The Mozilla CA root certificate bundle
Go to file
Krenželok František ad39889892 Update to CKBI 2.90_v9.0.316 from NSS 3.126
Resolves: RHEL-212593


Removing:
- XRamp Global CA Root
- ePKI Root Certification Authority
- certSIGN ROOT CA
- Explicitly Distrust DigiNotar Root CA
- CommScope Public Trust ECC Root-01
- CommScope Public Trust ECC Root-02
- CommScope Public Trust RSA Root-01
- CommScope Public Trust RSA Root-02
- FIRMAPROFESIONAL CA ROOT-A WEB
- SecureSign Root CA12

Adding:
- OISTE Client Root ECC G1
- OISTE Client Root RSA G1
- OISTE Server Root ECC G1
- OISTE Server Root RSA G1
- e-Szigno TLS Root CA 2023
- SecureSign Root CA16
- SECOM TLS RSA Root CA 2024
- SECOM TLS ECC Root CA 2024
- SECOM SMIME RSA Root CA 2024
- Telia EC Email Root CA v3
- Telia EC TLS Root CA v3
- Telia RSA Email Root CA v3
- Telia RSA TLS Root CA v3
- certSIGN
- Chunghwa Telecom Co., Ltd.
- XRamp Global Certification Authority
2026-08-14 16:23:52 +02:00
.fmf Switch to OSCI 2025-06-26 19:33:32 +02:00
plans Switch to OSCI 2025-06-26 19:33:32 +02:00
.gitignore Import rpm: c8s 2023-02-27 12:24:54 -05:00
ca-certificates.spec Update to CKBI 2.90_v9.0.316 from NSS 3.126 2026-08-14 16:23:52 +02:00
ca-legacy Auto sync2gitlab import of ca-certificates-2021.2.50-82.el8.src.rpm 2022-05-26 01:04:17 -04:00
ca-legacy.8.txt Auto sync2gitlab import of ca-certificates-2021.2.50-82.el8.src.rpm 2022-05-26 01:04:17 -04:00
ca-legacy.conf Auto sync2gitlab import of ca-certificates-2021.2.50-82.el8.src.rpm 2022-05-26 01:04:17 -04:00
certdata2pem.py Auto sync2gitlab import of ca-certificates-2021.2.50-82.el8.src.rpm 2022-05-26 01:04:17 -04:00
certdata.txt Update to CKBI 2.90_v9.0.316 from NSS 3.126 2026-08-14 16:23:52 +02:00
ci.fmf Switch to OSCI 2025-06-26 19:33:32 +02:00
gating.yaml Switch to OSCI 2025-06-26 19:33:32 +02:00
nssckbi.h Update to CKBI 2.90_v9.0.316 from NSS 3.126 2026-08-14 16:23:52 +02:00
README.edk2 Auto sync2gitlab import of ca-certificates-2021.2.50-82.el8.src.rpm 2022-05-26 01:04:17 -04:00
README.etc Auto sync2gitlab import of ca-certificates-2021.2.50-82.el8.src.rpm 2022-05-26 01:04:17 -04:00
README.extr Auto sync2gitlab import of ca-certificates-2021.2.50-82.el8.src.rpm 2022-05-26 01:04:17 -04:00
README.java Auto sync2gitlab import of ca-certificates-2021.2.50-82.el8.src.rpm 2022-05-26 01:04:17 -04:00
README.openssl Auto sync2gitlab import of ca-certificates-2021.2.50-82.el8.src.rpm 2022-05-26 01:04:17 -04:00
README.pem Auto sync2gitlab import of ca-certificates-2021.2.50-82.el8.src.rpm 2022-05-26 01:04:17 -04:00
README.src Auto sync2gitlab import of ca-certificates-2021.2.50-82.el8.src.rpm 2022-05-26 01:04:17 -04:00
README.usr Auto sync2gitlab import of ca-certificates-2021.2.50-82.el8.src.rpm 2022-05-26 01:04:17 -04:00
sources Import rpm: c8s 2023-02-27 12:24:54 -05:00
trust-fixes Auto sync2gitlab import of ca-certificates-2022.2.54-80.0.el8_6.src.rpm 2022-07-20 12:10:18 +00:00
update-ca-trust Auto sync2gitlab import of ca-certificates-2021.2.50-82.el8.src.rpm 2022-05-26 01:04:17 -04:00
update-ca-trust.8.txt Auto sync2gitlab import of ca-certificates-2021.2.50-82.el8.src.rpm 2022-05-26 01:04:17 -04:00

This directory /usr/share/pki/ca-trust-source/ contains CA certificates and 
trust settings in the PEM file format. The trust settings found here will be
interpreted with a low priority - lower than the ones found in 
/etc/pki/ca-trust/source/ .

=============================================================================
QUICK HELP: To add a certificate in the simple PEM or DER file formats to the
            list of CAs trusted on the system:

            Copy it to the
                    /usr/share/pki/ca-trust-source/anchors/
            subdirectory, and run the
                    update-ca-trust
            command.

            If your certificate is in the extended BEGIN TRUSTED file format,
            then place it into the main source/ directory instead.
=============================================================================

Please refer to the update-ca-trust(8) manual page for additional information.