Interested users can blacklist any/all of these with certctl(8), examples: - mv /usr/share/certs/trusted/... /usr/share/certs/blacklisted/...; \ certctl rehash - certctl blacklist /usr/share/certs/trusted/*; \ certctl rehash Certs can be easily examined after installation with `certctl list`, and certctl blacklist will accept the hashed filename as output by list or as seen in /etc/ssl/certs No objection from: secteam Relnotes: Definite maybe
97 lines
4.8 KiB
Plaintext
97 lines
4.8 KiB
Plaintext
##
|
|
## Atos TrustedRoot 2011
|
|
##
|
|
## This is a single X.509 certificate for a public Certificate
|
|
## Authority (CA). It was automatically extracted from Mozilla's
|
|
## root CA list (the file `certdata.txt' in security/nss).
|
|
##
|
|
## Extracted from nss
|
|
## with $FreeBSD: head/secure/caroot/MAca-bundle.pl 352951 2019-10-02 01:27:50Z kevans $
|
|
##
|
|
## @generated
|
|
##
|
|
Certificate:
|
|
Data:
|
|
Version: 3 (0x2)
|
|
Serial Number: 6643877497813316402 (0x5c33cb622c5fb332)
|
|
Signature Algorithm: sha256WithRSAEncryption
|
|
Issuer: CN = Atos TrustedRoot 2011, O = Atos, C = DE
|
|
Validity
|
|
Not Before: Jul 7 14:58:30 2011 GMT
|
|
Not After : Dec 31 23:59:59 2030 GMT
|
|
Subject: CN = Atos TrustedRoot 2011, O = Atos, C = DE
|
|
Subject Public Key Info:
|
|
Public Key Algorithm: rsaEncryption
|
|
RSA Public-Key: (2048 bit)
|
|
Modulus:
|
|
00:95:85:3b:97:6f:2a:3b:2e:3b:cf:a6:f3:29:35:
|
|
be:cf:18:ac:3e:aa:d9:f8:4d:a0:3e:1a:47:b9:bc:
|
|
9a:df:f2:fe:cc:3e:47:e8:7a:96:c2:24:8e:35:f4:
|
|
a9:0c:fc:82:fd:6d:c1:72:62:27:bd:ea:6b:eb:e7:
|
|
8a:cc:54:3e:90:50:cf:80:d4:95:fb:e8:b5:82:d4:
|
|
14:c5:b6:a9:55:25:57:db:b1:50:f6:b0:60:64:59:
|
|
7a:69:cf:03:b7:6f:0d:be:ca:3e:6f:74:72:ea:aa:
|
|
30:2a:73:62:be:49:91:61:c8:11:fe:0e:03:2a:f7:
|
|
6a:20:dc:02:15:0d:5e:15:6a:fc:e3:82:c1:b5:c5:
|
|
9d:64:09:6c:a3:59:98:07:27:c7:1b:96:2b:61:74:
|
|
71:6c:43:f1:f7:35:89:10:e0:9e:ec:55:a1:37:22:
|
|
a2:87:04:05:2c:47:7d:b4:1c:b9:62:29:66:28:ca:
|
|
b7:e1:93:f5:a4:94:03:99:b9:70:85:b5:e6:48:ea:
|
|
8d:50:fc:d9:de:cc:6f:07:0e:dd:0b:72:9d:80:30:
|
|
16:07:95:3f:28:0e:fd:c5:75:4f:53:d6:74:9a:b4:
|
|
24:2e:8e:02:91:cf:76:c5:9b:1e:55:74:9c:78:21:
|
|
b1:f0:2d:f1:0b:9f:c2:d5:96:18:1f:f0:54:22:7a:
|
|
8c:07
|
|
Exponent: 65537 (0x10001)
|
|
X509v3 extensions:
|
|
X509v3 Subject Key Identifier:
|
|
A7:A5:06:B1:2C:A6:09:60:EE:D1:97:E9:70:AE:BC:3B:19:6C:DB:21
|
|
X509v3 Basic Constraints: critical
|
|
CA:TRUE
|
|
X509v3 Authority Key Identifier:
|
|
keyid:A7:A5:06:B1:2C:A6:09:60:EE:D1:97:E9:70:AE:BC:3B:19:6C:DB:21
|
|
|
|
X509v3 Certificate Policies:
|
|
Policy: 1.3.6.1.4.1.6189.3.4.1.1
|
|
|
|
X509v3 Key Usage: critical
|
|
Digital Signature, Certificate Sign, CRL Sign
|
|
Signature Algorithm: sha256WithRSAEncryption
|
|
26:77:34:db:94:48:86:2a:41:9d:2c:3e:06:90:60:c4:8c:ac:
|
|
0b:54:b8:1f:b9:7b:d3:07:39:e4:fa:3e:7b:b2:3d:4e:ed:9f:
|
|
23:bd:97:f3:6b:5c:ef:ee:fd:40:a6:df:a1:93:a1:0a:86:ac:
|
|
ef:20:d0:79:01:bd:78:f7:19:d8:24:31:34:04:01:a6:ba:15:
|
|
9a:c3:27:dc:d8:4f:0f:cc:18:63:ff:99:0f:0e:91:6b:75:16:
|
|
e1:21:fc:d8:26:c7:47:b7:a6:cf:58:72:71:7e:ba:e1:4d:95:
|
|
47:3b:c9:af:6d:a1:b4:c1:ec:89:f6:b4:0f:38:b5:e2:64:dc:
|
|
25:cf:a6:db:eb:9a:5c:99:a1:c5:08:de:fd:e6:da:d5:d6:5a:
|
|
45:0c:c4:b7:c2:b5:14:ef:b4:11:ff:0e:15:b5:f5:f5:db:c6:
|
|
bd:eb:5a:a7:f0:56:22:a9:3c:65:54:c6:15:a8:bd:86:9e:cd:
|
|
83:96:68:7a:71:81:89:e1:0b:e1:ea:11:1b:68:08:cc:69:9e:
|
|
ec:9e:41:9e:44:32:26:7a:e2:87:0a:71:3d:eb:e4:5a:a4:d2:
|
|
db:c5:cd:c6:de:60:7f:b9:f3:4f:44:92:ef:2a:b7:18:3e:a7:
|
|
19:d9:0b:7d:b1:37:41:42:b0:ba:60:1d:f2:fe:09:11:b0:f0:
|
|
87:7b:a7:9d
|
|
SHA1 Fingerprint=2B:B1:F5:3E:55:0C:1D:C5:F1:D4:E6:B7:6A:46:4B:55:06:02:AC:21
|
|
-----BEGIN CERTIFICATE-----
|
|
MIIDdzCCAl+gAwIBAgIIXDPLYixfszIwDQYJKoZIhvcNAQELBQAwPDEeMBwGA1UE
|
|
AwwVQXRvcyBUcnVzdGVkUm9vdCAyMDExMQ0wCwYDVQQKDARBdG9zMQswCQYDVQQG
|
|
EwJERTAeFw0xMTA3MDcxNDU4MzBaFw0zMDEyMzEyMzU5NTlaMDwxHjAcBgNVBAMM
|
|
FUF0b3MgVHJ1c3RlZFJvb3QgMjAxMTENMAsGA1UECgwEQXRvczELMAkGA1UEBhMC
|
|
REUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVhTuXbyo7LjvPpvMp
|
|
Nb7PGKw+qtn4TaA+Gke5vJrf8v7MPkfoepbCJI419KkM/IL9bcFyYie96mvr54rM
|
|
VD6QUM+A1JX76LWC1BTFtqlVJVfbsVD2sGBkWXppzwO3bw2+yj5vdHLqqjAqc2K+
|
|
SZFhyBH+DgMq92og3AIVDV4VavzjgsG1xZ1kCWyjWZgHJ8cblithdHFsQ/H3NYkQ
|
|
4J7sVaE3IqKHBAUsR320HLliKWYoyrfhk/WklAOZuXCFteZI6o1Q/NnezG8HDt0L
|
|
cp2AMBYHlT8oDv3FdU9T1nSatCQujgKRz3bFmx5VdJx4IbHwLfELn8LVlhgf8FQi
|
|
eowHAgMBAAGjfTB7MB0GA1UdDgQWBBSnpQaxLKYJYO7Rl+lwrrw7GWzbITAPBgNV
|
|
HRMBAf8EBTADAQH/MB8GA1UdIwQYMBaAFKelBrEspglg7tGX6XCuvDsZbNshMBgG
|
|
A1UdIAQRMA8wDQYLKwYBBAGwLQMEAQEwDgYDVR0PAQH/BAQDAgGGMA0GCSqGSIb3
|
|
DQEBCwUAA4IBAQAmdzTblEiGKkGdLD4GkGDEjKwLVLgfuXvTBznk+j57sj1O7Z8j
|
|
vZfza1zv7v1Apt+hk6EKhqzvINB5Ab149xnYJDE0BAGmuhWawyfc2E8PzBhj/5kP
|
|
DpFrdRbhIfzYJsdHt6bPWHJxfrrhTZVHO8mvbaG0weyJ9rQPOLXiZNwlz6bb65pc
|
|
maHFCN795trV1lpFDMS3wrUU77QR/w4VtfX128a961qn8FYiqTxlVMYVqL2Gns2D
|
|
lmh6cYGJ4Qvh6hEbaAjMaZ7snkGeRDImeuKHCnE96+RapNLbxc3G3mB/ufNPRJLv
|
|
KrcYPqcZ2Qt9sTdBQrC6YB3y/gkRsPCHe6ed
|
|
-----END CERTIFICATE-----
|