Interested users can blacklist any/all of these with certctl(8), examples: - mv /usr/share/certs/trusted/... /usr/share/certs/blacklisted/...; \ certctl rehash - certctl blacklist /usr/share/certs/trusted/*; \ certctl rehash Certs can be easily examined after installation with `certctl list`, and certctl blacklist will accept the hashed filename as output by list or as seen in /etc/ssl/certs No objection from: secteam Relnotes: Definite maybe
101 lines
4.9 KiB
Plaintext
101 lines
4.9 KiB
Plaintext
##
|
|
## Cybertrust Global Root
|
|
##
|
|
## This is a single X.509 certificate for a public Certificate
|
|
## Authority (CA). It was automatically extracted from Mozilla's
|
|
## root CA list (the file `certdata.txt' in security/nss).
|
|
##
|
|
## Extracted from nss
|
|
## with $FreeBSD: head/secure/caroot/MAca-bundle.pl 352951 2019-10-02 01:27:50Z kevans $
|
|
##
|
|
## @generated
|
|
##
|
|
Certificate:
|
|
Data:
|
|
Version: 3 (0x2)
|
|
Serial Number:
|
|
04:00:00:00:00:01:0f:85:aa:2d:48
|
|
Signature Algorithm: sha1WithRSAEncryption
|
|
Issuer: O = "Cybertrust, Inc", CN = Cybertrust Global Root
|
|
Validity
|
|
Not Before: Dec 15 08:00:00 2006 GMT
|
|
Not After : Dec 15 08:00:00 2021 GMT
|
|
Subject: O = "Cybertrust, Inc", CN = Cybertrust Global Root
|
|
Subject Public Key Info:
|
|
Public Key Algorithm: rsaEncryption
|
|
RSA Public-Key: (2048 bit)
|
|
Modulus:
|
|
00:f8:c8:bc:bd:14:50:66:13:ff:f0:d3:79:ec:23:
|
|
f2:b7:1a:c7:8e:85:f1:12:73:a6:19:aa:10:db:9c:
|
|
a2:65:74:5a:77:3e:51:7d:56:f6:dc:23:b6:d4:ed:
|
|
5f:58:b1:37:4d:d5:49:0e:6e:f5:6a:87:d6:d2:8c:
|
|
d2:27:c6:e2:ff:36:9f:98:65:a0:13:4e:c6:2a:64:
|
|
9b:d5:90:12:cf:14:06:f4:3b:e3:d4:28:be:e8:0e:
|
|
f8:ab:4e:48:94:6d:8e:95:31:10:5c:ed:a2:2d:bd:
|
|
d5:3a:6d:b2:1c:bb:60:c0:46:4b:01:f5:49:ae:7e:
|
|
46:8a:d0:74:8d:a1:0c:02:ce:ee:fc:e7:8f:b8:6b:
|
|
66:f3:7f:44:00:bf:66:25:14:2b:dd:10:30:1d:07:
|
|
96:3f:4d:f6:6b:b8:8f:b7:7b:0c:a5:38:eb:de:47:
|
|
db:d5:5d:39:fc:88:a7:f3:d7:2a:74:f1:e8:5a:a2:
|
|
3b:9f:50:ba:a6:8c:45:35:c2:50:65:95:dc:63:82:
|
|
ef:dd:bf:77:4d:9c:62:c9:63:73:16:d0:29:0f:49:
|
|
a9:48:f0:b3:aa:b7:6c:c5:a7:30:39:40:5d:ae:c4:
|
|
e2:5d:26:53:f0:ce:1c:23:08:61:a8:94:19:ba:04:
|
|
62:40:ec:1f:38:70:77:12:06:71:a7:30:18:5d:25:
|
|
27:a5
|
|
Exponent: 65537 (0x10001)
|
|
X509v3 extensions:
|
|
X509v3 Key Usage: critical
|
|
Certificate Sign, CRL Sign
|
|
X509v3 Basic Constraints: critical
|
|
CA:TRUE
|
|
X509v3 Subject Key Identifier:
|
|
B6:08:7B:0D:7A:CC:AC:20:4C:86:56:32:5E:CF:AB:6E:85:2D:70:57
|
|
X509v3 CRL Distribution Points:
|
|
|
|
Full Name:
|
|
URI:http://www2.public-trust.com/crl/ct/ctroot.crl
|
|
|
|
X509v3 Authority Key Identifier:
|
|
keyid:B6:08:7B:0D:7A:CC:AC:20:4C:86:56:32:5E:CF:AB:6E:85:2D:70:57
|
|
|
|
Signature Algorithm: sha1WithRSAEncryption
|
|
56:ef:0a:23:a0:54:4e:95:97:c9:f8:89:da:45:c1:d4:a3:00:
|
|
25:f4:1f:13:ab:b7:a3:85:58:69:c2:30:ad:d8:15:8a:2d:e3:
|
|
c9:cd:81:5a:f8:73:23:5a:a7:7c:05:f3:fd:22:3b:0e:d1:06:
|
|
c4:db:36:4c:73:04:8e:e5:b0:22:e4:c5:f3:2e:a5:d9:23:e3:
|
|
b8:4e:4a:20:a7:6e:02:24:9f:22:60:67:7b:8b:1d:72:09:c5:
|
|
31:5c:e9:79:9f:80:47:3d:ad:a1:0b:07:14:3d:47:ff:03:69:
|
|
1a:0c:0b:44:e7:63:25:a7:7f:b2:c9:b8:76:84:ed:23:f6:7d:
|
|
07:ab:45:7e:d3:df:b3:bf:e9:8a:b6:cd:a8:a2:67:2b:52:d5:
|
|
b7:65:f0:39:4c:63:a0:91:79:93:52:0f:54:dd:83:bb:9f:d1:
|
|
8f:a7:53:73:c3:cb:ff:30:ec:7c:04:b8:d8:44:1f:93:5f:71:
|
|
09:22:b7:6e:3e:ea:1c:03:4e:9d:1a:20:61:fb:81:37:ec:5e:
|
|
fc:0a:45:ab:d7:e7:17:55:d0:a0:ea:60:9b:a6:f6:e3:8c:5b:
|
|
29:c2:06:60:14:9d:2d:97:4c:a9:93:15:9d:61:c4:01:5f:48:
|
|
d6:58:bd:56:31:12:4e:11:c8:21:e0:b3:11:91:65:db:b4:a6:
|
|
88:38:ce:55
|
|
SHA1 Fingerprint=5F:43:E5:B1:BF:F8:78:8C:AC:1C:C7:CA:4A:9A:C6:22:2B:CC:34:C6
|
|
-----BEGIN CERTIFICATE-----
|
|
MIIDoTCCAomgAwIBAgILBAAAAAABD4WqLUgwDQYJKoZIhvcNAQEFBQAwOzEYMBYG
|
|
A1UEChMPQ3liZXJ0cnVzdCwgSW5jMR8wHQYDVQQDExZDeWJlcnRydXN0IEdsb2Jh
|
|
bCBSb290MB4XDTA2MTIxNTA4MDAwMFoXDTIxMTIxNTA4MDAwMFowOzEYMBYGA1UE
|
|
ChMPQ3liZXJ0cnVzdCwgSW5jMR8wHQYDVQQDExZDeWJlcnRydXN0IEdsb2JhbCBS
|
|
b290MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+Mi8vRRQZhP/8NN5
|
|
7CPytxrHjoXxEnOmGaoQ25yiZXRadz5RfVb23CO21O1fWLE3TdVJDm71aofW0ozS
|
|
J8bi/zafmGWgE07GKmSb1ZASzxQG9Dvj1Ci+6A74q05IlG2OlTEQXO2iLb3VOm2y
|
|
HLtgwEZLAfVJrn5GitB0jaEMAs7u/OePuGtm839EAL9mJRQr3RAwHQeWP032a7iP
|
|
t3sMpTjr3kfb1V05/Iin89cqdPHoWqI7n1C6poxFNcJQZZXcY4Lv3b93TZxiyWNz
|
|
FtApD0mpSPCzqrdsxacwOUBdrsTiXSZT8M4cIwhhqJQZugRiQOwfOHB3EgZxpzAY
|
|
XSUnpQIDAQABo4GlMIGiMA4GA1UdDwEB/wQEAwIBBjAPBgNVHRMBAf8EBTADAQH/
|
|
MB0GA1UdDgQWBBS2CHsNesysIEyGVjJez6tuhS1wVzA/BgNVHR8EODA2MDSgMqAw
|
|
hi5odHRwOi8vd3d3Mi5wdWJsaWMtdHJ1c3QuY29tL2NybC9jdC9jdHJvb3QuY3Js
|
|
MB8GA1UdIwQYMBaAFLYIew16zKwgTIZWMl7Pq26FLXBXMA0GCSqGSIb3DQEBBQUA
|
|
A4IBAQBW7wojoFROlZfJ+InaRcHUowAl9B8Tq7ejhVhpwjCt2BWKLePJzYFa+HMj
|
|
Wqd8BfP9IjsO0QbE2zZMcwSO5bAi5MXzLqXZI+O4Tkogp24CJJ8iYGd7ix1yCcUx
|
|
XOl5n4BHPa2hCwcUPUf/A2kaDAtE52Mlp3+yybh2hO0j9n0Hq0V+09+zv+mKts2o
|
|
omcrUtW3ZfA5TGOgkXmTUg9U3YO7n9GPp1Nzw8v/MOx8BLjYRB+TX3EJIrduPuoc
|
|
A06dGiBh+4E37F78CkWr1+cXVdCg6mCbpvbjjFspwgZgFJ0tl0ypkxWdYcQBX0jW
|
|
WL1WMRJOEcgh4LMRkWXbtKaIOM5V
|
|
-----END CERTIFICATE-----
|