freebsd-skq/secure/caroot/trusted/GeoTrust_Universal_CA_2.pem
Kyle Evans b25bf676f0 caroot: commit initial bundle
Interested users can blacklist any/all of these with certctl(8), examples:

- mv /usr/share/certs/trusted/... /usr/share/certs/blacklisted/...; \
    certctl rehash
- certctl blacklist /usr/share/certs/trusted/*; \
    certctl rehash

Certs can be easily examined after installation with `certctl list`, and
certctl blacklist will accept the hashed filename as output by list or as
seen in /etc/ssl/certs

No objection from:	secteam
Relnotes:	Definite maybe
2019-10-04 02:34:20 +00:00

135 lines
7.4 KiB
Plaintext

##
## GeoTrust Universal CA 2
##
## This is a single X.509 certificate for a public Certificate
## Authority (CA). It was automatically extracted from Mozilla's
## root CA list (the file `certdata.txt' in security/nss).
##
## Extracted from nss
## with $FreeBSD: head/secure/caroot/MAca-bundle.pl 352951 2019-10-02 01:27:50Z kevans $
##
## @generated
##
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1 (0x1)
Signature Algorithm: sha1WithRSAEncryption
Issuer: C = US, O = GeoTrust Inc., CN = GeoTrust Universal CA 2
Validity
Not Before: Mar 4 05:00:00 2004 GMT
Not After : Mar 4 05:00:00 2029 GMT
Subject: C = US, O = GeoTrust Inc., CN = GeoTrust Universal CA 2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (4096 bit)
Modulus:
00:b3:54:52:c1:c9:3e:f2:d9:dc:b1:53:1a:59:29:
e7:b1:c3:45:28:e5:d7:d1:ed:c5:c5:4b:a1:aa:74:
7b:57:af:4a:26:fc:d8:f5:5e:a7:6e:19:db:74:0c:
4f:35:5b:32:0b:01:e3:db:eb:7a:77:35:ea:aa:5a:
e0:d6:e8:a1:57:94:f0:90:a3:74:56:94:44:30:03:
1e:5c:4e:2b:85:26:74:82:7a:0c:76:a0:6f:4d:ce:
41:2d:a0:15:06:14:5f:b7:42:cd:7b:8f:58:61:34:
dc:2a:08:f9:2e:c3:01:a6:22:44:1c:4c:07:82:e6:
5b:ce:d0:4a:7c:04:d3:19:73:27:f0:aa:98:7f:2e:
af:4e:eb:87:1e:24:77:6a:5d:b6:e8:5b:45:ba:dc:
c3:a1:05:6f:56:8e:8f:10:26:a5:49:c3:2e:d7:41:
87:22:e0:4f:86:ca:60:b5:ea:a1:63:c0:01:97:10:
79:bd:00:3c:12:6d:2b:15:b1:ac:4b:b1:ee:18:b9:
4e:96:dc:dc:76:ff:3b:be:cf:5f:03:c0:fc:3b:e8:
be:46:1b:ff:da:40:c2:52:f7:fe:e3:3a:f7:6a:77:
35:d0:da:8d:eb:5e:18:6a:31:c7:1e:ba:3c:1b:28:
d6:6b:54:c6:aa:5b:d7:a2:2c:1b:19:cc:a2:02:f6:
9b:59:bd:37:6b:86:b5:6d:82:ba:d8:ea:c9:56:bc:
a9:36:58:fd:3e:19:f3:ed:0c:26:a9:93:38:f8:4f:
c1:5d:22:06:d0:97:ea:e1:ad:c6:55:e0:81:2b:28:
83:3a:fa:f4:7b:21:51:00:be:52:38:ce:cd:66:79:
a8:f4:81:56:e2:d0:83:09:47:51:5b:50:6a:cf:db:
48:1a:5d:3e:f7:cb:f6:65:f7:6c:f1:95:f8:02:3b:
32:56:82:39:7a:5b:bd:2f:89:1b:bf:a1:b4:e8:ff:
7f:8d:8c:df:03:f1:60:4e:58:11:4c:eb:a3:3f:10:
2b:83:9a:01:73:d9:94:6d:84:00:27:66:ac:f0:70:
40:09:42:92:ad:4f:93:0d:61:09:51:24:d8:92:d5:
0b:94:61:b2:87:b2:ed:ff:9a:35:ff:85:54:ca:ed:
44:43:ac:1b:3c:16:6b:48:4a:0a:1c:40:88:1f:92:
c2:0b:00:05:ff:f2:c8:02:4a:a4:aa:a9:cc:99:96:
9c:2f:58:e0:7d:e1:be:bb:07:dc:5f:04:72:5c:31:
34:c3:ec:5f:2d:e0:3d:64:90:22:e6:d1:ec:b8:2e:
dd:59:ae:d9:a1:37:bf:54:35:dc:73:32:4f:8c:04:
1e:33:b2:c9:46:f1:d8:5c:c8:55:50:c9:68:bd:a8:
ba:36:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
76:F3:55:E1:FA:A4:36:FB:F0:9F:5C:62:71:ED:3C:F4:47:38:10:2B
X509v3 Authority Key Identifier:
keyid:76:F3:55:E1:FA:A4:36:FB:F0:9F:5C:62:71:ED:3C:F4:47:38:10:2B
X509v3 Key Usage: critical
Digital Signature, Certificate Sign, CRL Sign
Signature Algorithm: sha1WithRSAEncryption
66:c1:c6:23:f3:d9:e0:2e:6e:5f:e8:cf:ae:b0:b0:25:4d:2b:
f8:3b:58:9b:40:24:37:5a:cb:ab:16:49:ff:b3:75:79:33:a1:
2f:6d:70:17:34:91:fe:67:7e:8f:ec:9b:e5:5e:82:a9:55:1f:
2f:dc:d4:51:07:12:fe:ac:16:3e:2c:35:c6:63:fc:dc:10:eb:
0d:a3:aa:d0:7c:cc:d1:d0:2f:51:2e:c4:14:5a:de:e8:19:e1:
3e:c6:cc:a4:29:e7:2e:84:aa:06:30:78:76:54:73:28:98:59:
38:e0:00:0d:62:d3:42:7d:21:9f:ae:3d:3a:8c:d5:fa:77:0d:
18:2b:16:0e:5f:36:e1:fc:2a:b5:30:24:cf:e0:63:0c:7b:58:
1a:fe:99:ba:42:12:b1:91:f4:7c:68:e2:c8:e8:af:2c:ea:c9:
7e:ae:bb:2a:3d:0d:15:dc:34:95:b6:18:74:a8:6a:0f:c7:b4:
f4:13:c4:e4:5b:ed:0a:d2:a4:97:4c:2a:ed:2f:6c:12:89:3d:
f1:27:70:aa:6a:03:52:21:9f:40:a8:67:50:f2:f3:5a:1f:df:
df:23:f6:dc:78:4e:e6:98:4f:55:3a:53:e3:ef:f2:f4:9f:c7:
7c:d8:58:af:29:22:97:b8:e0:bd:91:2e:b0:76:ec:57:11:cf:
ef:29:44:f3:e9:85:7a:60:63:e4:5d:33:89:17:d9:31:aa:da:
d6:f3:18:35:72:cf:87:2b:2f:63:23:84:5d:84:8c:3f:57:a0:
88:fc:99:91:28:26:69:99:d4:8f:97:44:be:8e:d5:48:b1:a4:
28:29:f1:15:b4:e1:e5:9e:dd:f8:8f:a6:6f:26:d7:09:3c:3a:
1c:11:0e:a6:6c:37:f7:ad:44:87:2c:28:c7:d8:74:82:b3:d0:
6f:4a:57:bb:35:29:27:a0:8b:e8:21:a7:87:64:36:5d:cc:d8:
16:ac:c7:b2:27:40:92:55:38:28:8d:51:6e:dd:14:67:53:6c:
71:5c:26:84:4d:75:5a:b6:7e:60:56:a9:4d:ad:fb:9b:1e:97:
f3:0d:d9:d2:97:54:77:da:3d:12:b7:e0:1e:ef:08:06:ac:f9:
85:87:e9:a2:dc:af:7e:18:12:83:fd:56:17:41:2e:d5:29:82:
7d:99:f4:31:f6:71:a9:cf:2c:01:27:a5:05:b9:aa:b2:48:4e:
2a:ef:9f:93:52:51:95:3c:52:73:8e:56:4c:17:40:c0:09:28:
e4:8b:6a:48:53:db:ec:cd:55:55:f1:c6:f8:e9:a2:2c:4c:a6:
d1:26:5f:7e:af:5a:4c:da:1f:a6:f2:1c:2c:7e:ae:02:16:d2:
56:d0:2f:57:53:47:e8:92
SHA1 Fingerprint=37:9A:19:7B:41:85:45:35:0C:A6:03:69:F3:3C:2E:AF:47:4F:20:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----