Interested users can blacklist any/all of these with certctl(8), examples: - mv /usr/share/certs/trusted/... /usr/share/certs/blacklisted/...; \ certctl rehash - certctl blacklist /usr/share/certs/trusted/*; \ certctl rehash Certs can be easily examined after installation with `certctl list`, and certctl blacklist will accept the hashed filename as output by list or as seen in /etc/ssl/certs No objection from: secteam Relnotes: Definite maybe
102 lines
5.1 KiB
Plaintext
102 lines
5.1 KiB
Plaintext
##
|
|
## D-TRUST Root CA 3 2013
|
|
##
|
|
## This is a single X.509 certificate for a public Certificate
|
|
## Authority (CA). It was automatically extracted from Mozilla's
|
|
## root CA list (the file `certdata.txt' in security/nss).
|
|
##
|
|
## Extracted from nss
|
|
## with $FreeBSD: head/secure/caroot/MAca-bundle.pl 352951 2019-10-02 01:27:50Z kevans $
|
|
##
|
|
## @generated
|
|
##
|
|
Certificate:
|
|
Data:
|
|
Version: 3 (0x2)
|
|
Serial Number: 1039788 (0xfddac)
|
|
Signature Algorithm: sha256WithRSAEncryption
|
|
Issuer: C = DE, O = D-Trust GmbH, CN = D-TRUST Root CA 3 2013
|
|
Validity
|
|
Not Before: Sep 20 08:25:51 2013 GMT
|
|
Not After : Sep 20 08:25:51 2028 GMT
|
|
Subject: C = DE, O = D-Trust GmbH, CN = D-TRUST Root CA 3 2013
|
|
Subject Public Key Info:
|
|
Public Key Algorithm: rsaEncryption
|
|
RSA Public-Key: (2048 bit)
|
|
Modulus:
|
|
00:c4:7b:42:92:82:1f:ec:ed:54:98:8e:12:c0:ca:
|
|
09:df:93:6e:3a:93:5c:1b:e4:10:77:9e:4e:69:88:
|
|
6c:f6:e1:69:f2:f6:9b:a2:61:b1:bd:07:20:74:98:
|
|
65:f1:8c:26:08:cd:a8:35:ca:80:36:d1:63:6d:e8:
|
|
44:7a:82:c3:6c:5e:de:bb:e8:36:d2:c4:68:36:8c:
|
|
9f:32:bd:84:22:e0:dc:c2:ee:10:46:39:6d:af:93:
|
|
39:ae:87:e6:c3:bc:09:c9:2c:6b:67:5b:d9:9b:76:
|
|
75:4c:0b:e0:bb:c5:d7:bc:3e:79:f2:5f:be:d1:90:
|
|
57:f9:ae:f6:66:5f:31:bf:d3:6d:8f:a7:ba:4a:f3:
|
|
23:65:bb:b7:ef:a3:25:d7:0a:ea:58:b6:ef:88:fa:
|
|
fa:79:b2:52:58:d5:f0:ac:8c:a1:51:74:29:95:aa:
|
|
51:3b:90:32:03:9f:1c:72:74:90:de:3d:ed:61:d2:
|
|
e5:e3:fd:64:47:e5:b9:b7:4a:a9:f7:1f:ae:96:86:
|
|
04:ac:2f:e3:a4:81:77:b7:5a:16:ff:d8:0f:3f:f6:
|
|
b7:78:cc:a4:af:fa:5b:3c:12:5b:a8:52:89:72:ef:
|
|
88:f3:d5:44:81:86:95:23:9f:7b:dd:bc:d9:34:ef:
|
|
7c:94:3c:aa:c0:41:c2:e3:9d:50:1a:c0:e4:19:22:
|
|
fc:b3
|
|
Exponent: 65537 (0x10001)
|
|
X509v3 extensions:
|
|
X509v3 Basic Constraints: critical
|
|
CA:TRUE
|
|
X509v3 Subject Key Identifier:
|
|
3F:90:C8:7D:C7:15:6F:F3:24:8F:A9:C3:2F:4B:A2:0F:21:B2:2F:E7
|
|
X509v3 Key Usage: critical
|
|
Certificate Sign, CRL Sign
|
|
X509v3 CRL Distribution Points:
|
|
|
|
Full Name:
|
|
URI:ldap://directory.d-trust.net/CN=D-TRUST%20Root%20CA%203%202013,O=D-Trust%20GmbH,C=DE?certificaterevocationlist
|
|
|
|
Full Name:
|
|
URI:http://crl.d-trust.net/crl/d-trust_root_ca_3_2013.crl
|
|
|
|
Signature Algorithm: sha256WithRSAEncryption
|
|
0e:59:0e:58:e4:74:48:23:44:cf:34:21:b5:9c:14:1a:ad:9a:
|
|
4b:b7:b3:88:6d:5c:a9:17:70:f0:2a:9f:8d:7b:f9:7b:85:fa:
|
|
c7:39:e8:10:08:b0:35:2b:5f:cf:02:d2:d3:9c:c8:0b:1e:ee:
|
|
05:54:ae:37:93:04:09:7d:6c:8f:c2:74:bc:f8:1c:94:be:31:
|
|
01:40:2d:f3:24:20:b7:84:55:2c:5c:c8:f5:74:4a:10:19:8b:
|
|
a3:c7:ed:35:d6:09:48:d3:0e:c0:ba:39:a8:b0:46:02:b0:db:
|
|
c6:88:59:c2:be:fc:7b:b1:2b:cf:7e:62:87:55:96:cc:01:6f:
|
|
9b:67:21:95:35:8b:f8:10:fc:71:1b:b7:4b:37:69:a6:3b:d6:
|
|
ec:8b:ee:c1:b0:f3:25:c9:8f:92:7d:a1:ea:c3:ca:44:bf:26:
|
|
a5:74:92:9c:e3:74:eb:9d:74:d9:cb:4d:87:d8:fc:b4:69:6c:
|
|
8b:a0:43:07:60:78:97:e9:d9:93:7c:c2:46:bc:9b:37:52:a3:
|
|
ed:8a:3c:13:a9:7b:53:4b:49:9a:11:05:2c:0b:6e:56:ac:1f:
|
|
2e:82:6c:e0:69:67:b5:0e:6d:2d:d9:e4:c0:15:f1:3f:fa:18:
|
|
72:e1:15:6d:27:5b:2d:30:28:2b:9f:48:9a:64:2b:99:ef:f2:
|
|
75:49:5f:5c
|
|
SHA1 Fingerprint=6C:7C:CC:E7:D4:AE:51:5F:99:08:CD:3F:F6:E8:C3:78:DF:6F:EF:97
|
|
-----BEGIN CERTIFICATE-----
|
|
MIIEDjCCAvagAwIBAgIDD92sMA0GCSqGSIb3DQEBCwUAMEUxCzAJBgNVBAYTAkRF
|
|
MRUwEwYDVQQKDAxELVRydXN0IEdtYkgxHzAdBgNVBAMMFkQtVFJVU1QgUm9vdCBD
|
|
QSAzIDIwMTMwHhcNMTMwOTIwMDgyNTUxWhcNMjgwOTIwMDgyNTUxWjBFMQswCQYD
|
|
VQQGEwJERTEVMBMGA1UECgwMRC1UcnVzdCBHbWJIMR8wHQYDVQQDDBZELVRSVVNU
|
|
IFJvb3QgQ0EgMyAyMDEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA
|
|
xHtCkoIf7O1UmI4SwMoJ35NuOpNcG+QQd55OaYhs9uFp8vabomGxvQcgdJhl8Ywm
|
|
CM2oNcqANtFjbehEeoLDbF7eu+g20sRoNoyfMr2EIuDcwu4QRjltr5M5rofmw7wJ
|
|
ySxrZ1vZm3Z1TAvgu8XXvD558l++0ZBX+a72Zl8xv9Ntj6e6SvMjZbu376Ml1wrq
|
|
WLbviPr6ebJSWNXwrIyhUXQplapRO5AyA58ccnSQ3j3tYdLl4/1kR+W5t0qp9x+u
|
|
loYErC/jpIF3t1oW/9gPP/a3eMykr/pbPBJbqFKJcu+I89VEgYaVI5973bzZNO98
|
|
lDyqwEHC451QGsDkGSL8swIDAQABo4IBBTCCAQEwDwYDVR0TAQH/BAUwAwEB/zAd
|
|
BgNVHQ4EFgQUP5DIfccVb/Mkj6nDL0uiDyGyL+cwDgYDVR0PAQH/BAQDAgEGMIG+
|
|
BgNVHR8EgbYwgbMwdKByoHCGbmxkYXA6Ly9kaXJlY3RvcnkuZC10cnVzdC5uZXQv
|
|
Q049RC1UUlVTVCUyMFJvb3QlMjBDQSUyMDMlMjAyMDEzLE89RC1UcnVzdCUyMEdt
|
|
YkgsQz1ERT9jZXJ0aWZpY2F0ZXJldm9jYXRpb25saXN0MDugOaA3hjVodHRwOi8v
|
|
Y3JsLmQtdHJ1c3QubmV0L2NybC9kLXRydXN0X3Jvb3RfY2FfM18yMDEzLmNybDAN
|
|
BgkqhkiG9w0BAQsFAAOCAQEADlkOWOR0SCNEzzQhtZwUGq2aS7eziG1cqRdw8Cqf
|
|
jXv5e4X6xznoEAiwNStfzwLS05zICx7uBVSuN5MECX1sj8J0vPgclL4xAUAt8yQg
|
|
t4RVLFzI9XRKEBmLo8ftNdYJSNMOwLo5qLBGArDbxohZwr78e7Erz35ih1WWzAFv
|
|
m2chlTWL+BD8cRu3SzdppjvW7IvuwbDzJcmPkn2h6sPKRL8mpXSSnON065102ctN
|
|
h9j8tGlsi6BDB2B4l+nZk3zCRrybN1Kj7Yo8E6l7U0tJmhEFLAtuVqwfLoJs4Gln
|
|
tQ5tLdnkwBXxP/oYcuEVbSdbLTAoK59ImmQrme/ydUlfXA==
|
|
-----END CERTIFICATE-----
|