Interested users can blacklist any/all of these with certctl(8), examples: - mv /usr/share/certs/trusted/... /usr/share/certs/blacklisted/...; \ certctl rehash - certctl blacklist /usr/share/certs/trusted/*; \ certctl rehash Certs can be easily examined after installation with `certctl list`, and certctl blacklist will accept the hashed filename as output by list or as seen in /etc/ssl/certs No objection from: secteam Relnotes: Definite maybe
92 lines
4.6 KiB
Plaintext
92 lines
4.6 KiB
Plaintext
##
|
|
## emSign Root CA - C1
|
|
##
|
|
## This is a single X.509 certificate for a public Certificate
|
|
## Authority (CA). It was automatically extracted from Mozilla's
|
|
## root CA list (the file `certdata.txt' in security/nss).
|
|
##
|
|
## Extracted from nss
|
|
## with $FreeBSD: head/secure/caroot/MAca-bundle.pl 352951 2019-10-02 01:27:50Z kevans $
|
|
##
|
|
## @generated
|
|
##
|
|
Certificate:
|
|
Data:
|
|
Version: 3 (0x2)
|
|
Serial Number:
|
|
ae:cf:00:ba:c4:cf:32:f8:43:b2
|
|
Signature Algorithm: sha256WithRSAEncryption
|
|
Issuer: C = US, OU = emSign PKI, O = eMudhra Inc, CN = emSign Root CA - C1
|
|
Validity
|
|
Not Before: Feb 18 18:30:00 2018 GMT
|
|
Not After : Feb 18 18:30:00 2043 GMT
|
|
Subject: C = US, OU = emSign PKI, O = eMudhra Inc, CN = emSign Root CA - C1
|
|
Subject Public Key Info:
|
|
Public Key Algorithm: rsaEncryption
|
|
RSA Public-Key: (2048 bit)
|
|
Modulus:
|
|
00:cf:eb:a9:b9:f1:99:05:cc:d8:28:21:4a:f3:73:
|
|
34:51:84:56:10:f5:a0:4f:2c:12:e3:fa:13:9a:27:
|
|
d0:cf:f9:79:1a:74:5f:1d:79:39:fc:5b:f8:70:8e:
|
|
e0:92:52:f7:e4:25:f9:54:83:d9:1d:d3:c8:5a:85:
|
|
3f:5e:c7:b6:07:ee:3e:c0:ce:9a:af:ac:56:42:2a:
|
|
39:25:70:d6:bf:b5:7b:36:ad:ac:f6:73:dc:cd:d7:
|
|
1d:8a:83:a5:fb:2b:90:15:37:6b:1c:26:47:dc:3b:
|
|
29:56:93:6a:b3:c1:6a:3a:9d:3d:f5:c1:97:38:58:
|
|
05:8b:1c:11:e3:e4:b4:b8:5d:85:1d:83:fe:78:5f:
|
|
0b:45:68:18:48:a5:46:73:34:3b:fe:0f:c8:76:bb:
|
|
c7:18:f3:05:d1:86:f3:85:ed:e7:b9:d9:32:ad:55:
|
|
88:ce:a6:b6:91:b0:4f:ac:7e:15:23:96:f6:3f:f0:
|
|
20:34:16:de:0a:c6:c4:04:45:79:7f:a7:fd:be:d2:
|
|
a9:a5:af:9c:c5:23:2a:f7:3c:21:6c:bd:af:8f:4e:
|
|
c5:3a:b2:f3:34:12:fc:df:80:1a:49:a4:d4:a9:95:
|
|
f7:9e:89:5e:a2:89:ac:94:cb:a8:68:9b:af:8a:65:
|
|
27:cd:89:ee:dd:8c:b5:6b:29:70:43:a0:69:0b:e4:
|
|
b9:0f
|
|
Exponent: 65537 (0x10001)
|
|
X509v3 extensions:
|
|
X509v3 Subject Key Identifier:
|
|
FE:A1:E0:70:1E:2A:03:39:52:5A:42:BE:5C:91:85:7A:18:AA:4D:B5
|
|
X509v3 Key Usage: critical
|
|
Certificate Sign, CRL Sign
|
|
X509v3 Basic Constraints: critical
|
|
CA:TRUE
|
|
Signature Algorithm: sha256WithRSAEncryption
|
|
c2:4a:56:fa:15:21:7b:28:a2:e9:e5:1d:fb:f8:2d:c4:39:96:
|
|
41:4c:3b:27:2c:c4:6c:18:15:80:c6:ac:af:47:59:2f:26:0b:
|
|
e3:36:b0:ef:3b:fe:43:97:49:32:99:12:15:5b:df:11:29:ff:
|
|
ab:53:f8:bb:c1:78:0f:ac:9c:53:af:57:bd:68:8c:3d:69:33:
|
|
f0:a3:a0:23:63:3b:64:67:22:44:ad:d5:71:cb:56:2a:78:92:
|
|
a3:4f:12:31:36:36:e2:de:fe:00:c4:a3:60:0f:27:ad:a0:b0:
|
|
8a:b5:36:7a:52:a1:bd:27:f4:20:27:62:e8:4d:94:24:13:e4:
|
|
0a:04:e9:3c:ab:2e:c8:43:09:4a:c6:61:04:e5:49:34:7e:d3:
|
|
c4:c8:f5:0f:c0:aa:e9:ba:54:5e:f3:63:2b:4f:4f:50:d4:fe:
|
|
b9:7b:99:8c:3d:c0:2e:bc:02:2b:d3:c4:40:e4:8a:07:31:1e:
|
|
9b:ce:26:99:13:fb:11:ea:9a:22:0c:11:19:c7:5e:1b:81:50:
|
|
30:c8:96:12:6e:e7:cb:41:7f:91:3b:a2:47:b7:54:80:1b:dc:
|
|
00:cc:9a:90:ea:c3:c3:50:06:62:0c:30:c0:15:48:a7:a8:59:
|
|
7c:e1:ae:22:a2:e2:0a:7a:0f:fa:62:ab:52:4c:e1:f1:df:ca:
|
|
be:83:0d:42
|
|
SHA1 Fingerprint=E7:2E:F1:DF:FC:B2:09:28:CF:5D:D4:D5:67:37:B1:51:CB:86:4F:01
|
|
-----BEGIN CERTIFICATE-----
|
|
MIIDczCCAlugAwIBAgILAK7PALrEzzL4Q7IwDQYJKoZIhvcNAQELBQAwVjELMAkG
|
|
A1UEBhMCVVMxEzARBgNVBAsTCmVtU2lnbiBQS0kxFDASBgNVBAoTC2VNdWRocmEg
|
|
SW5jMRwwGgYDVQQDExNlbVNpZ24gUm9vdCBDQSAtIEMxMB4XDTE4MDIxODE4MzAw
|
|
MFoXDTQzMDIxODE4MzAwMFowVjELMAkGA1UEBhMCVVMxEzARBgNVBAsTCmVtU2ln
|
|
biBQS0kxFDASBgNVBAoTC2VNdWRocmEgSW5jMRwwGgYDVQQDExNlbVNpZ24gUm9v
|
|
dCBDQSAtIEMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz+upufGZ
|
|
BczYKCFK83M0UYRWEPWgTywS4/oTmifQz/l5GnRfHXk5/Fv4cI7gklL35CX5VIPZ
|
|
HdPIWoU/Xse2B+4+wM6ar6xWQio5JXDWv7V7Nq2s9nPczdcdioOl+yuQFTdrHCZH
|
|
3DspVpNqs8FqOp099cGXOFgFixwR4+S0uF2FHYP+eF8LRWgYSKVGczQ7/g/IdrvH
|
|
GPMF0Ybzhe3nudkyrVWIzqa2kbBPrH4VI5b2P/AgNBbeCsbEBEV5f6f9vtKppa+c
|
|
xSMq9zwhbL2vj07FOrLzNBL834AaSaTUqZX3noleoomslMuoaJuvimUnzYnu3Yy1
|
|
aylwQ6BpC+S5DwIDAQABo0IwQDAdBgNVHQ4EFgQU/qHgcB4qAzlSWkK+XJGFehiq
|
|
TbUwDgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wDQYJKoZIhvcNAQEL
|
|
BQADggEBAMJKVvoVIXsoounlHfv4LcQ5lkFMOycsxGwYFYDGrK9HWS8mC+M2sO87
|
|
/kOXSTKZEhVb3xEp/6tT+LvBeA+snFOvV71ojD1pM/CjoCNjO2RnIkSt1XHLVip4
|
|
kqNPEjE2NuLe/gDEo2APJ62gsIq1NnpSob0n9CAnYuhNlCQT5AoE6TyrLshDCUrG
|
|
YQTlSTR+08TI9Q/Aqum6VF7zYytPT1DU/rl7mYw9wC68AivTxEDkigcxHpvOJpkT
|
|
+xHqmiIMERnHXhuBUDDIlhJu58tBf5E7oke3VIAb3ADMmpDqw8NQBmIMMMAVSKeo
|
|
WXzhriKi4gp6D/piq1JM4fHfyr6DDUI=
|
|
-----END CERTIFICATE-----
|