162\164\151\146\151\143\141\164\151\157 ++\156\040\123\145\162\166\151\143\145\163\040\104\151\166\151\163 ++\151\157\156\061\031\060\027\006\003\125\004\003\023\020\124\150 ++\141\167\164\145\040\123\145\162\166\145\162\040\103\101\061\046 ++\060\044\006\011\052\206\110\206\367\015\001\011\001\026\027\163 ++\145\162\166\145\162\055\143\145\162\164\163\100\164\150\141\167 ++\164\145\056\143\157\155\060\036\027\015\071\066\060\070\060\061 ++\060\060\060\060\060\060\132\027\015\062\060\061\062\063\061\062 ++\063\065\071\065\071\132\060\201\304\061\013\060\011\006\003\125 ++\004\006\023\002\132\101\061\025\060\023\006\003\125\004\010\023 ++\014\127\145\163\164\145\162\156\040\103\141\160\145\061\022\060 ++\020\006\003\125\004\007\023\011\103\141\160\145\040\124\157\167 ++\156\061\035\060\033\006\003\125\004\012\023\024\124\150\141\167 ++\164\145\040\103\157\156\163\165\154\164\151\156\147\040\143\143 ++\061\050\060\046\006\003\125\004\013\023\037\103\145\162\164\151 ++\146\151\143\141\164\151\157\156\040\123\145\162\166\151\143\145 ++\163\040\104\151\166\151\163\151\157\156\061\031\060\027\006\003 ++\125\004\003\023\020\124\150\141\167\164\145\040\123\145\162\166 ++\145\162\040\103\101\061\046\060\044\006\011\052\206\110\206\367 ++\015\001\011\001\026\027\163\145\162\166\145\162\055\143\145\162 ++\164\163\100\164\150\141\167\164\145\056\143\157\155\060\201\237 ++\060\015\006\011\052\206\110\206\367\015\001\001\001\005\000\003 ++\201\215\000\060\201\211\002\201\201\000\323\244\120\156\310\377 ++\126\153\346\317\135\266\352\014\150\165\107\242\252\302\332\204 ++\045\374\250\364\107\121\332\205\265\040\164\224\206\036\017\165 ++\311\351\010\141\365\006\155\060\156\025\031\002\351\122\300\142 ++\333\115\231\236\342\152\014\104\070\315\376\276\343\144\011\160 ++\305\376\261\153\051\266\057\111\310\073\324\047\004\045\020\227 ++\057\347\220\155\300\050\102\231\327\114\103\336\303\365\041\155 ++\124\237\135\303\130\341\300\344\331\133\260\270\334\264\173\337 ++\066\072\302\265\146\042\022\326\207\015\002\003\001\000\001\243 ++\023\060\021\060\017\006\003\125\035\023\001\001\377\004\005\060 ++\003\001\001\377\060\015\006\011\052\206\110\206\367\015\001\001 ++\004\005\000\003\201\201\000\007\372\114\151\134\373\225\314\106 ++\356\205\203\115\041\060\216\312\331\250\157\111\032\346\332\121 ++\343\140\160\154\204\141\021\241\032\310\110\076\131\103\175\117 ++\225\075\241\213\267\013\142\230\172\165\212\335\210\116\116\236 ++\100\333\250\314\062\164\271\157\015\306\343\263\104\013\331\212 ++\157\232\051\233\231\030\050\073\321\343\100\050\232\132\074\325 ++\265\347\040\033\213\312\244\253\215\351\121\331\342\114\054\131 ++\251\332\271\262\165\033\366\102\362\357\307\362\030\371\211\274 ++\243\377\212\043\056\160\107 ++END ++ ++# Trust for Certificate "Thawte Server CA" ++# Issuer: E=server-certs@thawte.com,CN=Thawte Server CA,OU=Certification Services Division,O=Thawte Consulting cc,L=Cape Town,ST=Western Cape,C=ZA ++# Serial Number: 1 (0x1) ++# Subject: E=server-certs@thawte.com,CN=Thawte Server CA,OU=Certification Services Division,O=Thawte Consulting cc,L=Cape Town,ST=Western Cape,C=ZA ++# Not Valid Before: Thu Aug 01 00:00:00 1996 ++# Not Valid After : Thu Dec 31 23:59:59 2020 ++# Fingerprint (MD5): C5:70:C4:A2:ED:53:78:0C:C8:10:53:81:64:CB:D0:1D ++# Fingerprint (SHA1): 23:E5:94:94:51:95:F2:41:48:03:B4:D5:64:D2:A3:A3:F5:D8:8B:8C ++CKA_CLASS CK_OBJECT_CLASS CKO_NSS_TRUST ++CKA_TOKEN CK_BBOOL CK_TRUE ++CKA_PRIVATE CK_BBOOL CK_FALSE ++CKA_MODIFIABLE CK_BBOOL CK_FALSE ++CKA_LABEL UTF8 "Thawte Server CA" ++CKA_CERT_SHA1_HASH MULTILINE_OCTAL ++\043\345\224\224\121\225\362\101\110\003\264\325\144\322\243\243 ++\365\330\213\214 ++END ++CKA_CERT_MD5_HASH MULTILINE_OCTAL ++\305\160\304\242\355\123\170\014\310\020\123\201\144\313\320\035 ++END ++CKA_ISSUER MULTILINE_OCTAL ++\060\201\304\061\013\060\011\006\003\125\004\006\023\002\132\101 ++\061\025\060\023\006\003\125\004\010\023\014\127\145\163\164\145 ++\162\156\040\103\141\160\145\061\022\060\020\006\003\125\004\007 ++\023\011\103\141\160\145\040\124\157\167\156\061\035\060\033\006 ++\003\125\004\012\023\024\124\150\141\167\164\145\040\103\157\156 ++\163\165\154\164\151\156\147\040\143\143\061\050\060\046\006\003 ++\125\004\013\023\037\103\145\162\164\151\146\151\143\141\164\151 ++\157\156\040\123\145\162\166\151\143\145\163\040\104\151\166\151 ++\163\151\157\156\061\031\060\027\006\003\125\004\003\023\020\124 ++\150\141\167\164\145\040\123\145\162\166\145\162\040\103\101\061 ++\046\060\044\006\011\052\206\110\206\367\015\001\011\001\026\027 ++\163\145\162\166\145\162\055\143\145\162\164\163\100\164\150\141 ++\167\164\145\056\143\157\155 ++END ++CKA_SERIAL_NUMBER MULTILINE_OCTAL ++\002\001\001 ++END +LEGACY_CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_TRUSTED_DELEGATOR +LEGACY_CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_MUST_VERIFY_TRUST +LEGACY_CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_TRUSTED_DELEGATOR - CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_TRUSTED_DELEGATOR - CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_MUST_VERIFY_TRUST - CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_TRUSTED_DELEGATOR - CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE - - # - # Certificate "Thawte Premium Server CA" - # - # Issuer: E=premium-server@thawte.com,CN=Thawte Premium Server CA,OU=Certification Services Division,O=Thawte Consulting cc,L=Cape Town,ST=Western Cape,C=ZA - # Serial Number: 1 (0x1) - # Subject: E=premium-server@thawte.com,CN=Thawte Premium Server CA,OU=Certification Services Division,O=Thawte Consulting cc,L=Cape Town,ST=Western Cape,C=ZA - # Not Valid Before: Thu Aug 01 00:00:00 1996 - # Not Valid After : Thu Dec 31 23:59:59 2020 - # Fingerprint (MD5): 06:9F:69:79:16:66:90:02:1B:8C:8C:A2:C3:07:6F:3A - # Fingerprint (SHA1): 62:7F:8D:78:27:65:63:99:D2:7D:7F:90:44:C9:FE:B3:F3:3E:FA:9A - CKA_CLASS CK_OBJECT_CLASS CKO_CERTIFICATE - CKA_TOKEN CK_BBOOL CK_TRUE - CKA_PRIVATE CK_BBOOL CK_FALSE - CKA_MODIFIABLE CK_BBOOL CK_FALSE - CKA_LABEL UTF8 "Thawte Premium Server CA" - CKA_CERTIFICATE_TYPE CK_CERTIFICATE_TYPE CKC_X_509 - CKA_SUBJECT MULTILINE_OCTAL - \060\201\316\061\013\060\011\006\003\125\004\006\023\002\132\101 - \061\025\060\023\006\003\125\004\010\023\014\127\145\163\164\145 - \162\156\040\103\141\160\145\061\022\060\020\006\003\125\004\007 - \023\011\103\141\160\145\040\124\157\167\156\061\035\060\033\006 - \003\125\004\012\023\024\124\150\141\167\164\145\040\103\157\156 - \163\165\154\164\151\156\147\040\143\143\061\050\060\046\006\003 - \125\004\013\023\037\103\145\162\164\151\146\151\143\141\164\151 - \157\156\040\123\145\162\166\151\143\145\163\040\104\151\166\151 - \163\151\157\156\061\041\060\037\006\003\125\004\003\023\030\124 - \150\141\167\164\145\040\120\162\145\155\151\165\155\040\123\145 - \162\166\145\162\040\103\101\061\050\060\046\006\011\052\206\110 - \206\367\015\001\011\001\026\031\160\162\145\155\151\165\155\055 - \163\145\162\166\145\162\100\164\150\141\167\164\145\056\143\157 - \155 - END - CKA_ID UTF8 "0" - CKA_ISSUER MULTILINE_OCTAL - \060\201\316\061\013\060\011\006\003\125\004\006\023\002\132\101 - \061\025\060\023\006\003\125\004\010\023\014\127\145\163\164\145 - \162\156\040\103\141\160\145\061\022\060\020\006\003\125\004\007 - \023\011\103\141\160\145\040\124\157\167\156\061\035\060\033\006 - \003\125\004\012\023\024\124\150\141\167\164\145\040\103\157\156 - \163\165\154\164\151\156\147\040\143\143\061\050\060\046\006\003 - \125\004\013\023\037\103\145\162\164\151\146\151\143\141\164\151 - \157\156\040\123\145\162\166\151\143\145\163\040\104\151\166\151 - \163\151\157\156\061\041\060\037\006\003\125\004\003\023\030\124 - \150\141\167\164\145\040\120\162\145\155\151\165\155\040\123\145 - \162\166\145\162\040\103\101\061\050\060\046\006\011\052\206\110 -@@ -432,100 +438,103 @@ - \367\015\001\001\004\005\000\003\201\201\000\046\110\054\026\302 - \130\372\350\026\164\014\252\252\137\124\077\362\327\311\170\140 - \136\136\156\067\143\042\167\066\176\262\027\304\064\271\365\010 - \205\374\311\001\070\377\115\276\362\026\102\103\347\273\132\106 - \373\301\306\021\037\361\112\260\050\106\311\303\304\102\175\274 - \372\253\131\156\325\267\121\210\021\343\244\205\031\153\202\114 - \244\014\022\255\351\244\256\077\361\303\111\145\232\214\305\310 - \076\045\267\224\231\273\222\062\161\007\360\206\136\355\120\047 - \246\015\246\043\371\273\313\246\007\024\102 - END - - # Trust for Certificate "Thawte Premium Server CA" - # Issuer: E=premium-server@thawte.com,CN=Thawte Premium Server CA,OU=Certification Services Division,O=Thawte Consulting cc,L=Cape Town,ST=Western Cape,C=ZA - # Serial Number: 1 (0x1) - # Subject: E=premium-server@thawte.com,CN=Thawte Premium Server CA,OU=Certification Services Division,O=Thawte Consulting cc,L=Cape Town,ST=Western Cape,C=ZA - # Not Valid Before: Thu Aug 01 00:00:00 1996 - # Not Valid After : Thu Dec 31 23:59:59 2020 - # Fingerprint (MD5): 06:9F:69:79:16:66:90:02:1B:8C:8C:A2:C3:07:6F:3A - # Fingerprint (SHA1): 62:7F:8D:78:27:65:63:99:D2:7D:7F:90:44:C9:FE:B3:F3:3E:FA:9A - CKA_CLASS CK_OBJECT_CLASS CKO_NSS_TRUST - CKA_TOKEN CK_BBOOL CK_TRUE - CKA_PRIVATE CK_BBOOL CK_FALSE - CKA_MODIFIABLE CK_BBOOL CK_FALSE - CKA_LABEL UTF8 "Thawte Premium Server CA" - CKA_CERT_SHA1_HASH MULTILINE_OCTAL - \142\177\215\170\047\145\143\231\322\175\177\220\104\311\376\263 - \363\076\372\232 - END - CKA_CERT_MD5_HASH MULTILINE_OCTAL - \006\237\151\171\026\146\220\002\033\214\214\242\303\007\157\072 - END - CKA_ISSUER MULTILINE_OCTAL - \060\201\316\061\013\060\011\006\003\125\004\006\023\002\132\101 - \061\025\060\023\006\003\125\004\010\023\014\127\145\163\164\145 - \162\156\040\103\141\160\145\061\022\060\020\006\003\125\004\007 - \023\011\103\141\160\145\040\124\157\167\156\061\035\060\033\006 - \003\125\004\012\023\024\124\150\141\167\164\145\040\103\157\156 - \163\165\154\164\151\156\147\040\143\143\061\050\060\046\006\003 - \125\004\013\023\037\103\145\162\164\151\146\151\143\141\164\151 - \157\156\040\123\145\162\166\151\143\145\163\040\104\151\166\151 - \163\151\157\156\061\041\060\037\006\003\125\004\003\023\030\124 - \150\141\167\164\145\040\120\162\145\155\151\165\155\040\123\145 - \162\166\145\162\040\103\101\061\050\060\046\006\011\052\206\110 - \206\367\015\001\011\001\026\031\160\162\145\155\151\165\155\055 - \163\145\162\166\145\162\100\164\150\141\167\164\145\056\143\157 - \155 - END - CKA_SERIAL_NUMBER MULTILINE_OCTAL - \002\001\001 - END ++CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE ++ ++# ++# Certificate "Thawte Premium Server CA" ++# ++# Issuer: E=premium-server@thawte.com,CN=Thawte Premium Server CA,OU=Certification Services Division,O=Thawte Consulting cc,L=Cape Town,ST=Western Cape,C=ZA ++# Serial Number: 1 (0x1) ++# Subject: E=premium-server@thawte.com,CN=Thawte Premium Server CA,OU=Certification Services Division,O=Thawte Consulting cc,L=Cape Town,ST=Western Cape,C=ZA ++# Not Valid Before: Thu Aug 01 00:00:00 1996 ++# Not Valid After : Thu Dec 31 23:59:59 2020 ++# Fingerprint (MD5): 06:9F:69:79:16:66:90:02:1B:8C:8C:A2:C3:07:6F:3A ++# Fingerprint (SHA1): 62:7F:8D:78:27:65:63:99:D2:7D:7F:90:44:C9:FE:B3:F3:3E:FA:9A ++CKA_CLASS CK_OBJECT_CLASS CKO_CERTIFICATE ++CKA_TOKEN CK_BBOOL CK_TRUE ++CKA_PRIVATE CK_BBOOL CK_FALSE ++CKA_MODIFIABLE CK_BBOOL CK_FALSE ++CKA_LABEL UTF8 "Thawte Premium Server CA" ++CKA_CERTIFICATE_TYPE CK_CERTIFICATE_TYPE CKC_X_509 ++CKA_SUBJECT MULTILINE_OCTAL ++\060\201\316\061\013\060\011\006\003\125\004\006\023\002\132\101 ++\061\025\060\023\006\003\125\004\010\023\014\127\145\163\164\145 ++\162\156\040\103\141\160\145\061\022\060\020\006\003\125\004\007 ++\023\011\103\141\160\145\040\124\157\167\156\061\035\060\033\006 ++\003\125\004\012\023\024\124\150\141\167\164\145\040\103\157\156 ++\163\165\154\164\151\156\147\040\143\143\061\050\060\046\006\003 ++\125\004\013\023\037\103\145\162\164\151\146\151\143\141\164\151 ++\157\156\040\123\145\162\166\151\143\145\163\040\104\151\166\151 ++\163\151\157\156\061\041\060\037\006\003\125\004\003\023\030\124 ++\150\141\167\164\145\040\120\162\145\155\151\165\155\040\123\145 ++\162\166\145\162\040\103\101\061\050\060\046\006\011\052\206\110 ++\206\367\015\001\011\001\026\031\160\162\145\155\151\165\155\055 ++\163\145\162\166\145\162\100\164\150\141\167\164\145\056\143\157 ++\155 ++END ++CKA_ID UTF8 "0" ++CKA_ISSUER MULTILINE_OCTAL ++\060\201\316\061\013\060\011\006\003\125\004\006\023\002\132\101 ++\061\025\060\023\006\003\125\004\010\023\014\127\145\163\164\145 ++\162\156\040\103\141\160\145\061\022\060\020\006\003\125\004\007 ++\023\011\103\141\160\145\040\124\157\167\156\061\035\060\033\006 ++\003\125\004\012\023\024\124\150\141\167\164\145\040\103\157\156 ++\163\165\154\164\151\156\147\040\143\143\061\050\060\046\006\003 ++\125\004\013\023\037\103\145\162\164\151\146\151\143\141\164\151 ++\157\156\040\123\145\162\166\151\143\145\163\040\104\151\166\151 ++\163\151\157\156\061\041\060\037\006\003\125\004\003\023\030\124 ++\150\141\167\164\145\040\120\162\145\155\151\165\155\040\123\145 ++\162\166\145\162\040\103\101\061\050\060\046\006\011\052\206\110 ++\206\367\015\001\011\001\026\031\160\162\145\155\151\165\155\055 ++\163\145\162\166\145\162\100\164\150\141\167\164\145\056\143\157 ++\155 ++END ++CKA_SERIAL_NUMBER MULTILINE_OCTAL ++\002\001\001 ++END ++CKA_VALUE MULTILINE_OCTAL ++\060\202\003\047\060\202\002\220\240\003\002\001\002\002\001\001 ++\060\015\006\011\052\206\110\206\367\015\001\001\004\005\000\060 ++\201\316\061\013\060\011\006\003\125\004\006\023\002\132\101\061 ++\025\060\023\006\003\125\004\010\023\014\127\145\163\164\145\162 ++\156\040\103\141\160\145\061\022\060\020\006\003\125\004\007\023 ++\011\103\141\160\145\040\124\157\167\156\061\035\060\033\006\003 ++\125\004\012\023\024\124\150\141\167\164\145\040\103\157\156\163 ++\165\154\164\151\156\147\040\143\143\061\050\060\046\006\003\125 ++\004\013\023\037\103\145\162\164\151\146\151\143\141\164\151\157 ++\156\040\123\145\162\166\151\143\145\163\040\104\151\166\151\163 ++\151\157\156\061\041\060\037\006\003\125\004\003\023\030\124\150 ++\141\167\164\145\040\120\162\145\155\151\165\155\040\123\145\162 ++\166\145\162\040\103\101\061\050\060\046\006\011\052\206\110\206 ++\367\015\001\011\001\026\031\160\162\145\155\151\165\155\055\163 ++\145\162\166\145\162\100\164\150\141\167\164\145\056\143\157\155 ++\060\036\027\015\071\066\060\070\060\061\060\060\060\060\060\060 ++\132\027\015\062\060\061\062\063\061\062\063\065\071\065\071\132 ++\060\201\316\061\013\060\011\006\003\125\004\006\023\002\132\101 ++\061\025\060\023\006\003\125\004\010\023\014\127\145\163\164\145 ++\162\156\040\103\141\160\145\061\022\060\020\006\003\125\004\007 ++\023\011\103\141\160\145\040\124\157\167\156\061\035\060\033\006 ++\003\125\004\012\023\024\124\150\141\167\164\145\040\103\157\156 ++\163\165\154\164\151\156\147\040\143\143\061\050\060\046\006\003 ++\125\004\013\023\037\103\145\162\164\151\146\151\143\141\164\151 ++\157\156\040\123\145\162\166\151\143\145\163\040\104\151\166\151 ++\163\151\157\156\061\041\060\037\006\003\125\004\003\023\030\124 ++\150\141\167\164\145\040\120\162\145\155\151\165\155\040\123\145 ++\162\166\145\162\040\103\101\061\050\060\046\006\011\052\206\110 ++\206\367\015\001\011\001\026\031\160\162\145\155\151\165\155\055 ++\163\145\162\166\145\162\100\164\150\141\167\164\145\056\143\157 ++\155\060\201\237\060\015\006\011\052\206\110\206\367\015\001\001 ++\001\005\000\003\201\215\000\060\201\211\002\201\201\000\322\066 ++\066\152\213\327\302\133\236\332\201\101\142\217\070\356\111\004 ++\125\326\320\357\034\033\225\026\107\357\030\110\065\072\122\364 ++\053\152\006\217\073\057\352\126\343\257\206\215\236\027\367\236 ++\264\145\165\002\115\357\313\011\242\041\121\330\233\320\147\320 ++\272\015\222\006\024\163\324\223\313\227\052\000\234\134\116\014 ++\274\372\025\122\374\362\104\156\332\021\112\156\010\237\057\055 ++\343\371\252\072\206\163\266\106\123\130\310\211\005\275\203\021 ++\270\163\077\252\007\215\364\102\115\347\100\235\034\067\002\003 ++\001\000\001\243\023\060\021\060\017\006\003\125\035\023\001\001 ++\377\004\005\060\003\001\001\377\060\015\006\011\052\206\110\206 ++\367\015\001\001\004\005\000\003\201\201\000\046\110\054\026\302 ++\130\372\350\026\164\014\252\252\137\124\077\362\327\311\170\140 ++\136\136\156\067\143\042\167\066\176\262\027\304\064\271\365\010 ++\205\374\311\001\070\377\115\276\362\026\102\103\347\273\132\106 ++\373\301\306\021\037\361\112\260\050\106\311\303\304\102\175\274 ++\372\253\131\156\325\267\121\210\021\343\244\205\031\153\202\114 ++\244\014\022\255\351\244\256\077\361\303\111\145\232\214\305\310 ++\076\045\267\224\231\273\222\062\161\007\360\206\136\355\120\047 ++\246\015\246\043\371\273\313\246\007\024\102 ++END ++ ++# Trust for Certificate "Thawte Premium Server CA" ++# Issuer: E=premium-server@thawte.com,CN=Thawte Premium Server CA,OU=Certification Services Division,O=Thawte Consulting cc,L=Cape Town,ST=Western Cape,C=ZA ++# Serial Number: 1 (0x1) ++# Subject: E=premium-server@thawte.com,CN=Thawte Premium Server CA,OU=Certification Services Division,O=Thawte Consulting cc,L=Cape Town,ST=Western Cape,C=ZA ++# Not Valid Before: Thu Aug 01 00:00:00 1996 ++# Not Valid After : Thu Dec 31 23:59:59 2020 ++# Fingerprint (MD5): 06:9F:69:79:16:66:90:02:1B:8C:8C:A2:C3:07:6F:3A ++# Fingerprint (SHA1): 62:7F:8D:78:27:65:63:99:D2:7D:7F:90:44:C9:FE:B3:F3:3E:FA:9A ++CKA_CLASS CK_OBJECT_CLASS CKO_NSS_TRUST ++CKA_TOKEN CK_BBOOL CK_TRUE ++CKA_PRIVATE CK_BBOOL CK_FALSE ++CKA_MODIFIABLE CK_BBOOL CK_FALSE ++CKA_LABEL UTF8 "Thawte Premium Server CA" ++CKA_CERT_SHA1_HASH MULTILINE_OCTAL ++\142\177\215\170\047\145\143\231\322\175\177\220\104\311\376\263 ++\363\076\372\232 ++END ++CKA_CERT_MD5_HASH MULTILINE_OCTAL ++\006\237\151\171\026\146\220\002\033\214\214\242\303\007\157\072 ++END ++CKA_ISSUER MULTILINE_OCTAL ++\060\201\316\061\013\060\011\006\003\125\004\006\023\002\132\101 ++\061\025\060\023\006\003\125\004\010\023\014\127\145\163\164\145 ++\162\156\040\103\141\160\145\061\022\060\020\006\003\125\004\007 ++\023\011\103\141\160\145\040\124\157\167\156\061\035\060\033\006 ++\003\125\004\012\023\024\124\150\141\167\164\145\040\103\157\156 ++\163\165\154\164\151\156\147\040\143\143\061\050\060\046\006\003 ++\125\004\013\023\037\103\145\162\164\151\146\151\143\141\164\151 ++\157\156\040\123\145\162\166\151\143\145\163\040\104\151\166\151 ++\163\151\157\156\061\041\060\037\006\003\125\004\003\023\030\124 ++\150\141\167\164\145\040\120\162\145\155\151\165\155\040\123\145 ++\162\166\145\162\040\103\101\061\050\060\046\006\011\052\206\110 ++\206\367\015\001\011\001\026\031\160\162\145\155\151\165\155\055 ++\163\145\162\166\145\162\100\164\150\141\167\164\145\056\143\157 ++\155 ++END ++CKA_SERIAL_NUMBER MULTILINE_OCTAL ++\002\001\001 ++END +LEGACY_CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_TRUSTED_DELEGATOR +LEGACY_CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_MUST_VERIFY_TRUST +LEGACY_CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_TRUSTED_DELEGATOR - CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_TRUSTED_DELEGATOR - CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_MUST_VERIFY_TRUST - CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_TRUSTED_DELEGATOR - CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE - - # ++CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE ++ ++# # Certificate "Equifax Secure CA" # # Issuer: OU=Equifax Secure Certificate Authority,O=Equifax,C=US @@ -312,7 +510,117 @@ \164\171\060\036\027\015\071\070\060\070\062\062\061\066\064\061 \065\061\132\027\015\061\070\060\070\062\062\061\066\064\061\065 \061\132\060\116\061\013\060\011\006\003\125\004\006\023\002\125 -@@ -945,100 +954,103 @@ + \123\061\020\060\016\006\003\125\004\012\023\007\105\161\165\151 + \146\141\170\061\055\060\053\006\003\125\004\013\023\044\105\161 + \165\151\146\141\170\040\123\145\143\165\162\145\040\103\145\162 + \164\151\146\151\143\141\164\145\040\101\165\164\150\157\162\151 + \164\171\060\201\237\060\015\006\011\052\206\110\206\367\015\001 + \001\001\005\000\003\201\215\000\060\201\211\002\201\201\000\301 +@@ -140,100 +555,103 @@ + \070\062\062\061\066\064\061\065\061\132\060\013\006\003\125\035 + \017\004\004\003\002\001\006\060\037\006\003\125\035\043\004\030 + \060\026\200\024\110\346\150\371\053\322\262\225\327\107\330\043 + \040\020\117\063\230\220\237\324\060\035\006\003\125\035\016\004 + \026\004\024\110\346\150\371\053\322\262\225\327\107\330\043\040 + \020\117\063\230\220\237\324\060\014\006\003\125\035\023\004\005 + \060\003\001\001\377\060\032\006\011\052\206\110\206\366\175\007 + \101\000\004\015\060\013\033\005\126\063\056\060\143\003\002\006 + \300\060\015\006\011\052\206\110\206\367\015\001\001\005\005\000 + \003\201\201\000\130\316\051\352\374\367\336\265\316\002\271\027 + \265\205\321\271\343\340\225\314\045\061\015\000\246\222\156\177 + \266\222\143\236\120\225\321\232\157\344\021\336\143\205\156\230 + \356\250\377\132\310\323\125\262\146\161\127\336\300\041\353\075 + \052\247\043\111\001\004\206\102\173\374\356\177\242\026\122\265 + \147\147\323\100\333\073\046\130\262\050\167\075\256\024\167\141 + \326\372\052\146\047\240\015\372\247\163\134\352\160\361\224\041 + \145\104\137\372\374\357\051\150\251\242\207\171\357\171\357\117 + \254\007\167\070 + END + + # Trust for Certificate "Equifax Secure CA" + # Issuer: OU=Equifax Secure Certificate Authority,O=Equifax,C=US + # Serial Number: 903804111 (0x35def4cf) + # Subject: OU=Equifax Secure Certificate Authority,O=Equifax,C=US + # Not Valid Before: Sat Aug 22 16:41:51 1998 + # Not Valid After : Wed Aug 22 16:41:51 2018 + # Fingerprint (MD5): 67:CB:9D:C0:13:24:8A:82:9B:B2:17:1E:D1:1B:EC:D4 + # Fingerprint (SHA1): D2:32:09:AD:23:D3:14:23:21:74:E4:0D:7F:9D:62:13:97:86:63:3A + CKA_CLASS CK_OBJECT_CLASS CKO_NSS_TRUST + CKA_TOKEN CK_BBOOL CK_TRUE + CKA_PRIVATE CK_BBOOL CK_FALSE + CKA_MODIFIABLE CK_BBOOL CK_FALSE + CKA_LABEL UTF8 "Equifax Secure CA" + CKA_CERT_SHA1_HASH MULTILINE_OCTAL + \322\062\011\255\043\323\024\043\041\164\344\015\177\235\142\023 + \227\206\143\072 + END + CKA_CERT_MD5_HASH MULTILINE_OCTAL + \147\313\235\300\023\044\212\202\233\262\027\036\321\033\354\324 + END + CKA_ISSUER MULTILINE_OCTAL + \060\116\061\013\060\011\006\003\125\004\006\023\002\125\123\061 + \020\060\016\006\003\125\004\012\023\007\105\161\165\151\146\141 + \170\061\055\060\053\006\003\125\004\013\023\044\105\161\165\151 + \146\141\170\040\123\145\143\165\162\145\040\103\145\162\164\151 + \146\151\143\141\164\145\040\101\165\164\150\157\162\151\164\171 + END + CKA_SERIAL_NUMBER MULTILINE_OCTAL + \002\004\065\336\364\317 + END ++LEGACY_CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_TRUSTED_DELEGATOR ++LEGACY_CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_TRUSTED_DELEGATOR ++LEGACY_CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_TRUSTED_DELEGATOR + CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_TRUSTED_DELEGATOR + CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_TRUSTED_DELEGATOR + CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_TRUSTED_DELEGATOR + CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE + + # Distrust "Distrust a pb.com certificate that does not comply with the baseline requirements." + # Issuer: OU=Equifax Secure Certificate Authority,O=Equifax,C=US + # Serial Number: 1407252 (0x157914) + # Subject: CN=*.pb.com,OU=Meters,O=Pitney Bowes,L=Danbury,ST=Connecticut,C=US + # Not Valid Before: Mon Feb 01 14:54:04 2010 + # Not Valid After : Tue Sep 30 00:00:00 2014 + # Fingerprint (MD5): 8F:46:BE:99:47:6F:93:DC:5C:01:54:50:D0:4A:BD:AC + # Fingerprint (SHA1): 30:F1:82:CA:1A:5E:4E:4F:F3:6E:D0:E6:38:18:B8:B9:41:CB:5F:8C + CKA_CLASS CK_OBJECT_CLASS CKO_NSS_TRUST + CKA_TOKEN CK_BBOOL CK_TRUE + CKA_PRIVATE CK_BBOOL CK_FALSE + CKA_MODIFIABLE CK_BBOOL CK_FALSE + CKA_LABEL UTF8 "Distrust a pb.com certificate that does not comply with the baseline requirements." + CKA_ISSUER MULTILINE_OCTAL + \060\116\061\013\060\011\006\003\125\004\006\023\002\125\123\061 + \020\060\016\006\003\125\004\012\023\007\105\161\165\151\146\141 + \170\061\055\060\053\006\003\125\004\013\023\044\105\161\165\151 + \146\141\170\040\123\145\143\165\162\145\040\103\145\162\164\151 + \146\151\143\141\164\145\040\101\165\164\150\157\162\151\164\171 + END + CKA_SERIAL_NUMBER MULTILINE_OCTAL + \002\003\025\171\024 + END + CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_NOT_TRUSTED + CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_NOT_TRUSTED + CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_NOT_TRUSTED + CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE + + # + # Certificate "Digital Signature Trust Co. Global CA 1" + # + # Issuer: OU=DSTCA E1,O=Digital Signature Trust Co.,C=US + # Serial Number: 913315222 (0x36701596) + # Subject: OU=DSTCA E1,O=Digital Signature Trust Co.,C=US + # Not Valid Before: Thu Dec 10 18:10:23 1998 + # Not Valid After : Mon Dec 10 18:40:23 2018 + # Fingerprint (MD5): 25:7A:BA:83:2E:B6:A2:0B:DA:FE:F5:02:0F:08:D7:AD + # Fingerprint (SHA1): 81:96:8B:3A:EF:1C:DC:70:F5:FA:32:69:C2:92:A3:63:5B:D1:23:D3 + CKA_CLASS CK_OBJECT_CLASS CKO_CERTIFICATE + CKA_TOKEN CK_BBOOL CK_TRUE + CKA_PRIVATE CK_BBOOL CK_FALSE + CKA_MODIFIABLE CK_BBOOL CK_FALSE + CKA_LABEL UTF8 "Digital Signature Trust Co. Global CA 1" + CKA_CERTIFICATE_TYPE CK_CERTIFICATE_TYPE CKC_X_509 + CKA_SUBJECT MULTILINE_OCTAL +@@ -530,100 +948,103 @@ \005\252\354\003\037\170\177\236\223\271\232\000\252\043\175\326 \254\205\242\143\105\307\162\047\314\364\114\306\165\161\322\071 \357\117\102\360\165\337\012\220\306\216\040\157\230\017\370\254 @@ -416,7 +724,7 @@ \141\165\164\150\157\162\151\172\145\144\040\165\163\145\040\157 \156\154\171\061\037\060\035\006\003\125\004\013\023\026\126\145 \162\151\123\151\147\156\040\124\162\165\163\164\040\116\145\164 -@@ -1239,100 +1251,103 @@ +@@ -824,100 +1245,103 @@ \005\005\000\003\201\201\000\162\056\371\177\321\361\161\373\304 \236\366\305\136\121\212\100\230\270\150\370\233\034\203\330\342 \235\275\377\355\241\346\146\352\057\011\364\312\327\352\245\053 @@ -520,7 +828,7 @@ \141\165\164\150\157\162\151\172\145\144\040\165\163\145\040\157 \156\154\171\061\037\060\035\006\003\125\004\013\023\026\126\145 \162\151\123\151\147\156\040\124\162\165\163\164\040\116\145\164 -@@ -1386,100 +1401,103 @@ +@@ -971,100 +1395,103 @@ \005\000\003\201\201\000\121\115\315\276\134\313\230\031\234\025 \262\001\071\170\056\115\017\147\160\160\231\306\020\132\224\244 \123\115\124\155\053\257\015\135\100\213\144\323\327\356\336\126 @@ -574,9 +882,9 @@ +LEGACY_CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_TRUSTED_DELEGATOR +LEGACY_CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_TRUSTED_DELEGATOR +LEGACY_CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_TRUSTED_DELEGATOR - CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_TRUSTED_DELEGATOR + CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_MUST_VERIFY_TRUST CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_TRUSTED_DELEGATOR - CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_TRUSTED_DELEGATOR + CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_MUST_VERIFY_TRUST CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE # @@ -624,7 +932,7 @@ \055\163\141\061\020\060\016\006\003\125\004\013\023\007\122\157 \157\164\040\103\101\061\033\060\031\006\003\125\004\003\023\022 \107\154\157\142\141\154\123\151\147\156\040\122\157\157\164\040 -@@ -1655,100 +1673,520 @@ +@@ -1240,100 +1667,520 @@ \333\335\161\064\032\301\124\332\106\077\340\323\052\253\155\124 \042\365\072\142\315\040\157\272\051\211\327\335\221\356\323\134 \242\076\241\133\101\365\337\345\144\103\055\351\325\071\253\322 @@ -1145,7 +1453,7 @@ \002\021\000\213\133\165\126\204\124\205\013\000\317\257\070\110 \316\261\244 END -@@ -2423,100 +2861,274 @@ +@@ -2008,100 +2855,274 @@ \154\273\322\036\000\260\041\355\370\101\142\202\271\330\262\304 \273\106\120\363\061\305\217\001\250\164\353\365\170\047\332\347 \367\146\103\363\236\203\076\040\252\303\065\140\221\316 @@ -1420,7 +1728,111 @@ CKA_VALUE MULTILINE_OCTAL \060\202\004\052\060\202\003\022\240\003\002\001\002\002\004\070 \143\336\370\060\015\006\011\052\206\110\206\367\015\001\001\005 -@@ -2941,100 +3553,103 @@ +@@ -2410,100 +3431,103 @@ + \305\310\303\141\002\003\001\000\001\243\146\060\144\060\021\006 + \011\140\206\110\001\206\370\102\001\001\004\004\003\002\000\007 + \060\017\006\003\125\035\023\001\001\377\004\005\060\003\001\001 + \377\060\037\006\003\125\035\043\004\030\060\026\200\024\276\250 + \240\164\162\120\153\104\267\311\043\330\373\250\377\263\127\153 + \150\154\060\035\006\003\125\035\016\004\026\004\024\276\250\240 + \164\162\120\153\104\267\311\043\330\373\250\377\263\127\153\150 + \154\060\015\006\011\052\206\110\206\367\015\001\001\004\005\000 + \003\201\201\000\060\342\001\121\252\307\352\137\332\271\320\145 + \017\060\326\076\332\015\024\111\156\221\223\047\024\061\357\304 + \367\055\105\370\354\307\277\242\101\015\043\264\222\371\031\000 + \147\275\001\257\315\340\161\374\132\317\144\304\340\226\230\320 + \243\100\342\001\212\357\047\007\361\145\001\212\104\055\006\145 + \165\122\300\206\020\040\041\137\154\153\017\154\256\011\034\257 + \362\242\030\064\304\165\244\163\034\361\215\334\357\255\371\263 + \166\264\222\277\334\225\020\036\276\313\310\073\132\204\140\031 + \126\224\251\125 + END + + # Trust for Certificate "Equifax Secure Global eBusiness CA" + # Issuer: CN=Equifax Secure Global eBusiness CA-1,O=Equifax Secure Inc.,C=US + # Serial Number: 1 (0x1) + # Subject: CN=Equifax Secure Global eBusiness CA-1,O=Equifax Secure Inc.,C=US + # Not Valid Before: Mon Jun 21 04:00:00 1999 + # Not Valid After : Sun Jun 21 04:00:00 2020 + # Fingerprint (MD5): 8F:5D:77:06:27:C4:98:3C:5B:93:78:E7:D7:7D:9B:CC + # Fingerprint (SHA1): 7E:78:4A:10:1C:82:65:CC:2D:E1:F1:6D:47:B4:40:CA:D9:0A:19:45 + CKA_CLASS CK_OBJECT_CLASS CKO_NSS_TRUST + CKA_TOKEN CK_BBOOL CK_TRUE + CKA_PRIVATE CK_BBOOL CK_FALSE + CKA_MODIFIABLE CK_BBOOL CK_FALSE + CKA_LABEL UTF8 "Equifax Secure Global eBusiness CA" + CKA_CERT_SHA1_HASH MULTILINE_OCTAL + \176\170\112\020\034\202\145\314\055\341\361\155\107\264\100\312 + \331\012\031\105 + END + CKA_CERT_MD5_HASH MULTILINE_OCTAL + \217\135\167\006\047\304\230\074\133\223\170\347\327\175\233\314 + END + CKA_ISSUER MULTILINE_OCTAL + \060\132\061\013\060\011\006\003\125\004\006\023\002\125\123\061 + \034\060\032\006\003\125\004\012\023\023\105\161\165\151\146\141 + \170\040\123\145\143\165\162\145\040\111\156\143\056\061\055\060 + \053\006\003\125\004\003\023\044\105\161\165\151\146\141\170\040 + \123\145\143\165\162\145\040\107\154\157\142\141\154\040\145\102 + \165\163\151\156\145\163\163\040\103\101\055\061 + END + CKA_SERIAL_NUMBER MULTILINE_OCTAL + \002\001\001 + END ++LEGACY_CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_TRUSTED_DELEGATOR ++LEGACY_CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_TRUSTED_DELEGATOR ++LEGACY_CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_TRUSTED_DELEGATOR + CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_MUST_VERIFY_TRUST + CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_TRUSTED_DELEGATOR + CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_MUST_VERIFY_TRUST + CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE + + # + # Certificate "Equifax Secure eBusiness CA 1" + # + # Issuer: CN=Equifax Secure eBusiness CA-1,O=Equifax Secure Inc.,C=US + # Serial Number: 4 (0x4) + # Subject: CN=Equifax Secure eBusiness CA-1,O=Equifax Secure Inc.,C=US + # Not Valid Before: Mon Jun 21 04:00:00 1999 + # Not Valid After : Sun Jun 21 04:00:00 2020 + # Fingerprint (MD5): 64:9C:EF:2E:44:FC:C6:8F:52:07:D0:51:73:8F:CB:3D + # Fingerprint (SHA1): DA:40:18:8B:91:89:A3:ED:EE:AE:DA:97:FE:2F:9D:F5:B7:D1:8A:41 + CKA_CLASS CK_OBJECT_CLASS CKO_CERTIFICATE + CKA_TOKEN CK_BBOOL CK_TRUE + CKA_PRIVATE CK_BBOOL CK_FALSE + CKA_MODIFIABLE CK_BBOOL CK_FALSE + CKA_LABEL UTF8 "Equifax Secure eBusiness CA 1" + CKA_CERTIFICATE_TYPE CK_CERTIFICATE_TYPE CKC_X_509 + CKA_SUBJECT MULTILINE_OCTAL + \060\123\061\013\060\011\006\003\125\004\006\023\002\125\123\061 + \034\060\032\006\003\125\004\012\023\023\105\161\165\151\146\141 + \170\040\123\145\143\165\162\145\040\111\156\143\056\061\046\060 + \044\006\003\125\004\003\023\035\105\161\165\151\146\141\170\040 + \123\145\143\165\162\145\040\145\102\165\163\151\156\145\163\163 + \040\103\101\055\061 + END + CKA_ID UTF8 "0" + CKA_ISSUER MULTILINE_OCTAL + \060\123\061\013\060\011\006\003\125\004\006\023\002\125\123\061 + \034\060\032\006\003\125\004\012\023\023\105\161\165\151\146\141 + \170\040\123\145\143\165\162\145\040\111\156\143\056\061\046\060 + \044\006\003\125\004\003\023\035\105\161\165\151\146\141\170\040 + \123\145\143\165\162\145\040\145\102\165\163\151\156\145\163\163 + \040\103\101\055\061 + END + CKA_SERIAL_NUMBER MULTILINE_OCTAL + \002\001\004 + END + CKA_VALUE MULTILINE_OCTAL + \060\202\002\202\060\202\001\353\240\003\002\001\002\002\001\004 + \060\015\006\011\052\206\110\206\367\015\001\001\004\005\000\060 + \123\061\013\060\011\006\003\125\004\006\023\002\125\123\061\034 + \060\032\006\003\125\004\012\023\023\105\161\165\151\146\141\170 + \040\123\145\143\165\162\145\040\111\156\143\056\061\046\060\044 + \006\003\125\004\003\023\035\105\161\165\151\146\141\170\040\123 + \145\143\165\162\145\040\145\102\165\163\151\156\145\163\163\040 + \103\101\055\061\060\036\027\015\071\071\060\066\062\061\060\064 +@@ -2526,100 +3550,103 @@ \022\173\376\217\246\003\002\003\001\000\001\243\146\060\144\060 \021\006\011\140\206\110\001\206\370\102\001\001\004\004\003\002 \000\007\060\017\006\003\125\035\023\001\001\377\004\005\060\003 @@ -1474,9 +1886,9 @@ +LEGACY_CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_TRUSTED_DELEGATOR +LEGACY_CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_TRUSTED_DELEGATOR +LEGACY_CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_TRUSTED_DELEGATOR - CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_TRUSTED_DELEGATOR + CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_MUST_VERIFY_TRUST CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_TRUSTED_DELEGATOR - CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_TRUSTED_DELEGATOR + CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_MUST_VERIFY_TRUST CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE # @@ -1524,215 +1936,215 @@ \060\022\006\003\125\004\012\023\013\101\144\144\124\162\165\163 \164\040\101\102\061\035\060\033\006\003\125\004\013\023\024\101 \144\144\124\162\165\163\164\040\124\124\120\040\116\145\164\167 -@@ -4687,100 +5302,103 @@ - \270\260\243\355\126\225\310\142\141\234\005\242\315\302\142\046 - \141\315\020\026\327\314\264\145\064\320\021\212\255\250\251\005 - \146\357\164\363\155\137\235\231\257\366\213\373\353\122\262\005 - \230\242\157\052\305\124\275\045\275\137\256\310\206\352\106\054 - \301\263\275\301\351\111\160\030\026\227\010\023\214\040\340\033 - \056\072\107\313\036\344\000\060\225\133\364\105\243\300\032\260 - \001\116\253\275\300\043\156\143\077\200\112\305\007\355\334\342 - \157\307\301\142\361\343\162\326\004\310\164\147\013\372\210\253 - \241\001\310\157\360\024\257\322\231\315\121\223\176\355\056\070 - \307\275\316\106\120\075\162\343\171\045\235\233\210\053\020\040 - \335\245\270\062\237\215\340\051\337\041\164\206\202\333\057\202 - \060\306\307\065\206\263\371\226\137\106\333\014\105\375\363\120 - \303\157\306\303\110\255\106\246\341\047\107\012\035\016\233\266 - \302\167\177\143\362\340\175\032\276\374\340\337\327\307\247\154 - \260\371\256\272\074\375\164\264\021\350\130\015\200\274\323\250 - \200\072\231\355\165\314\106\173 +@@ -7415,100 +8442,103 @@ + \164\164\160\163\072\057\057\167\167\167\056\156\145\164\154\157 + \143\153\056\156\145\164\057\144\157\143\163\040\157\162\040\142 + \171\040\145\055\155\141\151\154\040\141\164\040\143\160\163\100 + \156\145\164\154\157\143\153\056\156\145\164\056\060\015\006\011 + \052\206\110\206\367\015\001\001\004\005\000\003\201\201\000\004 + \333\256\214\027\257\370\016\220\061\116\315\076\011\300\155\072 + \260\370\063\114\107\114\343\165\210\020\227\254\260\070\025\221 + \306\051\226\314\041\300\155\074\245\164\317\330\202\245\071\303 + \145\343\102\160\273\042\220\343\175\333\065\166\341\240\265\332 + \237\160\156\223\032\060\071\035\060\333\056\343\174\262\221\262 + \321\067\051\372\271\326\027\134\107\117\343\035\070\353\237\325 + \173\225\250\050\236\025\112\321\321\320\053\000\227\240\342\222 + \066\053\143\254\130\001\153\063\051\120\206\203\361\001\110 END - # Trust for Certificate "America Online Root Certification Authority 1" - # Issuer: CN=America Online Root Certification Authority 1,O=America Online Inc.,C=US - # Serial Number: 1 (0x1) - # Subject: CN=America Online Root Certification Authority 1,O=America Online Inc.,C=US - # Not Valid Before: Tue May 28 06:00:00 2002 - # Not Valid After : Thu Nov 19 20:43:00 2037 - # Fingerprint (MD5): 14:F1:08:AD:9D:FA:64:E2:89:E7:1C:CF:A8:AD:7D:5E - # Fingerprint (SHA1): 39:21:C1:15:C1:5D:0E:CA:5C:CB:5B:C4:F0:7D:21:D8:05:0B:56:6A + # Trust for Certificate "NetLock Business (Class B) Root" + # Issuer: CN=NetLock Uzleti (Class B) Tanusitvanykiado,OU=Tanusitvanykiadok,O=NetLock Halozatbiztonsagi Kft.,L=Budapest,C=HU + # Serial Number: 105 (0x69) + # Subject: CN=NetLock Uzleti (Class B) Tanusitvanykiado,OU=Tanusitvanykiadok,O=NetLock Halozatbiztonsagi Kft.,L=Budapest,C=HU + # Not Valid Before: Thu Feb 25 14:10:22 1999 + # Not Valid After : Wed Feb 20 14:10:22 2019 + # Fingerprint (MD5): 39:16:AA:B9:6A:41:E1:14:69:DF:9E:6C:3B:72:DC:B6 + # Fingerprint (SHA1): 87:9F:4B:EE:05:DF:98:58:3B:E3:60:D6:33:E7:0D:3F:FE:98:71:AF CKA_CLASS CK_OBJECT_CLASS CKO_NSS_TRUST CKA_TOKEN CK_BBOOL CK_TRUE CKA_PRIVATE CK_BBOOL CK_FALSE CKA_MODIFIABLE CK_BBOOL CK_FALSE - CKA_LABEL UTF8 "America Online Root Certification Authority 1" + CKA_LABEL UTF8 "NetLock Business (Class B) Root" CKA_CERT_SHA1_HASH MULTILINE_OCTAL - \071\041\301\025\301\135\016\312\134\313\133\304\360\175\041\330 - \005\013\126\152 + \207\237\113\356\005\337\230\130\073\343\140\326\063\347\015\077 + \376\230\161\257 END CKA_CERT_MD5_HASH MULTILINE_OCTAL - \024\361\010\255\235\372\144\342\211\347\034\317\250\255\175\136 + \071\026\252\271\152\101\341\024\151\337\236\154\073\162\334\266 END CKA_ISSUER MULTILINE_OCTAL - \060\143\061\013\060\011\006\003\125\004\006\023\002\125\123\061 - \034\060\032\006\003\125\004\012\023\023\101\155\145\162\151\143 - \141\040\117\156\154\151\156\145\040\111\156\143\056\061\066\060 - \064\006\003\125\004\003\023\055\101\155\145\162\151\143\141\040 - \117\156\154\151\156\145\040\122\157\157\164\040\103\145\162\164 - \151\146\151\143\141\164\151\157\156\040\101\165\164\150\157\162 - \151\164\171\040\061 + \060\201\231\061\013\060\011\006\003\125\004\006\023\002\110\125 + \061\021\060\017\006\003\125\004\007\023\010\102\165\144\141\160 + \145\163\164\061\047\060\045\006\003\125\004\012\023\036\116\145 + \164\114\157\143\153\040\110\141\154\157\172\141\164\142\151\172 + \164\157\156\163\141\147\151\040\113\146\164\056\061\032\060\030 + \006\003\125\004\013\023\021\124\141\156\165\163\151\164\166\141 + \156\171\153\151\141\144\157\153\061\062\060\060\006\003\125\004 + \003\023\051\116\145\164\114\157\143\153\040\125\172\154\145\164 + \151\040\050\103\154\141\163\163\040\102\051\040\124\141\156\165 + \163\151\164\166\141\156\171\153\151\141\144\157 END CKA_SERIAL_NUMBER MULTILINE_OCTAL - \002\001\001 + \002\001\151 END +LEGACY_CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_TRUSTED_DELEGATOR +LEGACY_CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_TRUSTED_DELEGATOR +LEGACY_CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_TRUSTED_DELEGATOR - CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_TRUSTED_DELEGATOR + CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_MUST_VERIFY_TRUST CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_TRUSTED_DELEGATOR - CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_TRUSTED_DELEGATOR + CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_MUST_VERIFY_TRUST CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE # - # Certificate "America Online Root Certification Authority 2" + # Certificate "NetLock Express (Class C) Root" # - # Issuer: CN=America Online Root Certification Authority 2,O=America Online Inc.,C=US - # Serial Number: 1 (0x1) - # Subject: CN=America Online Root Certification Authority 2,O=America Online Inc.,C=US - # Not Valid Before: Tue May 28 06:00:00 2002 - # Not Valid After : Tue Sep 29 14:08:00 2037 - # Fingerprint (MD5): D6:ED:3C:CA:E2:66:0F:AF:10:43:0D:77:9B:04:09:BF - # Fingerprint (SHA1): 85:B5:FF:67:9B:0C:79:96:1F:C8:6E:44:22:00:46:13:DB:17:92:84 + # Issuer: CN=NetLock Expressz (Class C) Tanusitvanykiado,OU=Tanusitvanykiadok,O=NetLock Halozatbiztonsagi Kft.,L=Budapest,C=HU + # Serial Number: 104 (0x68) + # Subject: CN=NetLock Expressz (Class C) Tanusitvanykiado,OU=Tanusitvanykiadok,O=NetLock Halozatbiztonsagi Kft.,L=Budapest,C=HU + # Not Valid Before: Thu Feb 25 14:08:11 1999 + # Not Valid After : Wed Feb 20 14:08:11 2019 + # Fingerprint (MD5): 4F:EB:F1:F0:70:C2:80:63:5D:58:9F:DA:12:3C:A9:C4 + # Fingerprint (SHA1): E3:92:51:2F:0A:CF:F5:05:DF:F6:DE:06:7F:75:37:E1:65:EA:57:4B CKA_CLASS CK_OBJECT_CLASS CKO_CERTIFICATE CKA_TOKEN CK_BBOOL CK_TRUE CKA_PRIVATE CK_BBOOL CK_FALSE CKA_MODIFIABLE CK_BBOOL CK_FALSE - CKA_LABEL UTF8 "America Online Root Certification Authority 2" + CKA_LABEL UTF8 "NetLock Express (Class C) Root" CKA_CERTIFICATE_TYPE CK_CERTIFICATE_TYPE CKC_X_509 CKA_SUBJECT MULTILINE_OCTAL - \060\143\061\013\060\011\006\003\125\004\006\023\002\125\123\061 - \034\060\032\006\003\125\004\012\023\023\101\155\145\162\151\143 - \141\040\117\156\154\151\156\145\040\111\156\143\056\061\066\060 - \064\006\003\125\004\003\023\055\101\155\145\162\151\143\141\040 - \117\156\154\151\156\145\040\122\157\157\164\040\103\145\162\164 - \151\146\151\143\141\164\151\157\156\040\101\165\164\150\157\162 - \151\164\171\040\062 + \060\201\233\061\013\060\011\006\003\125\004\006\023\002\110\125 + \061\021\060\017\006\003\125\004\007\023\010\102\165\144\141\160 + \145\163\164\061\047\060\045\006\003\125\004\012\023\036\116\145 + \164\114\157\143\153\040\110\141\154\157\172\141\164\142\151\172 + \164\157\156\163\141\147\151\040\113\146\164\056\061\032\060\030 + \006\003\125\004\013\023\021\124\141\156\165\163\151\164\166\141 + \156\171\153\151\141\144\157\153\061\064\060\062\006\003\125\004 + \003\023\053\116\145\164\114\157\143\153\040\105\170\160\162\145 + \163\163\172\040\050\103\154\141\163\163\040\103\051\040\124\141 + \156\165\163\151\164\166\141\156\171\153\151\141\144\157 END CKA_ID UTF8 "0" CKA_ISSUER MULTILINE_OCTAL - \060\143\061\013\060\011\006\003\125\004\006\023\002\125\123\061 - \034\060\032\006\003\125\004\012\023\023\101\155\145\162\151\143 - \141\040\117\156\154\151\156\145\040\111\156\143\056\061\066\060 - \064\006\003\125\004\003\023\055\101\155\145\162\151\143\141\040 - \117\156\154\151\156\145\040\122\157\157\164\040\103\145\162\164 - \151\146\151\143\141\164\151\157\156\040\101\165\164\150\157\162 - \151\164\171\040\062 + \060\201\233\061\013\060\011\006\003\125\004\006\023\002\110\125 + \061\021\060\017\006\003\125\004\007\023\010\102\165\144\141\160 + \145\163\164\061\047\060\045\006\003\125\004\012\023\036\116\145 + \164\114\157\143\153\040\110\141\154\157\172\141\164\142\151\172 + \164\157\156\163\141\147\151\040\113\146\164\056\061\032\060\030 + \006\003\125\004\013\023\021\124\141\156\165\163\151\164\166\141 + \156\171\153\151\141\144\157\153\061\064\060\062\006\003\125\004 + \003\023\053\116\145\164\114\157\143\153\040\105\170\160\162\145 + \163\163\172\040\050\103\154\141\163\163\040\103\051\040\124\141 + \156\165\163\151\164\166\141\156\171\153\151\141\144\157 END CKA_SERIAL_NUMBER MULTILINE_OCTAL - \002\001\001 + \002\001\150 END CKA_VALUE MULTILINE_OCTAL - \060\202\005\244\060\202\003\214\240\003\002\001\002\002\001\001 - \060\015\006\011\052\206\110\206\367\015\001\001\005\005\000\060 - \143\061\013\060\011\006\003\125\004\006\023\002\125\123\061\034 - \060\032\006\003\125\004\012\023\023\101\155\145\162\151\143\141 - \040\117\156\154\151\156\145\040\111\156\143\056\061\066\060\064 - \006\003\125\004\003\023\055\101\155\145\162\151\143\141\040\117 -@@ -4856,100 +5474,103 @@ - \016\063\022\133\274\225\345\062\220\250\263\306\154\203\255\167 - \356\213\176\176\261\251\253\323\341\361\266\300\261\352\210\300 - \347\323\220\351\050\222\224\173\150\173\227\052\012\147\055\205 - \002\070\020\344\003\141\324\332\045\066\307\010\130\055\241\247 - \121\257\060\012\111\365\246\151\207\007\055\104\106\166\216\052 - \345\232\073\327\030\242\374\234\070\020\314\306\073\322\265\027 - \072\157\375\256\045\275\365\162\131\144\261\164\052\070\137\030 - \114\337\317\161\004\132\066\324\277\057\231\234\350\331\272\261 - \225\346\002\113\041\241\133\325\301\117\217\256\151\155\123\333 - \001\223\265\134\036\030\335\144\132\312\030\050\076\143\004\021 - \375\034\215\000\017\270\067\337\147\212\235\146\251\002\152\221 - \377\023\312\057\135\203\274\207\223\154\334\044\121\026\004\045 - \146\372\263\331\302\272\051\276\232\110\070\202\231\364\277\073 - \112\061\031\371\277\216\041\063\024\312\117\124\137\373\316\373 - \217\161\177\375\136\031\240\017\113\221\270\304\124\274\006\260 - \105\217\046\221\242\216\376\251 +@@ -7588,100 +8618,103 @@ + \145\164\154\157\143\153\056\156\145\164\057\144\157\143\163\040 + \157\162\040\142\171\040\145\055\155\141\151\154\040\141\164\040 + \143\160\163\100\156\145\164\154\157\143\153\056\156\145\164\056 + \060\015\006\011\052\206\110\206\367\015\001\001\004\005\000\003 + \201\201\000\020\255\177\327\014\062\200\012\330\206\361\171\230 + \265\255\324\315\263\066\304\226\110\301\134\315\232\331\005\056 + \237\276\120\353\364\046\024\020\055\324\146\027\370\236\301\047 + \375\361\355\344\173\113\240\154\265\253\232\127\160\246\355\240 + \244\355\056\365\375\374\275\376\115\067\010\014\274\343\226\203 + \042\365\111\033\177\113\053\264\124\301\200\174\231\116\035\320 + \214\356\320\254\345\222\372\165\126\376\144\240\023\217\270\270 + \026\235\141\005\147\200\310\320\330\245\007\002\064\230\004\215 + \063\004\324 END - # Trust for Certificate "America Online Root Certification Authority 2" - # Issuer: CN=America Online Root Certification Authority 2,O=America Online Inc.,C=US - # Serial Number: 1 (0x1) - # Subject: CN=America Online Root Certification Authority 2,O=America Online Inc.,C=US - # Not Valid Before: Tue May 28 06:00:00 2002 - # Not Valid After : Tue Sep 29 14:08:00 2037 - # Fingerprint (MD5): D6:ED:3C:CA:E2:66:0F:AF:10:43:0D:77:9B:04:09:BF - # Fingerprint (SHA1): 85:B5:FF:67:9B:0C:79:96:1F:C8:6E:44:22:00:46:13:DB:17:92:84 + # Trust for Certificate "NetLock Express (Class C) Root" + # Issuer: CN=NetLock Expressz (Class C) Tanusitvanykiado,OU=Tanusitvanykiadok,O=NetLock Halozatbiztonsagi Kft.,L=Budapest,C=HU + # Serial Number: 104 (0x68) + # Subject: CN=NetLock Expressz (Class C) Tanusitvanykiado,OU=Tanusitvanykiadok,O=NetLock Halozatbiztonsagi Kft.,L=Budapest,C=HU + # Not Valid Before: Thu Feb 25 14:08:11 1999 + # Not Valid After : Wed Feb 20 14:08:11 2019 + # Fingerprint (MD5): 4F:EB:F1:F0:70:C2:80:63:5D:58:9F:DA:12:3C:A9:C4 + # Fingerprint (SHA1): E3:92:51:2F:0A:CF:F5:05:DF:F6:DE:06:7F:75:37:E1:65:EA:57:4B CKA_CLASS CK_OBJECT_CLASS CKO_NSS_TRUST CKA_TOKEN CK_BBOOL CK_TRUE CKA_PRIVATE CK_BBOOL CK_FALSE CKA_MODIFIABLE CK_BBOOL CK_FALSE - CKA_LABEL UTF8 "America Online Root Certification Authority 2" + CKA_LABEL UTF8 "NetLock Express (Class C) Root" CKA_CERT_SHA1_HASH MULTILINE_OCTAL - \205\265\377\147\233\014\171\226\037\310\156\104\042\000\106\023 - \333\027\222\204 + \343\222\121\057\012\317\365\005\337\366\336\006\177\165\067\341 + \145\352\127\113 END CKA_CERT_MD5_HASH MULTILINE_OCTAL - \326\355\074\312\342\146\017\257\020\103\015\167\233\004\011\277 + \117\353\361\360\160\302\200\143\135\130\237\332\022\074\251\304 END CKA_ISSUER MULTILINE_OCTAL - \060\143\061\013\060\011\006\003\125\004\006\023\002\125\123\061 - \034\060\032\006\003\125\004\012\023\023\101\155\145\162\151\143 - \141\040\117\156\154\151\156\145\040\111\156\143\056\061\066\060 - \064\006\003\125\004\003\023\055\101\155\145\162\151\143\141\040 - \117\156\154\151\156\145\040\122\157\157\164\040\103\145\162\164 - \151\146\151\143\141\164\151\157\156\040\101\165\164\150\157\162 - \151\164\171\040\062 + \060\201\233\061\013\060\011\006\003\125\004\006\023\002\110\125 + \061\021\060\017\006\003\125\004\007\023\010\102\165\144\141\160 + \145\163\164\061\047\060\045\006\003\125\004\012\023\036\116\145 + \164\114\157\143\153\040\110\141\154\157\172\141\164\142\151\172 + \164\157\156\163\141\147\151\040\113\146\164\056\061\032\060\030 + \006\003\125\004\013\023\021\124\141\156\165\163\151\164\166\141 + \156\171\153\151\141\144\157\153\061\064\060\062\006\003\125\004 + \003\023\053\116\145\164\114\157\143\153\040\105\170\160\162\145 + \163\163\172\040\050\103\154\141\163\163\040\103\051\040\124\141 + \156\165\163\151\164\166\141\156\171\153\151\141\144\157 END CKA_SERIAL_NUMBER MULTILINE_OCTAL - \002\001\001 + \002\001\150 END +LEGACY_CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_TRUSTED_DELEGATOR +LEGACY_CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_TRUSTED_DELEGATOR +LEGACY_CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_TRUSTED_DELEGATOR - CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_TRUSTED_DELEGATOR + CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_MUST_VERIFY_TRUST CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_TRUSTED_DELEGATOR - CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_TRUSTED_DELEGATOR + CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_MUST_VERIFY_TRUST CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE # - # Certificate "Visa eCommerce Root" + # Certificate "XRamp Global CA Root" # - # Issuer: CN=Visa eCommerce Root,OU=Visa International Service Association,O=VISA,C=US - # Serial Number:13:86:35:4d:1d:3f:06:f2:c1:f9:65:05:d5:90:1c:62 - # Subject: CN=Visa eCommerce Root,OU=Visa International Service Association,O=VISA,C=US - # Not Valid Before: Wed Jun 26 02:18:36 2002 - # Not Valid After : Fri Jun 24 00:16:12 2022 - # Fingerprint (MD5): FC:11:B8:D8:08:93:30:00:6D:23:F9:7E:EB:52:1E:02 - # Fingerprint (SHA1): 70:17:9B:86:8C:00:A4:FA:60:91:52:22:3F:9F:3E:32:BD:E0:05:62 + # Issuer: CN=XRamp Global Certification Authority,O=XRamp Security Services Inc,OU=www.xrampsecurity.com,C=US + # Serial Number:50:94:6c:ec:18:ea:d5:9c:4d:d5:97:ef:75:8f:a0:ad + # Subject: CN=XRamp Global Certification Authority,O=XRamp Security Services Inc,OU=www.xrampsecurity.com,C=US + # Not Valid Before: Mon Nov 01 17:14:04 2004 + # Not Valid After : Mon Jan 01 05:37:19 2035 + # Fingerprint (MD5): A1:0B:44:B3:CA:10:D8:00:6E:9D:0F:D8:0F:92:0A:D1 + # Fingerprint (SHA1): B8:01:86:D1:EB:9C:86:A5:41:04:CF:30:54:F3:4C:52:B7:E5:58:C6 CKA_CLASS CK_OBJECT_CLASS CKO_CERTIFICATE CKA_TOKEN CK_BBOOL CK_TRUE CKA_PRIVATE CK_BBOOL CK_FALSE CKA_MODIFIABLE CK_BBOOL CK_FALSE - CKA_LABEL UTF8 "Visa eCommerce Root" + CKA_LABEL UTF8 "XRamp Global CA Root" CKA_CERTIFICATE_TYPE CK_CERTIFICATE_TYPE CKC_X_509 CKA_SUBJECT MULTILINE_OCTAL - \060\153\061\013\060\011\006\003\125\004\006\023\002\125\123\061 - \015\060\013\006\003\125\004\012\023\004\126\111\123\101\061\057 - \060\055\006\003\125\004\013\023\046\126\151\163\141\040\111\156 - \164\145\162\156\141\164\151\157\156\141\154\040\123\145\162\166 - \151\143\145\040\101\163\163\157\143\151\141\164\151\157\156\061 - \034\060\032\006\003\125\004\003\023\023\126\151\163\141\040\145 - \103\157\155\155\145\162\143\145\040\122\157\157\164 + \060\201\202\061\013\060\011\006\003\125\004\006\023\002\125\123 + \061\036\060\034\006\003\125\004\013\023\025\167\167\167\056\170 + \162\141\155\160\163\145\143\165\162\151\164\171\056\143\157\155 + \061\044\060\042\006\003\125\004\012\023\033\130\122\141\155\160 + \040\123\145\143\165\162\151\164\171\040\123\145\162\166\151\143 + \145\163\040\111\156\143\061\055\060\053\006\003\125\004\003\023 + \044\130\122\141\155\160\040\107\154\157\142\141\154\040\103\145 + \162\164\151\146\151\143\141\164\151\157\156\040\101\165\164\150 + \157\162\151\164\171 END CKA_ID UTF8 "0" CKA_ISSUER MULTILINE_OCTAL - \060\153\061\013\060\011\006\003\125\004\006\023\002\125\123\061 - \015\060\013\006\003\125\004\012\023\004\126\111\123\101\061\057 - \060\055\006\003\125\004\013\023\046\126\151\163\141\040\111\156 - \164\145\162\156\141\164\151\157\156\141\154\040\123\145\162\166 - \151\143\145\040\101\163\163\157\143\151\141\164\151\157\156\061 - \034\060\032\006\003\125\004\003\023\023\126\151\163\141\040\145 - \103\157\155\155\145\162\143\145\040\122\157\157\164 + \060\201\202\061\013\060\011\006\003\125\004\006\023\002\125\123 + \061\036\060\034\006\003\125\004\013\023\025\167\167\167\056\170 + \162\141\155\160\163\145\143\165\162\151\164\171\056\143\157\155 + \061\044\060\042\006\003\125\004\012\023\033\130\122\141\155\160 + \040\123\145\143\165\162\151\164\171\040\123\145\162\166\151\143 + \145\163\040\111\156\143\061\055\060\053\006\003\125\004\003\023 + \044\130\122\141\155\160\040\107\154\157\142\141\154\040\103\145 + \162\164\151\146\151\143\141\164\151\157\156\040\101\165\164\150 + \157\162\151\164\171 END CKA_SERIAL_NUMBER MULTILINE_OCTAL - \002\020\023\206\065\115\035\077\006\362\301\371\145\005\325\220 - \034\142 + \002\020\120\224\154\354\030\352\325\234\115\325\227\357\165\217 + \240\255 END CKA_VALUE MULTILINE_OCTAL - \060\202\003\242\060\202\002\212\240\003\002\001\002\002\020\023 - \206\065\115\035\077\006\362\301\371\145\005\325\220\034\142\060 - \015\006\011\052\206\110\206\367\015\001\001\005\005\000\060\153 - \061\013\060\011\006\003\125\004\006\023\002\125\123\061\015\060 - \013\006\003\125\004\012\023\004\126\111\123\101\061\057\060\055 -@@ -17860,100 +18481,103 @@ + \060\202\004\060\060\202\003\030\240\003\002\001\002\002\020\120 +@@ -17139,100 +18172,103 @@ \005\252\354\003\037\170\177\236\223\271\232\000\252\043\175\326 \254\205\242\143\105\307\162\047\314\364\114\306\165\161\322\071 \357\117\102\360\165\337\012\220\306\216\040\157\230\017\370\254