Interested users can blacklist any/all of these with certctl(8), examples: - mv /usr/share/certs/trusted/... /usr/share/certs/blacklisted/...; \ certctl rehash - certctl blacklist /usr/share/certs/trusted/*; \ certctl rehash Certs can be easily examined after installation with `certctl list`, and certctl blacklist will accept the hashed filename as output by list or as seen in /etc/ssl/certs No objection from: secteam Relnotes: Definite maybe
92 lines
4.7 KiB
Plaintext
92 lines
4.7 KiB
Plaintext
##
|
|
## GeoTrust Primary Certification Authority
|
|
##
|
|
## This is a single X.509 certificate for a public Certificate
|
|
## Authority (CA). It was automatically extracted from Mozilla's
|
|
## root CA list (the file `certdata.txt' in security/nss).
|
|
##
|
|
## Extracted from nss
|
|
## with $FreeBSD: head/secure/caroot/MAca-bundle.pl 352951 2019-10-02 01:27:50Z kevans $
|
|
##
|
|
## @generated
|
|
##
|
|
Certificate:
|
|
Data:
|
|
Version: 3 (0x2)
|
|
Serial Number:
|
|
18:ac:b5:6a:fd:69:b6:15:3a:63:6c:af:da:fa:c4:a1
|
|
Signature Algorithm: sha1WithRSAEncryption
|
|
Issuer: C = US, O = GeoTrust Inc., CN = GeoTrust Primary Certification Authority
|
|
Validity
|
|
Not Before: Nov 27 00:00:00 2006 GMT
|
|
Not After : Jul 16 23:59:59 2036 GMT
|
|
Subject: C = US, O = GeoTrust Inc., CN = GeoTrust Primary Certification Authority
|
|
Subject Public Key Info:
|
|
Public Key Algorithm: rsaEncryption
|
|
RSA Public-Key: (2048 bit)
|
|
Modulus:
|
|
00:be:b8:15:7b:ff:d4:7c:7d:67:ad:83:64:7b:c8:
|
|
42:53:2d:df:f6:84:08:20:61:d6:01:59:6a:9c:44:
|
|
11:af:ef:76:fd:95:7e:ce:61:30:bb:7a:83:5f:02:
|
|
bd:01:66:ca:ee:15:8d:6f:a1:30:9c:bd:a1:85:9e:
|
|
94:3a:f3:56:88:00:31:cf:d8:ee:6a:96:02:d9:ed:
|
|
03:8c:fb:75:6d:e7:ea:b8:55:16:05:16:9a:f4:e0:
|
|
5e:b1:88:c0:64:85:5c:15:4d:88:c7:b7:ba:e0:75:
|
|
e9:ad:05:3d:9d:c7:89:48:e0:bb:28:c8:03:e1:30:
|
|
93:64:5e:52:c0:59:70:22:35:57:88:8a:f1:95:0a:
|
|
83:d7:bc:31:73:01:34:ed:ef:46:71:e0:6b:02:a8:
|
|
35:72:6b:97:9b:66:e0:cb:1c:79:5f:d8:1a:04:68:
|
|
1e:47:02:e6:9d:60:e2:36:97:01:df:ce:35:92:df:
|
|
be:67:c7:6d:77:59:3b:8f:9d:d6:90:15:94:bc:42:
|
|
34:10:c1:39:f9:b1:27:3e:7e:d6:8a:75:c5:b2:af:
|
|
96:d3:a2:de:9b:e4:98:be:7d:e1:e9:81:ad:b6:6f:
|
|
fc:d7:0e:da:e0:34:b0:0d:1a:77:e7:e3:08:98:ef:
|
|
58:fa:9c:84:b7:36:af:c2:df:ac:d2:f4:10:06:70:
|
|
71:35
|
|
Exponent: 65537 (0x10001)
|
|
X509v3 extensions:
|
|
X509v3 Basic Constraints: critical
|
|
CA:TRUE
|
|
X509v3 Key Usage: critical
|
|
Certificate Sign, CRL Sign
|
|
X509v3 Subject Key Identifier:
|
|
2C:D5:50:41:97:15:8B:F0:8F:36:61:5B:4A:FB:6B:D9:99:C9:33:92
|
|
Signature Algorithm: sha1WithRSAEncryption
|
|
5a:70:7f:2c:dd:b7:34:4f:f5:86:51:a9:26:be:4b:b8:aa:f1:
|
|
71:0d:dc:61:c7:a0:ea:34:1e:7a:77:0f:04:35:e8:27:8f:6c:
|
|
90:bf:91:16:24:46:3e:4a:4e:ce:2b:16:d5:0b:52:1d:fc:1f:
|
|
67:a2:02:45:31:4f:ce:f3:fa:03:a7:79:9d:53:6a:d9:da:63:
|
|
3a:f8:80:d7:d3:99:e1:a5:e1:be:d4:55:71:98:35:3a:be:93:
|
|
ea:ae:ad:42:b2:90:6f:e0:fc:21:4d:35:63:33:89:49:d6:9b:
|
|
4e:ca:c7:e7:4e:09:00:f7:da:c7:ef:99:62:99:77:b6:95:22:
|
|
5e:8a:a0:ab:f4:b8:78:98:ca:38:19:99:c9:72:9e:78:cd:4b:
|
|
ac:af:19:a0:73:12:2d:fc:c2:41:ba:81:91:da:16:5a:31:b7:
|
|
f9:b4:71:80:12:48:99:72:73:5a:59:53:c1:63:52:33:ed:a7:
|
|
c9:d2:39:02:70:fa:e0:b1:42:66:29:aa:9b:51:ed:30:54:22:
|
|
14:5f:d9:ab:1d:c1:e4:94:f0:f8:f5:2b:f7:ea:ca:78:46:d6:
|
|
b8:91:fd:a6:0d:2b:1a:14:01:3e:80:f0:42:a0:95:07:5e:6d:
|
|
cd:cc:4b:a4:45:8d:ab:12:e8:b3:de:5a:e5:a0:7c:e8:0f:22:
|
|
1d:5a:e9:59
|
|
SHA1 Fingerprint=32:3C:11:8E:1B:F7:B8:B6:52:54:E2:E2:10:0D:D6:02:90:37:F0:96
|
|
-----BEGIN CERTIFICATE-----
|
|
MIIDfDCCAmSgAwIBAgIQGKy1av1pthU6Y2yv2vrEoTANBgkqhkiG9w0BAQUFADBY
|
|
MQswCQYDVQQGEwJVUzEWMBQGA1UEChMNR2VvVHJ1c3QgSW5jLjExMC8GA1UEAxMo
|
|
R2VvVHJ1c3QgUHJpbWFyeSBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTAeFw0wNjEx
|
|
MjcwMDAwMDBaFw0zNjA3MTYyMzU5NTlaMFgxCzAJBgNVBAYTAlVTMRYwFAYDVQQK
|
|
Ew1HZW9UcnVzdCBJbmMuMTEwLwYDVQQDEyhHZW9UcnVzdCBQcmltYXJ5IENlcnRp
|
|
ZmljYXRpb24gQXV0aG9yaXR5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
|
|
AQEAvrgVe//UfH1nrYNke8hCUy3f9oQIIGHWAVlqnEQRr+92/ZV+zmEwu3qDXwK9
|
|
AWbK7hWNb6EwnL2hhZ6UOvNWiAAxz9juapYC2e0DjPt1befquFUWBRaa9OBesYjA
|
|
ZIVcFU2Ix7e64HXprQU9nceJSOC7KMgD4TCTZF5SwFlwIjVXiIrxlQqD17wxcwE0
|
|
7e9GceBrAqg1cmuXm2bgyxx5X9gaBGgeRwLmnWDiNpcB3841kt++Z8dtd1k7j53W
|
|
kBWUvEI0EME5+bEnPn7WinXFsq+W06Lem+SYvn3h6YGttm/81w7a4DSwDRp35+MI
|
|
mO9Y+pyEtzavwt+s0vQQBnBxNQIDAQABo0IwQDAPBgNVHRMBAf8EBTADAQH/MA4G
|
|
A1UdDwEB/wQEAwIBBjAdBgNVHQ4EFgQULNVQQZcVi/CPNmFbSvtr2ZnJM5IwDQYJ
|
|
KoZIhvcNAQEFBQADggEBAFpwfyzdtzRP9YZRqSa+S7iq8XEN3GHHoOo0Hnp3DwQ1
|
|
6CePbJC/kRYkRj5KTs4rFtULUh38H2eiAkUxT87z+gOneZ1TatnaYzr4gNfTmeGl
|
|
4b7UVXGYNTq+k+qurUKykG/g/CFNNWMziUnWm07Kx+dOCQD32sfvmWKZd7aVIl6K
|
|
oKv0uHiYyjgZmclynnjNS6yvGaBzEi38wkG6gZHaFloxt/m0cYASSJlyc1pZU8Fj
|
|
UjPtp8nSOQJw+uCxQmYpqptR7TBUIhRf2asdweSU8Pj1K/fqynhG1riR/aYNKxoU
|
|
AT6A8EKglQdebc3MS6RFjasS6LPeWuWgfOgPIh1a6Vk=
|
|
-----END CERTIFICATE-----
|