Interested users can blacklist any/all of these with certctl(8), examples: - mv /usr/share/certs/trusted/... /usr/share/certs/blacklisted/...; \ certctl rehash - certctl blacklist /usr/share/certs/trusted/*; \ certctl rehash Certs can be easily examined after installation with `certctl list`, and certctl blacklist will accept the hashed filename as output by list or as seen in /etc/ssl/certs No objection from: secteam Relnotes: Definite maybe
153 lines
8.1 KiB
Plaintext
153 lines
8.1 KiB
Plaintext
##
|
|
## Certigna Root CA
|
|
##
|
|
## This is a single X.509 certificate for a public Certificate
|
|
## Authority (CA). It was automatically extracted from Mozilla's
|
|
## root CA list (the file `certdata.txt' in security/nss).
|
|
##
|
|
## Extracted from nss
|
|
## with $FreeBSD: head/secure/caroot/MAca-bundle.pl 352951 2019-10-02 01:27:50Z kevans $
|
|
##
|
|
## @generated
|
|
##
|
|
Certificate:
|
|
Data:
|
|
Version: 3 (0x2)
|
|
Serial Number:
|
|
ca:e9:1b:89:f1:55:03:0d:a3:e6:41:6d:c4:e3:a6:e1
|
|
Signature Algorithm: sha256WithRSAEncryption
|
|
Issuer: C = FR, O = Dhimyotis, OU = 0002 48146308100036, CN = Certigna Root CA
|
|
Validity
|
|
Not Before: Oct 1 08:32:27 2013 GMT
|
|
Not After : Oct 1 08:32:27 2033 GMT
|
|
Subject: C = FR, O = Dhimyotis, OU = 0002 48146308100036, CN = Certigna Root CA
|
|
Subject Public Key Info:
|
|
Public Key Algorithm: rsaEncryption
|
|
RSA Public-Key: (4096 bit)
|
|
Modulus:
|
|
00:cd:18:39:65:1a:59:b1:ea:64:16:0e:8c:94:24:
|
|
95:7c:83:d3:c5:39:26:dc:0c:ef:16:57:8d:d7:d8:
|
|
ac:a3:42:7f:82:ca:ed:cd:5b:db:0e:b7:2d:ed:45:
|
|
08:17:b2:d9:b3:cb:d6:17:52:72:28:db:8e:4e:9e:
|
|
8a:b6:0b:f9:9e:84:9a:4d:76:de:22:29:5c:d2:b3:
|
|
d2:06:3e:30:39:a9:74:a3:92:56:1c:a1:6f:4c:0a:
|
|
20:6d:9f:23:7a:b4:c6:da:2c:e4:1d:2c:dc:b3:28:
|
|
d0:13:f2:4c:4e:02:49:a1:54:40:9e:e6:e5:05:a0:
|
|
2d:84:c8:ff:98:6c:d0:eb:8a:1a:84:08:1e:b7:68:
|
|
23:ee:23:d5:70:ce:6d:51:69:10:ee:a1:7a:c2:d1:
|
|
22:31:c2:82:85:d2:f2:55:76:50:7c:25:7a:c9:84:
|
|
5c:0b:ac:dd:42:4e:2b:e7:82:a2:24:89:cb:90:b2:
|
|
d0:ee:23:ba:66:4c:bb:62:a4:f9:53:5a:64:7b:7c:
|
|
98:fa:a3:48:9e:0f:95:ae:a7:18:f4:6a:ec:2e:03:
|
|
45:af:f0:74:f8:2a:cd:7a:5d:d1:be:44:26:32:29:
|
|
f1:f1:f5:6c:cc:7e:02:21:0b:9f:6f:a4:3f:be:9d:
|
|
53:e2:cf:7d:a9:2c:7c:58:1a:97:e1:3d:37:37:18:
|
|
66:28:d2:40:c5:51:8a:8c:c3:2d:ce:53:88:24:58:
|
|
64:30:16:c5:aa:e0:d6:0a:a6:40:df:78:f6:f5:04:
|
|
7c:69:13:84:bc:d1:d1:a7:06:cf:01:f7:68:c0:a8:
|
|
57:bb:3a:61:ad:04:8c:93:e3:ad:fc:f0:db:44:6d:
|
|
59:dc:49:59:ae:ac:9a:99:36:30:41:7b:76:33:22:
|
|
87:a3:c2:92:86:6e:f9:70:ee:ae:87:87:95:1b:c4:
|
|
7a:bd:31:f3:d4:d2:e5:99:ff:be:48:ec:75:f5:78:
|
|
16:1d:a6:70:c1:7f:3c:1b:a1:92:fb:cf:c8:3c:d6:
|
|
c5:93:0a:8f:f5:55:3a:76:95:ce:59:98:8a:09:95:
|
|
77:32:9a:83:ba:2c:04:3a:97:bd:d4:2f:be:d7:6c:
|
|
9b:a2:ca:7d:6d:26:c9:55:d5:cf:c3:79:52:08:09:
|
|
99:07:24:2d:64:25:6b:a6:21:69:9b:6a:dd:74:4d:
|
|
6b:97:7a:41:bd:ab:17:f9:90:17:48:8f:36:f9:2d:
|
|
d5:c5:db:ee:aa:85:45:41:fa:cd:3a:45:b1:68:e6:
|
|
36:4c:9b:90:57:ec:23:b9:87:08:c2:c4:09:f1:97:
|
|
86:2a:28:4d:e2:74:c0:da:c4:8c:db:df:e2:a1:17:
|
|
59:ce:24:59:74:31:da:7f:fd:30:6d:d9:dc:e1:6a:
|
|
e1:fc:5f
|
|
Exponent: 65537 (0x10001)
|
|
X509v3 extensions:
|
|
X509v3 Basic Constraints: critical
|
|
CA:TRUE
|
|
X509v3 Key Usage: critical
|
|
Certificate Sign, CRL Sign
|
|
X509v3 Subject Key Identifier:
|
|
18:87:56:E0:6E:77:EE:24:35:3C:4E:73:9A:1F:D6:E1:E2:79:7E:2B
|
|
X509v3 Authority Key Identifier:
|
|
keyid:18:87:56:E0:6E:77:EE:24:35:3C:4E:73:9A:1F:D6:E1:E2:79:7E:2B
|
|
|
|
X509v3 Certificate Policies:
|
|
Policy: X509v3 Any Policy
|
|
CPS: https://wwww.certigna.fr/autorites/
|
|
|
|
X509v3 CRL Distribution Points:
|
|
|
|
Full Name:
|
|
URI:http://crl.certigna.fr/certignarootca.crl
|
|
|
|
Full Name:
|
|
URI:http://crl.dhimyotis.com/certignarootca.crl
|
|
|
|
Signature Algorithm: sha256WithRSAEncryption
|
|
94:b8:9e:4f:f0:e3:95:08:22:e7:cd:68:41:f7:1c:55:d5:7c:
|
|
00:e2:2d:3a:89:5d:68:38:2f:51:22:0b:4a:8d:cb:e9:bb:5d:
|
|
3e:bb:5c:3d:b1:28:fe:e4:53:55:13:cf:a1:90:1b:02:1d:5f:
|
|
66:46:09:33:28:e1:0d:24:97:70:d3:10:1f:ea:64:57:96:bb:
|
|
5d:da:e7:c4:8c:4f:4c:64:46:1d:5c:87:e3:59:de:42:d1:9b:
|
|
a8:7e:a6:89:dd:8f:1c:c9:30:82:ed:3b:9c:cd:c0:e9:19:e0:
|
|
6a:d8:02:75:37:ab:f7:34:28:28:91:f2:04:0a:4f:35:e3:60:
|
|
26:01:fa:d0:11:8c:f9:11:6a:ee:af:3d:c3:50:d3:8f:5f:33:
|
|
79:3c:86:a8:73:45:90:8c:20:b6:72:73:17:23:be:07:65:e5:
|
|
78:92:0d:ba:01:c0:eb:8c:1c:66:bf:ac:86:77:01:94:0d:9c:
|
|
e6:e9:39:8d:1f:a6:51:8c:99:0c:39:77:e1:b4:9b:fa:1c:67:
|
|
57:6f:6a:6a:8e:a9:2b:4c:57:79:7a:57:22:cf:cd:5f:63:46:
|
|
8d:5c:59:3a:86:f8:32:47:62:a3:67:0d:18:91:dc:fb:a6:6b:
|
|
f5:48:61:73:23:59:8e:02:a7:bc:44:ea:f4:49:9d:f1:54:58:
|
|
f9:60:af:da:18:a4:2f:28:45:dc:7a:a0:88:86:5d:f3:3b:e7:
|
|
ff:29:35:80:fc:64:43:94:e6:e3:1c:6f:be:ad:0e:2a:63:99:
|
|
2b:c9:7e:85:f6:71:e8:06:03:95:fe:de:8f:48:1c:5a:d4:92:
|
|
e8:2b:ee:e7:31:db:ba:04:6a:87:98:e7:c5:5f:ef:7d:a7:22:
|
|
f7:01:d8:4d:f9:89:d0:0e:9a:05:59:a4:9e:98:d9:6f:2b:ca:
|
|
70:be:64:c2:55:a3:f4:e9:af:c3:92:29:dc:88:16:24:99:3c:
|
|
8d:26:98:b6:5b:b7:cc:ce:b7:37:07:fd:26:d9:98:85:24:ff:
|
|
59:23:03:9a:ed:9d:9d:a8:e4:5e:38:ce:d7:52:0d:6f:d2:3f:
|
|
6d:b1:05:6b:49:ce:8a:91:46:73:f4:f6:2f:f0:a8:73:77:0e:
|
|
65:ac:a1:8d:66:52:69:7e:4b:68:0c:c7:1e:37:27:83:a5:8c:
|
|
c7:02:e4:14:cd:49:01:b0:73:b3:fd:c6:90:3a:6f:d2:6c:ed:
|
|
3b:ee:ec:91:be:a2:43:5d:8b:00:4a:66:25:44:70:de:40:0f:
|
|
f8:7c:15:f7:a2:ce:3c:d7:5e:13:8c:81:17:18:17:d1:bd:f1:
|
|
77:10:3a:d4:65:39:c1:27:ac:57:2c:25:54:ff:a2:da:4f:8a:
|
|
61:39:5e:ae:3d:4a:8c:bd
|
|
SHA1 Fingerprint=2D:0D:52:14:FF:9E:AD:99:24:01:74:20:47:6E:6C:85:27:27:F5:43
|
|
-----BEGIN CERTIFICATE-----
|
|
MIIGWzCCBEOgAwIBAgIRAMrpG4nxVQMNo+ZBbcTjpuEwDQYJKoZIhvcNAQELBQAw
|
|
WjELMAkGA1UEBhMCRlIxEjAQBgNVBAoMCURoaW15b3RpczEcMBoGA1UECwwTMDAw
|
|
MiA0ODE0NjMwODEwMDAzNjEZMBcGA1UEAwwQQ2VydGlnbmEgUm9vdCBDQTAeFw0x
|
|
MzEwMDEwODMyMjdaFw0zMzEwMDEwODMyMjdaMFoxCzAJBgNVBAYTAkZSMRIwEAYD
|
|
VQQKDAlEaGlteW90aXMxHDAaBgNVBAsMEzAwMDIgNDgxNDYzMDgxMDAwMzYxGTAX
|
|
BgNVBAMMEENlcnRpZ25hIFJvb3QgQ0EwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAw
|
|
ggIKAoICAQDNGDllGlmx6mQWDoyUJJV8g9PFOSbcDO8WV43X2KyjQn+Cyu3NW9sO
|
|
ty3tRQgXstmzy9YXUnIo245Onoq2C/mehJpNdt4iKVzSs9IGPjA5qXSjklYcoW9M
|
|
CiBtnyN6tMbaLOQdLNyzKNAT8kxOAkmhVECe5uUFoC2EyP+YbNDrihqECB63aCPu
|
|
I9Vwzm1RaRDuoXrC0SIxwoKF0vJVdlB8JXrJhFwLrN1CTivngqIkicuQstDuI7pm
|
|
TLtipPlTWmR7fJj6o0ieD5Wupxj0auwuA0Wv8HT4Ks16XdG+RCYyKfHx9WzMfgIh
|
|
C59vpD++nVPiz32pLHxYGpfhPTc3GGYo0kDFUYqMwy3OU4gkWGQwFsWq4NYKpkDf
|
|
ePb1BHxpE4S80dGnBs8B92jAqFe7OmGtBIyT46388NtEbVncSVmurJqZNjBBe3Yz
|
|
IoejwpKGbvlw7q6Hh5UbxHq9MfPU0uWZ/75I7HX1eBYdpnDBfzwboZL7z8g81sWT
|
|
Co/1VTp2lc5ZmIoJlXcymoO6LAQ6l73UL77XbJuiyn1tJslV1c/DeVIICZkHJC1k
|
|
JWumIWmbat10TWuXekG9qxf5kBdIjzb5LdXF2+6qhUVB+s06RbFo5jZMm5BX7CO5
|
|
hwjCxAnxl4YqKE3idMDaxIzb3+KhF1nOJFl0Mdp//TBt2dzhauH8XwIDAQABo4IB
|
|
GjCCARYwDwYDVR0TAQH/BAUwAwEB/zAOBgNVHQ8BAf8EBAMCAQYwHQYDVR0OBBYE
|
|
FBiHVuBud+4kNTxOc5of1uHieX4rMB8GA1UdIwQYMBaAFBiHVuBud+4kNTxOc5of
|
|
1uHieX4rMEQGA1UdIAQ9MDswOQYEVR0gADAxMC8GCCsGAQUFBwIBFiNodHRwczov
|
|
L3d3d3cuY2VydGlnbmEuZnIvYXV0b3JpdGVzLzBtBgNVHR8EZjBkMC+gLaArhilo
|
|
dHRwOi8vY3JsLmNlcnRpZ25hLmZyL2NlcnRpZ25hcm9vdGNhLmNybDAxoC+gLYYr
|
|
aHR0cDovL2NybC5kaGlteW90aXMuY29tL2NlcnRpZ25hcm9vdGNhLmNybDANBgkq
|
|
hkiG9w0BAQsFAAOCAgEAlLieT/DjlQgi581oQfccVdV8AOItOoldaDgvUSILSo3L
|
|
6btdPrtcPbEo/uRTVRPPoZAbAh1fZkYJMyjhDSSXcNMQH+pkV5a7XdrnxIxPTGRG
|
|
HVyH41neQtGbqH6mid2PHMkwgu07nM3A6RngatgCdTer9zQoKJHyBApPNeNgJgH6
|
|
0BGM+RFq7q89w1DTj18zeTyGqHNFkIwgtnJzFyO+B2XleJINugHA64wcZr+shncB
|
|
lA2c5uk5jR+mUYyZDDl34bSb+hxnV29qao6pK0xXeXpXIs/NX2NGjVxZOob4Mkdi
|
|
o2cNGJHc+6Zr9UhhcyNZjgKnvETq9Emd8VRY+WCv2hikLyhF3HqgiIZd8zvn/yk1
|
|
gPxkQ5Tm4xxvvq0OKmOZK8l+hfZx6AYDlf7ej0gcWtSS6Cvu5zHbugRqh5jnxV/v
|
|
faci9wHYTfmJ0A6aBVmknpjZbyvKcL5kwlWj9Omvw5Ip3IgWJJk8jSaYtlu3zM63
|
|
Nwf9JtmYhST/WSMDmu2dnajkXjjO11INb9I/bbEFa0nOipFGc/T2L/Coc3cOZayh
|
|
jWZSaX5LaAzHHjcng6WMxwLkFM1JAbBzs/3GkDpv0mztO+7skb6iQ12LAEpmJURw
|
|
3kAP+HwV96LOPNdeE4yBFxgX0b3xdxA61GU5wSesVywlVP+i2k+KYTlerj1KjL0=
|
|
-----END CERTIFICATE-----
|