The Mozilla CA root certificate bundle
4318c9f437
Add Object Signing certificates Update to CKBI 2.54 from NSS 3.79 Removing: # Certificate "GlobalSign Root CA - R2" # Certificate "DST Root CA X3" # Certificate "Explicitly Distrusted DigiNotar PKIoverheid G2" Adding: # Certificate "TunTrust Root CA" # Certificate "HARICA TLS RSA Root CA 2021" # Certificate "HARICA TLS ECC Root CA 2021" # Certificate "HARICA Client RSA Root CA 2021" # Certificate "HARICA Client ECC Root CA 2021" # Certificate "Autoridad de Certificacion Firmaprofesional CIF A62634068" # Certificate "vTrus ECC Root CA" # Certificate "vTrus Root CA" # Certificate "ISRG Root X2" # Certificate "HiPKI Root CA - G1" # Certificate "Telia Root CA v2" # Certificate "D-TRUST BR Root CA 1 2020" # Certificate "D-TRUST EV Root CA 1 2020" # Certificate "CAEDICOM Root" # Certificate "I.CA Root CA/RSA" # Certificate "MULTICERT Root Certification Authority 01" # Certificate "Certification Authority of WoSign G2" # Certificate "CA WoSign ECC Root" # Certificate "CCA India 2015 SPL" # Certificate "Swedish Government Root Authority v3" # Certificate "Swedish Government Root Authority v2" # Certificate "Tunisian Root Certificate Authority - TunRootCA2" # Certificate "OpenTrust Root CA G1" # Certificate "OpenTrust Root CA G2" # Certificate "OpenTrust Root CA G3" # Certificate "Certplus Root CA G1" # Certificate "Certplus Root CA G2" # Certificate "Government Root Certification Authority" # Certificate "A-Trust-Qual-02" # Certificate "Thailand National Root Certification Authority - G1" # Certificate "TrustCor ECA-1" # Certificate "TrustCor RootCert CA-2" # Certificate "TrustCor RootCert CA-1" # Certificate "Certification Authority of WoSign" # Certificate "CA 沃通根证书" # Certificate "SSC GDL CA Root B" # Certificate "SAPO Class 2 Root CA" # Certificate "SAPO Class 3 Root CA" # Certificate "SAPO Class 4 Root CA" # Certificate "CA Disig Root R1" # Certificate "Autoridad Certificadora Raíz Nacional de Uruguay" # Certificate "ApplicationCA2 Root" # Certificate "GlobalSign" # Certificate "Symantec Class 3 Public Primary Certification Authority - G6" # Certificate "Symantec Class 3 Public Primary Certification Authority - G4" # Certificate "Halcom Root CA" # Certificate "Swisscom Root EV CA 2" # Certificate "CFCA GT CA" # Certificate "Digidentity L3 Root CA - G2" # Certificate "SITHS Root CA v1" # Certificate "Macao Post eSignTrust Root Certification Authority (G02)" # Certificate "Autoridade Certificadora Raiz Brasileira v2" # Certificate "Swisscom Root CA 2" # Certificate "IGC/A AC racine Etat francais" # Certificate "PersonalID Trustworthy RootCA 2011" # Certificate "Swedish Government Root Authority v1" # Certificate "Swiss Government Root CA II" # Certificate "Swiss Government Root CA I" # Certificate "Network Solutions Certificate Authority" # Certificate "COMODO Certification Authority" # Certificate "LuxTrust Global Root" # Certificate "AC1 RAIZ MTIN" # Certificate "Microsoft Root Certificate Authority 2011" # Certificate "CCA India 2011" # Certificate "ANCERT Certificados Notariales V2" # Certificate "ANCERT Certificados CGN V2" # Certificate "EE Certification Centre Root CA" # Certificate "DigiNotar Root CA G2" # Certificate "Federal Common Policy CA" # Certificate "Autoridad de Certificacion Raiz del Estado Venezolano" # Certificate "Autoridad de Certificacion Raiz del Estado Venezolano" # Certificate "China Internet Network Information Center EV Certificates Root" # Certificate "Verizon Global Root CA" # Certificate "SwissSign Silver Root CA - G3" # Certificate "SwissSign Platinum Root CA - G3" # Certificate "SwissSign Gold Root CA - G3" # Certificate "Microsec e-Szigno Root CA 2009" # Certificate "SITHS CA v3" # Certificate "Certinomis - Autorité Racine" # Certificate "ANF Server CA" # Certificate "Thawte Premium Server CA" # Certificate "Thawte Server CA" # Certificate "TC TrustCenter Universal CA III" # Certificate "KEYNECTIS ROOT CA" # Certificate "I.CA - Standard Certification Authority, 09/2009" # Certificate "I.CA - Qualified Certification Authority, 09/2009" # Certificate "VI Registru Centras RCSC (RootCA)" # Certificate "CCA India 2007" # Certificate "Autoridade Certificadora Raiz Brasileira v1" # Certificate "ipsCA Global CA Root" # Certificate "ipsCA Main CA Root" # Certificate "Actalis Authentication CA G1" # Certificate "A-Trust-Qual-03" # Certificate "AddTrust External CA Root" # Certificate "ECRaizEstado" # Certificate "Configuration" # Certificate "FNMT-RCM" # Certificate "StartCom Certification Authority" # Certificate "TWCA Root Certification Authority" # Certificate "VeriSign Class 3 Public Primary Certification Authority - G4" # Certificate "thawte Primary Root CA - G2" # Certificate "GeoTrust Primary Certification Authority - G2" # Certificate "VeriSign Universal Root Certification Authority" # Certificate "thawte Primary Root CA - G3" # Certificate "GeoTrust Primary Certification Authority - G3" # Certificate "E-ME SSI (RCA)" # Certificate "ACEDICOM Root" # Certificate "Autoridad Certificadora Raiz de la Secretaria de Economia" # Certificate "Correo Uruguayo - Root CA" # Certificate "CNNIC ROOT" # Certificate "Common Policy" # Certificate "Macao Post eSignTrust Root Certification Authority" # Certificate "Staat der Nederlanden Root CA - G2" # Certificate "NetLock Platina (Class Platinum) Főtanúsítvány" # Certificate "AC Raíz Certicámara S.A." # Certificate "Cisco Root CA 2048" # Certificate "CA Disig" # Certificate "InfoNotary CSP Root" # Certificate "UCA Global Root" # Certificate "UCA Root" # Certificate "DigiNotar Root CA" # Certificate "Starfield Services Root Certificate Authority" # Certificate "I.CA - Qualified root certificate" # Certificate "I.CA - Standard root certificate" # Certificate "e-Guven Kok Elektronik Sertifika Hizmet Saglayicisi" # Certificate "Japanese Government" # Certificate "AdminCA-CD-T01" # Certificate "Admin-Root-CA" # Certificate "Izenpe.com" # Certificate "TÜBİTAK UEKAE Kök Sertifika Hizmet Sağlayıcısı - Sürüm 3" # Certificate "Halcom CA FO" # Certificate "Halcom CA PO 2" # Certificate "Root CA" # Certificate "GPKIRootCA" # Certificate "ACNLB" # Certificate "state-institutions" # Certificate "state-institutions" # Certificate "SECOM Trust Systems CO.,LTD." # Certificate "D-TRUST Qualified Root CA 1 2007:PN" # Certificate "D-TRUST Root Class 2 CA 2007" # Certificate "D-TRUST Root Class 3 CA 2007" # Certificate "SSC Root CA A" # Certificate "SSC Root CA B" # Certificate "SSC Root CA C" # Certificate "Autoridad de Certificacion de la Abogacia" # Certificate "Root CA Generalitat Valenciana" # Certificate "VAS Latvijas Pasts SSI(RCA)" # Certificate "ANCERT Certificados CGN" # Certificate "ANCERT Certificados Notariales" # Certificate "ANCERT Corporaciones de Derecho Publico" # Certificate "GLOBALTRUST" # Certificate "Certipost E-Trust TOP Root CA" # Certificate "Certipost E-Trust Primary Qualified CA" # Certificate "Certipost E-Trust Primary Normalised CA" # Certificate "GlobalSign" # Certificate "IGC/A" # Certificate "S-TRUST Authentication and Encryption Root CA 2005:PN" # Certificate "TC TrustCenter Universal CA I" # Certificate "TC TrustCenter Universal CA II" # Certificate "TC TrustCenter Class 2 CA II" # Certificate "TC TrustCenter Class 4 CA II" # Certificate "Swisscom Root CA 1" # Certificate "Microsec e-Szigno Root CA" # Certificate "LGPKI" # Certificate "AC RAIZ DNIE" # Certificate "Common Policy" # Certificate "TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı" # Certificate "A-Trust-nQual-03" # Certificate "A-Trust-nQual-03" # Certificate "CertRSA01" # Certificate "KISA RootCA 1" # Certificate "KISA RootCA 3" # Certificate "NetLock Minositett Kozjegyzoi (Class QA) Tanusitvanykiado" # Certificate "A-CERT ADVANCED" # Certificate "A-Trust-Qual-01" # Certificate "A-Trust-nQual-01" # Certificate "A-Trust-Qual-02" # Certificate "Staat der Nederlanden Root CA" # Certificate "Serasa Certificate Authority II" # Certificate "TDC Internet" # Certificate "America Online Root Certification Authority 2" # Certificate "Autoridad de Certificacion Firmaprofesional CIF A62634068" # Certificate "Government Root Certification Authority" # Certificate "RSA Security Inc" # Certificate "Public Notary Root" # Certificate "GeoTrust Global CA" # Certificate "GeoTrust Global CA 2" # Certificate "GeoTrust Universal CA" # Certificate "GeoTrust Universal CA 2" # Certificate "QuoVadis Root Certification Authority" # Certificate "Autoridade Certificadora Raiz Brasileira" # Certificate "Post.Trust Root CA" # Certificate "Microsoft Root Authority" # Certificate "Microsoft Root Certificate Authority" # Certificate "Microsoft Root Certificate Authority 2010" # Certificate "Entrust.net Secure Server Certification Authority" # Certificate "UTN-USERFirst-Object" # Certificate "BYTE Root Certification Authority 001" # Certificate "CISRCA1" # Certificate "ePKI Root Certification Authority - G2" # Certificate "ePKI EV SSL Certification Authority - G1" # Certificate "AC Raíz Certicámara S.A." # Certificate "SSL.com EV Root Certification Authority RSA" # Certificate "LuxTrust Global Root 2" # Certificate "ACA ROOT" # Certificate "Security Communication ECC RootCA1" # Certificate "Security Communication RootCA3" # Certificate "CHAMBERS OF COMMERCE ROOT - 2016" # Certificate "Network Solutions RSA Certificate Authority" # Certificate "Network Solutions ECC Certificate Authority" # Certificate "Australian Defence Public Root CA" # Certificate "SI-TRUST Root" # Certificate "Halcom Root Certificate Authority" # Certificate "Application CA G3 Root" # Certificate "GLOBALTRUST 2015" # Certificate "Microsoft ECC Product Root Certificate Authority 2018" # Certificate "emSign Root CA - G2" # Certificate "emSign Root CA - C2" # Certificate "Microsoft ECC TS Root Certificate Authority 2018" # Certificate "DigiCert CS ECC P384 Root G5" # Certificate "DigiCert CS RSA4096 Root G5" # Certificate "DigiCert RSA4096 Root G5" # Certificate "DigiCert ECC P384 Root G5" # Certificate "HARICA Code Signing RSA Root CA 2021" # Certificate "HARICA Code Signing ECC Root CA 2021" # Certificate "Microsoft Identity Verification Root Certificate Authority 2020" |
||
---|---|---|
tests | ||
.gitignore | ||
ca-certificates.spec | ||
ca-legacy | ||
ca-legacy.8.txt | ||
ca-legacy.conf | ||
certdata2pem.py | ||
certdata.txt | ||
check_certs.sh | ||
fetch.sh | ||
gating.yaml | ||
nssckbi.h | ||
README.edk2 | ||
README.etc | ||
README.extr | ||
README.java | ||
README.openssl | ||
README.pem | ||
README.src | ||
README.usr | ||
sort-blocks.py | ||
sources | ||
trust-fixes | ||
update-ca-trust | ||
update-ca-trust.8.txt |
This directory /usr/share/pki/ca-trust-source/ contains CA certificates and trust settings in the PEM file format. The trust settings found here will be interpreted with a low priority - lower than the ones found in /etc/pki/ca-trust/source/ . ============================================================================= QUICK HELP: To add a certificate in the simple PEM or DER file formats to the list of CAs trusted on the system: Copy it to the /usr/share/pki/ca-trust-source/anchors/ subdirectory, and run the update-ca-trust command. If your certificate is in the extended BEGIN TRUSTED file format, then place it into the main source/ directory instead. ============================================================================= Please refer to the update-ca-trust(8) manual page for additional information.