Interested users can blacklist any/all of these with certctl(8), examples: - mv /usr/share/certs/trusted/... /usr/share/certs/blacklisted/...; \ certctl rehash - certctl blacklist /usr/share/certs/trusted/*; \ certctl rehash Certs can be easily examined after installation with `certctl list`, and certctl blacklist will accept the hashed filename as output by list or as seen in /etc/ssl/certs No objection from: secteam Relnotes: Definite maybe
90 lines
4.6 KiB
Plaintext
90 lines
4.6 KiB
Plaintext
##
|
|
## AffirmTrust Networking
|
|
##
|
|
## This is a single X.509 certificate for a public Certificate
|
|
## Authority (CA). It was automatically extracted from Mozilla's
|
|
## root CA list (the file `certdata.txt' in security/nss).
|
|
##
|
|
## Extracted from nss
|
|
## with $FreeBSD: head/secure/caroot/MAca-bundle.pl 352951 2019-10-02 01:27:50Z kevans $
|
|
##
|
|
## @generated
|
|
##
|
|
Certificate:
|
|
Data:
|
|
Version: 3 (0x2)
|
|
Serial Number: 8957382827206547757 (0x7c4f04391cd4992d)
|
|
Signature Algorithm: sha1WithRSAEncryption
|
|
Issuer: C = US, O = AffirmTrust, CN = AffirmTrust Networking
|
|
Validity
|
|
Not Before: Jan 29 14:08:24 2010 GMT
|
|
Not After : Dec 31 14:08:24 2030 GMT
|
|
Subject: C = US, O = AffirmTrust, CN = AffirmTrust Networking
|
|
Subject Public Key Info:
|
|
Public Key Algorithm: rsaEncryption
|
|
RSA Public-Key: (2048 bit)
|
|
Modulus:
|
|
00:b4:84:cc:33:17:2e:6b:94:6c:6b:61:52:a0:eb:
|
|
a3:cf:79:94:4c:e5:94:80:99:cb:55:64:44:65:8f:
|
|
67:64:e2:06:e3:5c:37:49:f6:2f:9b:84:84:1e:2d:
|
|
f2:60:9d:30:4e:cc:84:85:e2:2c:cf:1e:9e:fe:36:
|
|
ab:33:77:35:44:d8:35:96:1a:3d:36:e8:7a:0e:d8:
|
|
d5:47:a1:6a:69:8b:d9:fc:bb:3a:ae:79:5a:d5:f4:
|
|
d6:71:bb:9a:90:23:6b:9a:b7:88:74:87:0c:1e:5f:
|
|
b9:9e:2d:fa:ab:53:2b:dc:bb:76:3e:93:4c:08:08:
|
|
8c:1e:a2:23:1c:d4:6a:ad:22:ba:99:01:2e:6d:65:
|
|
cb:be:24:66:55:24:4b:40:44:b1:1b:d7:e1:c2:85:
|
|
c0:de:10:3f:3d:ed:b8:fc:f1:f1:23:53:dc:bf:65:
|
|
97:6f:d9:f9:40:71:8d:7d:bd:95:d4:ce:be:a0:5e:
|
|
27:23:de:fd:a6:d0:26:0e:00:29:eb:3c:46:f0:3d:
|
|
60:bf:3f:50:d2:dc:26:41:51:9e:14:37:42:04:a3:
|
|
70:57:a8:1b:87:ed:2d:fa:7b:ee:8c:0a:e3:a9:66:
|
|
89:19:cb:41:f9:dd:44:36:61:cf:e2:77:46:c8:7d:
|
|
f6:f4:92:81:36:fd:db:34:f1:72:7e:f3:0c:16:bd:
|
|
b4:15
|
|
Exponent: 65537 (0x10001)
|
|
X509v3 extensions:
|
|
X509v3 Subject Key Identifier:
|
|
07:1F:D2:E7:9C:DA:C2:6E:A2:40:B4:B0:7A:50:10:50:74:C4:C8:BD
|
|
X509v3 Basic Constraints: critical
|
|
CA:TRUE
|
|
X509v3 Key Usage: critical
|
|
Certificate Sign, CRL Sign
|
|
Signature Algorithm: sha1WithRSAEncryption
|
|
89:57:b2:16:7a:a8:c2:fd:d6:d9:9b:9b:34:c2:9c:b4:32:14:
|
|
4d:a7:a4:df:ec:be:a7:be:f8:43:db:91:37:ce:b4:32:2e:50:
|
|
55:1a:35:4e:76:43:71:20:ef:93:77:4e:15:70:2e:87:c3:c1:
|
|
1d:6d:dc:cb:b5:27:d4:2c:56:d1:52:53:3a:44:d2:73:c8:c4:
|
|
1b:05:65:5a:62:92:9c:ee:41:8d:31:db:e7:34:ea:59:21:d5:
|
|
01:7a:d7:64:b8:64:39:cd:c9:ed:af:ed:4b:03:48:a7:a0:99:
|
|
01:80:dc:65:a3:36:ae:65:59:48:4f:82:4b:c8:65:f1:57:1d:
|
|
e5:59:2e:0a:3f:6c:d8:d1:f5:e5:09:b4:6c:54:00:0a:e0:15:
|
|
4d:87:75:6d:b7:58:96:5a:dd:6d:d2:00:a0:f4:9b:48:be:c3:
|
|
37:a4:ba:36:e0:7c:87:85:97:1a:15:a2:de:2e:a2:5b:bd:af:
|
|
18:f9:90:50:cd:70:59:f8:27:67:47:cb:c7:a0:07:3a:7d:d1:
|
|
2c:5d:6c:19:3a:66:b5:7d:fd:91:6f:82:b1:be:08:93:db:14:
|
|
47:f1:a2:37:c7:45:9e:3c:c7:77:af:64:a8:93:df:f6:69:83:
|
|
82:60:f2:49:42:34:ed:5a:00:54:85:1c:16:36:92:0c:5c:fa:
|
|
a6:ad:bf:db
|
|
SHA1 Fingerprint=29:36:21:02:8B:20:ED:02:F5:66:C5:32:D1:D6:ED:90:9F:45:00:2F
|
|
-----BEGIN CERTIFICATE-----
|
|
MIIDTDCCAjSgAwIBAgIIfE8EORzUmS0wDQYJKoZIhvcNAQEFBQAwRDELMAkGA1UE
|
|
BhMCVVMxFDASBgNVBAoMC0FmZmlybVRydXN0MR8wHQYDVQQDDBZBZmZpcm1UcnVz
|
|
dCBOZXR3b3JraW5nMB4XDTEwMDEyOTE0MDgyNFoXDTMwMTIzMTE0MDgyNFowRDEL
|
|
MAkGA1UEBhMCVVMxFDASBgNVBAoMC0FmZmlybVRydXN0MR8wHQYDVQQDDBZBZmZp
|
|
cm1UcnVzdCBOZXR3b3JraW5nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
|
|
AQEAtITMMxcua5Rsa2FSoOujz3mUTOWUgJnLVWREZY9nZOIG41w3SfYvm4SEHi3y
|
|
YJ0wTsyEheIszx6e/jarM3c1RNg1lho9Nuh6DtjVR6FqaYvZ/Ls6rnla1fTWcbua
|
|
kCNrmreIdIcMHl+5ni36q1Mr3Lt2PpNMCAiMHqIjHNRqrSK6mQEubWXLviRmVSRL
|
|
QESxG9fhwoXA3hA/Pe24/PHxI1Pcv2WXb9n5QHGNfb2V1M6+oF4nI979ptAmDgAp
|
|
6zxG8D1gvz9Q0twmQVGeFDdCBKNwV6gbh+0t+nvujArjqWaJGctB+d1ENmHP4ndG
|
|
yH329JKBNv3bNPFyfvMMFr20FQIDAQABo0IwQDAdBgNVHQ4EFgQUBx/S55zawm6i
|
|
QLSwelAQUHTEyL0wDwYDVR0TAQH/BAUwAwEB/zAOBgNVHQ8BAf8EBAMCAQYwDQYJ
|
|
KoZIhvcNAQEFBQADggEBAIlXshZ6qML91tmbmzTCnLQyFE2npN/svqe++EPbkTfO
|
|
tDIuUFUaNU52Q3Eg75N3ThVwLofDwR1t3Mu1J9QsVtFSUzpE0nPIxBsFZVpikpzu
|
|
QY0x2+c06lkh1QF612S4ZDnNye2v7UsDSKegmQGA3GWjNq5lWUhPgkvIZfFXHeVZ
|
|
Lgo/bNjR9eUJtGxUAArgFU2HdW23WJZa3W3SAKD0m0i+wzekujbgfIeFlxoVot4u
|
|
olu9rxj5kFDNcFn4J2dHy8egBzp90SxdbBk6ZrV9/ZFvgrG+CJPbFEfxojfHRZ48
|
|
x3evZKiT3/Zpg4Jg8klCNO1aAFSFHBY2kgxc+qatv9s=
|
|
-----END CERTIFICATE-----
|