Interested users can blacklist any/all of these with certctl(8), examples: - mv /usr/share/certs/trusted/... /usr/share/certs/blacklisted/...; \ certctl rehash - certctl blacklist /usr/share/certs/trusted/*; \ certctl rehash Certs can be easily examined after installation with `certctl list`, and certctl blacklist will accept the hashed filename as output by list or as seen in /etc/ssl/certs No objection from: secteam Relnotes: Definite maybe
101 lines
5.1 KiB
Plaintext
101 lines
5.1 KiB
Plaintext
##
|
|
## COMODO Certification Authority
|
|
##
|
|
## This is a single X.509 certificate for a public Certificate
|
|
## Authority (CA). It was automatically extracted from Mozilla's
|
|
## root CA list (the file `certdata.txt' in security/nss).
|
|
##
|
|
## Extracted from nss
|
|
## with $FreeBSD: head/secure/caroot/MAca-bundle.pl 352951 2019-10-02 01:27:50Z kevans $
|
|
##
|
|
## @generated
|
|
##
|
|
Certificate:
|
|
Data:
|
|
Version: 3 (0x2)
|
|
Serial Number:
|
|
4e:81:2d:8a:82:65:e0:0b:02:ee:3e:35:02:46:e5:3d
|
|
Signature Algorithm: sha1WithRSAEncryption
|
|
Issuer: C = GB, ST = Greater Manchester, L = Salford, O = COMODO CA Limited, CN = COMODO Certification Authority
|
|
Validity
|
|
Not Before: Dec 1 00:00:00 2006 GMT
|
|
Not After : Dec 31 23:59:59 2029 GMT
|
|
Subject: C = GB, ST = Greater Manchester, L = Salford, O = COMODO CA Limited, CN = COMODO Certification Authority
|
|
Subject Public Key Info:
|
|
Public Key Algorithm: rsaEncryption
|
|
RSA Public-Key: (2048 bit)
|
|
Modulus:
|
|
00:d0:40:8b:8b:72:e3:91:1b:f7:51:c1:1b:54:04:
|
|
98:d3:a9:bf:c1:e6:8a:5d:3b:87:fb:bb:88:ce:0d:
|
|
e3:2f:3f:06:96:f0:a2:29:50:99:ae:db:3b:a1:57:
|
|
b0:74:51:71:cd:ed:42:91:4d:41:fe:a9:c8:d8:6a:
|
|
86:77:44:bb:59:66:97:50:5e:b4:d4:2c:70:44:cf:
|
|
da:37:95:42:69:3c:30:c4:71:b3:52:f0:21:4d:a1:
|
|
d8:ba:39:7c:1c:9e:a3:24:9d:f2:83:16:98:aa:16:
|
|
7c:43:9b:15:5b:b7:ae:34:91:fe:d4:62:26:18:46:
|
|
9a:3f:eb:c1:f9:f1:90:57:eb:ac:7a:0d:8b:db:72:
|
|
30:6a:66:d5:e0:46:a3:70:dc:68:d9:ff:04:48:89:
|
|
77:de:b5:e9:fb:67:6d:41:e9:bc:39:bd:32:d9:62:
|
|
02:f1:b1:a8:3d:6e:37:9c:e2:2f:e2:d3:a2:26:8b:
|
|
c6:b8:55:43:88:e1:23:3e:a5:d2:24:39:6a:47:ab:
|
|
00:d4:a1:b3:a9:25:fe:0d:3f:a7:1d:ba:d3:51:c1:
|
|
0b:a4:da:ac:38:ef:55:50:24:05:65:46:93:34:4f:
|
|
2d:8d:ad:c6:d4:21:19:d2:8e:ca:05:61:71:07:73:
|
|
47:e5:8a:19:12:bd:04:4d:ce:4e:9c:a5:48:ac:bb:
|
|
26:f7
|
|
Exponent: 65537 (0x10001)
|
|
X509v3 extensions:
|
|
X509v3 Subject Key Identifier:
|
|
0B:58:E5:8B:C6:4C:15:37:A4:40:A9:30:A9:21:BE:47:36:5A:56:FF
|
|
X509v3 Key Usage: critical
|
|
Certificate Sign, CRL Sign
|
|
X509v3 Basic Constraints: critical
|
|
CA:TRUE
|
|
X509v3 CRL Distribution Points:
|
|
|
|
Full Name:
|
|
URI:http://crl.comodoca.com/COMODOCertificationAuthority.crl
|
|
|
|
Signature Algorithm: sha1WithRSAEncryption
|
|
3e:98:9e:9b:f6:1b:e9:d7:39:b7:78:ae:1d:72:18:49:d3:87:
|
|
e4:43:82:eb:3f:c9:aa:f5:a8:b5:ef:55:7c:21:52:65:f9:d5:
|
|
0d:e1:6c:f4:3e:8c:93:73:91:2e:02:c4:4e:07:71:6f:c0:8f:
|
|
38:61:08:a8:1e:81:0a:c0:2f:20:2f:41:8b:91:dc:48:45:bc:
|
|
f1:c6:de:ba:76:6b:33:c8:00:2d:31:46:4c:ed:e7:9d:cf:88:
|
|
94:ff:33:c0:56:e8:24:86:26:b8:d8:38:38:df:2a:6b:dd:12:
|
|
cc:c7:3f:47:17:4c:a2:c2:06:96:09:d6:db:fe:3f:3c:46:41:
|
|
df:58:e2:56:0f:3c:3b:c1:1c:93:35:d9:38:52:ac:ee:c8:ec:
|
|
2e:30:4e:94:35:b4:24:1f:4b:78:69:da:f2:02:38:cc:95:52:
|
|
93:f0:70:25:59:9c:20:67:c4:ee:f9:8b:57:61:f4:92:76:7d:
|
|
3f:84:8d:55:b7:e8:e5:ac:d5:f1:f5:19:56:a6:5a:fb:90:1c:
|
|
af:93:eb:e5:1c:d4:67:97:5d:04:0e:be:0b:83:a6:17:83:b9:
|
|
30:12:a0:c5:33:15:05:b9:0d:fb:c7:05:76:e3:d8:4a:8d:fc:
|
|
34:17:a3:c6:21:28:be:30:45:31:1e:c7:78:be:58:61:38:ac:
|
|
3b:e2:01:65
|
|
SHA1 Fingerprint=66:31:BF:9E:F7:4F:9E:B6:C9:D5:A6:0C:BA:6A:BE:D1:F7:BD:EF:7B
|
|
-----BEGIN CERTIFICATE-----
|
|
MIIEHTCCAwWgAwIBAgIQToEtioJl4AsC7j41AkblPTANBgkqhkiG9w0BAQUFADCB
|
|
gTELMAkGA1UEBhMCR0IxGzAZBgNVBAgTEkdyZWF0ZXIgTWFuY2hlc3RlcjEQMA4G
|
|
A1UEBxMHU2FsZm9yZDEaMBgGA1UEChMRQ09NT0RPIENBIExpbWl0ZWQxJzAlBgNV
|
|
BAMTHkNPTU9ETyBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTAeFw0wNjEyMDEwMDAw
|
|
MDBaFw0yOTEyMzEyMzU5NTlaMIGBMQswCQYDVQQGEwJHQjEbMBkGA1UECBMSR3Jl
|
|
YXRlciBNYW5jaGVzdGVyMRAwDgYDVQQHEwdTYWxmb3JkMRowGAYDVQQKExFDT01P
|
|
RE8gQ0EgTGltaXRlZDEnMCUGA1UEAxMeQ09NT0RPIENlcnRpZmljYXRpb24gQXV0
|
|
aG9yaXR5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ECLi3LjkRv3
|
|
UcEbVASY06m/weaKXTuH+7uIzg3jLz8GlvCiKVCZrts7oVewdFFxze1CkU1B/qnI
|
|
2GqGd0S7WWaXUF601CxwRM/aN5VCaTwwxHGzUvAhTaHYujl8HJ6jJJ3ygxaYqhZ8
|
|
Q5sVW7euNJH+1GImGEaaP+vB+fGQV+useg2L23IwambV4EajcNxo2f8ESIl33rXp
|
|
+2dtQem8Ob0y2WIC8bGoPW43nOIv4tOiJovGuFVDiOEjPqXSJDlqR6sA1KGzqSX+
|
|
DT+nHbrTUcELpNqsOO9VUCQFZUaTNE8tja3G1CEZ0o7KBWFxB3NH5YoZEr0ETc5O
|
|
nKVIrLsm9wIDAQABo4GOMIGLMB0GA1UdDgQWBBQLWOWLxkwVN6RAqTCpIb5HNlpW
|
|
/zAOBgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBJBgNVHR8EQjBAMD6g
|
|
PKA6hjhodHRwOi8vY3JsLmNvbW9kb2NhLmNvbS9DT01PRE9DZXJ0aWZpY2F0aW9u
|
|
QXV0aG9yaXR5LmNybDANBgkqhkiG9w0BAQUFAAOCAQEAPpiem/Yb6dc5t3iuHXIY
|
|
SdOH5EOC6z/JqvWote9VfCFSZfnVDeFs9D6Mk3ORLgLETgdxb8CPOGEIqB6BCsAv
|
|
IC9Bi5HcSEW88cbeunZrM8gALTFGTO3nnc+IlP8zwFboJIYmuNg4ON8qa90SzMc/
|
|
RxdMosIGlgnW2/4/PEZB31jiVg88O8EckzXZOFKs7sjsLjBOlDW0JB9LeGna8gI4
|
|
zJVSk/BwJVmcIGfE7vmLV2H0knZ9P4SNVbfo5azV8fUZVqZa+5Acr5Pr5RzUZ5dd
|
|
BA6+C4OmF4O5MBKgxTMVBbkN+8cFduPYSo38NBejxiEovjBFMR7HeL5YYTisO+IB
|
|
ZQ==
|
|
-----END CERTIFICATE-----
|