From f017b749ea9f1586d2308504553d40bf4cc5439d Mon Sep 17 00:00:00 2001 From: wolfbeast Date: Tue, 6 Feb 2018 11:46:26 +0100 Subject: Update NSS to 3.32.1-RTM --- security/nss/lib/ckfw/builtins/builtins.gyp | 12 +- security/nss/lib/ckfw/builtins/certdata.py | 18 + security/nss/lib/ckfw/builtins/certdata.txt | 2173 ++++----------------------- security/nss/lib/ckfw/builtins/nssckbi.h | 4 +- 4 files changed, 298 insertions(+), 1909 deletions(-) create mode 100644 security/nss/lib/ckfw/builtins/certdata.py (limited to 'security/nss/lib/ckfw') diff --git a/security/nss/lib/ckfw/builtins/builtins.gyp b/security/nss/lib/ckfw/builtins/builtins.gyp index d85442585..f8dbc1170 100644 --- a/security/nss/lib/ckfw/builtins/builtins.gyp +++ b/security/nss/lib/ckfw/builtins/builtins.gyp @@ -19,7 +19,7 @@ 'btoken.c', 'ckbiver.c', 'constants.c', - '<(INTERMEDIATE_DIR)/certdata.c' + '<(certdata_c)', ], 'dependencies': [ '<(DEPTH)/exports.gyp:nss_exports', @@ -30,23 +30,25 @@ { 'msvs_cygwin_shell': 0, 'action': [ - 'perl', - 'certdata.perl', + 'python', + 'certdata.py', 'certdata.txt', '<@(_outputs)', ], 'inputs': [ + 'certdata.py', 'certdata.perl', 'certdata.txt' ], 'outputs': [ - '<(INTERMEDIATE_DIR)/certdata.c' + '<(certdata_c)' ], 'action_name': 'generate_certdata_c' } ], 'variables': { - 'mapfile': 'nssckbi.def' + 'mapfile': 'nssckbi.def', + 'certdata_c': '<(INTERMEDIATE_DIR)/certdata.c', } } ], diff --git a/security/nss/lib/ckfw/builtins/certdata.py b/security/nss/lib/ckfw/builtins/certdata.py new file mode 100644 index 000000000..077824793 --- /dev/null +++ b/security/nss/lib/ckfw/builtins/certdata.py @@ -0,0 +1,18 @@ +#!/usr/bin/env python +# +# This Source Code Form is subject to the terms of the Mozilla Public +# License, v. 2.0. If a copy of the MPL was not distributed with this +# file, You can obtain one at http://mozilla.org/MPL/2.0/. + +import subprocess +import os +import sys + +def main(): + args = [os.path.realpath(x) for x in sys.argv[1:]] + script = os.path.dirname(os.path.abspath(__file__))+'/certdata.perl' + subprocess.check_call([os.environ.get('PERL', 'perl'), script] + args, + env=os.environ) + +if __name__ == '__main__': + main() diff --git a/security/nss/lib/ckfw/builtins/certdata.txt b/security/nss/lib/ckfw/builtins/certdata.txt index 9018179d3..45b659b7a 100644 --- a/security/nss/lib/ckfw/builtins/certdata.txt +++ b/security/nss/lib/ckfw/builtins/certdata.txt @@ -191,6 +191,7 @@ CKA_VALUE MULTILINE_OCTAL \034\305\037\244\200\157\025\040\311\336\014\210\012\035\326\146 \125\342\374\110\311\051\046\151\340 END +CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE # Trust for Certificate "GlobalSign Root CA" # Issuer: CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE @@ -225,7 +226,7 @@ CKA_SERIAL_NUMBER MULTILINE_OCTAL END CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_TRUSTED_DELEGATOR CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_TRUSTED_DELEGATOR -CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_TRUSTED_DELEGATOR +CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_MUST_VERIFY_TRUST CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE # @@ -324,6 +325,7 @@ CKA_VALUE MULTILINE_OCTAL \035\111\367\252\336\225\317\040\170\302\140\022\333\045\100\214 \152\374\176\102\070\100\144\022\367\236\201\341\223\056 END +CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE # Trust for Certificate "GlobalSign Root CA - R2" # Issuer: CN=GlobalSign,O=GlobalSign,OU=GlobalSign Root CA - R2 @@ -357,7 +359,7 @@ CKA_SERIAL_NUMBER MULTILINE_OCTAL END CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_TRUSTED_DELEGATOR CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_TRUSTED_DELEGATOR -CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_TRUSTED_DELEGATOR +CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_MUST_VERIFY_TRUST CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE # @@ -479,6 +481,7 @@ CKA_VALUE MULTILINE_OCTAL \363\334\017\337\012\207\304\357\206\005\325\070\024\140\231\243 \113\336\006\226\161\054\362\333\266\037\244\357\077\356 END +CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE # Trust for Certificate "Verisign Class 1 Public Primary Certification Authority - G3" # Issuer: CN=VeriSign Class 1 Public Primary Certification Authority - G3,OU="(c) 1999 VeriSign, Inc. - For authorized use only",OU=VeriSign Trust Network,O="VeriSign, Inc.",C=US @@ -643,6 +646,7 @@ CKA_VALUE MULTILINE_OCTAL \377\343\030\174\211\213\063\135\254\063\327\247\371\332\072\125 \311\130\020\371\252\357\132\266\317\113\113\337\052 END +CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE # Trust for Certificate "Verisign Class 2 Public Primary Certification Authority - G3" # Issuer: CN=VeriSign Class 2 Public Primary Certification Authority - G3,OU="(c) 1999 VeriSign, Inc. - For authorized use only",OU=VeriSign Trust Network,O="VeriSign, Inc.",C=US @@ -807,6 +811,7 @@ CKA_VALUE MULTILINE_OCTAL \200\332\267\155\027\217\235\036\201\144\341\376\305\105\272\255 \153\271\012\172\116\117\113\204\356\113\361\175\335\021 END +CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE # Trust for Certificate "Verisign Class 3 Public Primary Certification Authority - G3" # Issuer: CN=VeriSign Class 3 Public Primary Certification Authority - G3,OU="(c) 1999 VeriSign, Inc. - For authorized use only",OU=VeriSign Trust Network,O="VeriSign, Inc.",C=US @@ -849,7 +854,7 @@ CKA_SERIAL_NUMBER MULTILINE_OCTAL END CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_TRUSTED_DELEGATOR CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_TRUSTED_DELEGATOR -CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_TRUSTED_DELEGATOR +CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_MUST_VERIFY_TRUST CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE # Distrust "Distrust: O=Egypt Trust, OU=VeriSign Trust Network (cert 1/3)" @@ -1081,6 +1086,7 @@ CKA_VALUE MULTILINE_OCTAL \334\200\220\215\263\147\233\157\110\010\025\126\317\277\361\053 \174\136\232\166\351\131\220\305\174\203\065\021\145\121 END +CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE # Trust for "Entrust.net Premium 2048 Secure Server CA" # Issuer: CN=Entrust.net Certification Authority (2048),OU=(c) 1999 Entrust.net Limited,OU=www.entrust.net/CPS_2048 incorp. by ref. (limits liab.),O=Entrust.net @@ -1121,7 +1127,7 @@ CKA_SERIAL_NUMBER MULTILINE_OCTAL END CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_TRUSTED_DELEGATOR CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_TRUSTED_DELEGATOR -CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_TRUSTED_DELEGATOR +CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_MUST_VERIFY_TRUST CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE # @@ -1218,6 +1224,7 @@ CKA_VALUE MULTILINE_OCTAL \107\322\070\056\320\376\201\334\062\152\036\265\356\074\325\374 \347\201\035\031\303\044\102\352\143\071\251 END +CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE # Trust for Certificate "Baltimore CyberTrust Root" # Issuer: CN=Baltimore CyberTrust Root,OU=CyberTrust,O=Baltimore,C=IE @@ -1361,6 +1368,7 @@ CKA_VALUE MULTILINE_OCTAL \213\343\161\314\036\033\040\104\010\300\172\266\100\375\304\344 \065\341\035\026\034\320\274\053\216\326\161\331 END +CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE # Trust for Certificate "AddTrust Low-Value Services Root" # Issuer: CN=AddTrust Class 1 CA Root,OU=AddTrust TTP Network,O=AddTrust AB,C=SE @@ -1394,7 +1402,7 @@ END CKA_SERIAL_NUMBER MULTILINE_OCTAL \002\001\001 END -CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_TRUSTED_DELEGATOR +CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_MUST_VERIFY_TRUST CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_TRUSTED_DELEGATOR CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_MUST_VERIFY_TRUST CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE @@ -1509,6 +1517,7 @@ CKA_VALUE MULTILINE_OCTAL \232\171\017\040\012\056\325\236\143\046\036\125\222\224\330\202 \027\132\173\320\274\307\217\116\206\004 END +CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE # Trust for Certificate "AddTrust External Root" # Issuer: CN=AddTrust External CA Root,OU=AddTrust External TTP Network,O=AddTrust AB,C=SE @@ -1545,296 +1554,7 @@ CKA_SERIAL_NUMBER MULTILINE_OCTAL END CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_TRUSTED_DELEGATOR CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_TRUSTED_DELEGATOR -CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_TRUSTED_DELEGATOR -CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE - -# -# Certificate "AddTrust Public Services Root" -# -# Issuer: CN=AddTrust Public CA Root,OU=AddTrust TTP Network,O=AddTrust AB,C=SE -# Serial Number: 1 (0x1) -# Subject: CN=AddTrust Public CA Root,OU=AddTrust TTP Network,O=AddTrust AB,C=SE -# Not Valid Before: Tue May 30 10:41:50 2000 -# Not Valid After : Sat May 30 10:41:50 2020 -# Fingerprint (MD5): C1:62:3E:23:C5:82:73:9C:03:59:4B:2B:E9:77:49:7F -# Fingerprint (SHA1): 2A:B6:28:48:5E:78:FB:F3:AD:9E:79:10:DD:6B:DF:99:72:2C:96:E5 -CKA_CLASS CK_OBJECT_CLASS CKO_CERTIFICATE -CKA_TOKEN CK_BBOOL CK_TRUE -CKA_PRIVATE CK_BBOOL CK_FALSE -CKA_MODIFIABLE CK_BBOOL CK_FALSE -CKA_LABEL UTF8 "AddTrust Public Services Root" -CKA_CERTIFICATE_TYPE CK_CERTIFICATE_TYPE CKC_X_509 -CKA_SUBJECT MULTILINE_OCTAL -\060\144\061\013\060\011\006\003\125\004\006\023\002\123\105\061 -\024\060\022\006\003\125\004\012\023\013\101\144\144\124\162\165 -\163\164\040\101\102\061\035\060\033\006\003\125\004\013\023\024 -\101\144\144\124\162\165\163\164\040\124\124\120\040\116\145\164 -\167\157\162\153\061\040\060\036\006\003\125\004\003\023\027\101 -\144\144\124\162\165\163\164\040\120\165\142\154\151\143\040\103 -\101\040\122\157\157\164 -END -CKA_ID UTF8 "0" -CKA_ISSUER MULTILINE_OCTAL -\060\144\061\013\060\011\006\003\125\004\006\023\002\123\105\061 -\024\060\022\006\003\125\004\012\023\013\101\144\144\124\162\165 -\163\164\040\101\102\061\035\060\033\006\003\125\004\013\023\024 -\101\144\144\124\162\165\163\164\040\124\124\120\040\116\145\164 -\167\157\162\153\061\040\060\036\006\003\125\004\003\023\027\101 -\144\144\124\162\165\163\164\040\120\165\142\154\151\143\040\103 -\101\040\122\157\157\164 -END -CKA_SERIAL_NUMBER MULTILINE_OCTAL -\002\001\001 -END -CKA_VALUE MULTILINE_OCTAL -\060\202\004\025\060\202\002\375\240\003\002\001\002\002\001\001 -\060\015\006\011\052\206\110\206\367\015\001\001\005\005\000\060 -\144\061\013\060\011\006\003\125\004\006\023\002\123\105\061\024 -\060\022\006\003\125\004\012\023\013\101\144\144\124\162\165\163 -\164\040\101\102\061\035\060\033\006\003\125\004\013\023\024\101 -\144\144\124\162\165\163\164\040\124\124\120\040\116\145\164\167 -\157\162\153\061\040\060\036\006\003\125\004\003\023\027\101\144 -\144\124\162\165\163\164\040\120\165\142\154\151\143\040\103\101 -\040\122\157\157\164\060\036\027\015\060\060\060\065\063\060\061 -\060\064\061\065\060\132\027\015\062\060\060\065\063\060\061\060 -\064\061\065\060\132\060\144\061\013\060\011\006\003\125\004\006 -\023\002\123\105\061\024\060\022\006\003\125\004\012\023\013\101 -\144\144\124\162\165\163\164\040\101\102\061\035\060\033\006\003 -\125\004\013\023\024\101\144\144\124\162\165\163\164\040\124\124 -\120\040\116\145\164\167\157\162\153\061\040\060\036\006\003\125 -\004\003\023\027\101\144\144\124\162\165\163\164\040\120\165\142 -\154\151\143\040\103\101\040\122\157\157\164\060\202\001\042\060 -\015\006\011\052\206\110\206\367\015\001\001\001\005\000\003\202 -\001\017\000\060\202\001\012\002\202\001\001\000\351\032\060\217 -\203\210\024\301\040\330\074\233\217\033\176\003\164\273\332\151 -\323\106\245\370\216\302\014\021\220\121\245\057\146\124\100\125 -\352\333\037\112\126\356\237\043\156\364\071\313\241\271\157\362 -\176\371\135\207\046\141\236\034\370\342\354\246\201\370\041\305 -\044\314\021\014\077\333\046\162\172\307\001\227\007\027\371\327 -\030\054\060\175\016\172\036\142\036\306\113\300\375\175\142\167 -\323\104\036\047\366\077\113\104\263\267\070\331\071\037\140\325 -\121\222\163\003\264\000\151\343\363\024\116\356\321\334\011\317 -\167\064\106\120\260\370\021\362\376\070\171\367\007\071\376\121 -\222\227\013\133\010\137\064\206\001\255\210\227\353\146\315\136 -\321\377\334\175\362\204\332\272\167\255\334\200\010\307\247\207 -\326\125\237\227\152\350\310\021\144\272\347\031\051\077\021\263 -\170\220\204\040\122\133\021\357\170\320\203\366\325\110\220\320 -\060\034\317\200\371\140\376\171\344\210\362\335\000\353\224\105 -\353\145\224\151\100\272\300\325\264\270\272\175\004\021\250\353 -\061\005\226\224\116\130\041\216\237\320\140\375\002\003\001\000 -\001\243\201\321\060\201\316\060\035\006\003\125\035\016\004\026 -\004\024\201\076\067\330\222\260\037\167\237\134\264\253\163\252 -\347\366\064\140\057\372\060\013\006\003\125\035\017\004\004\003 -\002\001\006\060\017\006\003\125\035\023\001\001\377\004\005\060 -\003\001\001\377\060\201\216\006\003\125\035\043\004\201\206\060 -\201\203\200\024\201\076\067\330\222\260\037\167\237\134\264\253 -\163\252\347\366\064\140\057\372\241\150\244\146\060\144\061\013 -\060\011\006\003\125\004\006\023\002\123\105\061\024\060\022\006 -\003\125\004\012\023\013\101\144\144\124\162\165\163\164\040\101 -\102\061\035\060\033\006\003\125\004\013\023\024\101\144\144\124 -\162\165\163\164\040\124\124\120\040\116\145\164\167\157\162\153 -\061\040\060\036\006\003\125\004\003\023\027\101\144\144\124\162 -\165\163\164\040\120\165\142\154\151\143\040\103\101\040\122\157 -\157\164\202\001\001\060\015\006\011\052\206\110\206\367\015\001 -\001\005\005\000\003\202\001\001\000\003\367\025\112\370\044\332 -\043\126\026\223\166\335\066\050\271\256\033\270\303\361\144\272 -\040\030\170\225\051\047\127\005\274\174\052\364\271\121\125\332 -\207\002\336\017\026\027\061\370\252\171\056\011\023\273\257\262 -\040\031\022\345\223\371\113\371\203\350\104\325\262\101\045\277 -\210\165\157\377\020\374\112\124\320\137\360\372\357\066\163\175 -\033\066\105\306\041\155\264\025\270\116\317\234\134\245\075\132 -\000\216\006\343\074\153\062\173\362\237\360\266\375\337\360\050 -\030\110\360\306\274\320\277\064\200\226\302\112\261\155\216\307 -\220\105\336\057\147\254\105\004\243\172\334\125\222\311\107\146 -\330\032\214\307\355\234\116\232\340\022\273\265\152\114\204\341 -\341\042\015\207\000\144\376\214\175\142\071\145\246\357\102\266 -\200\045\022\141\001\250\044\023\160\000\021\046\137\372\065\120 -\305\110\314\006\107\350\047\330\160\215\137\144\346\241\104\046 -\136\042\354\222\315\377\102\232\104\041\155\134\305\343\042\035 -\137\107\022\347\316\137\135\372\330\252\261\063\055\331\166\362 -\116\072\063\014\053\263\055\220\006 -END - -# Trust for Certificate "AddTrust Public Services Root" -# Issuer: CN=AddTrust Public CA Root,OU=AddTrust TTP Network,O=AddTrust AB,C=SE -# Serial Number: 1 (0x1) -# Subject: CN=AddTrust Public CA Root,OU=AddTrust TTP Network,O=AddTrust AB,C=SE -# Not Valid Before: Tue May 30 10:41:50 2000 -# Not Valid After : Sat May 30 10:41:50 2020 -# Fingerprint (MD5): C1:62:3E:23:C5:82:73:9C:03:59:4B:2B:E9:77:49:7F -# Fingerprint (SHA1): 2A:B6:28:48:5E:78:FB:F3:AD:9E:79:10:DD:6B:DF:99:72:2C:96:E5 -CKA_CLASS CK_OBJECT_CLASS CKO_NSS_TRUST -CKA_TOKEN CK_BBOOL CK_TRUE -CKA_PRIVATE CK_BBOOL CK_FALSE -CKA_MODIFIABLE CK_BBOOL CK_FALSE -CKA_LABEL UTF8 "AddTrust Public Services Root" -CKA_CERT_SHA1_HASH MULTILINE_OCTAL -\052\266\050\110\136\170\373\363\255\236\171\020\335\153\337\231 -\162\054\226\345 -END -CKA_CERT_MD5_HASH MULTILINE_OCTAL -\301\142\076\043\305\202\163\234\003\131\113\053\351\167\111\177 -END -CKA_ISSUER MULTILINE_OCTAL -\060\144\061\013\060\011\006\003\125\004\006\023\002\123\105\061 -\024\060\022\006\003\125\004\012\023\013\101\144\144\124\162\165 -\163\164\040\101\102\061\035\060\033\006\003\125\004\013\023\024 -\101\144\144\124\162\165\163\164\040\124\124\120\040\116\145\164 -\167\157\162\153\061\040\060\036\006\003\125\004\003\023\027\101 -\144\144\124\162\165\163\164\040\120\165\142\154\151\143\040\103 -\101\040\122\157\157\164 -END -CKA_SERIAL_NUMBER MULTILINE_OCTAL -\002\001\001 -END -CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_TRUSTED_DELEGATOR -CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_TRUSTED_DELEGATOR -CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_TRUSTED_DELEGATOR -CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE - -# -# Certificate "AddTrust Qualified Certificates Root" -# -# Issuer: CN=AddTrust Qualified CA Root,OU=AddTrust TTP Network,O=AddTrust AB,C=SE -# Serial Number: 1 (0x1) -# Subject: CN=AddTrust Qualified CA Root,OU=AddTrust TTP Network,O=AddTrust AB,C=SE -# Not Valid Before: Tue May 30 10:44:50 2000 -# Not Valid After : Sat May 30 10:44:50 2020 -# Fingerprint (MD5): 27:EC:39:47:CD:DA:5A:AF:E2:9A:01:65:21:A9:4C:BB -# Fingerprint (SHA1): 4D:23:78:EC:91:95:39:B5:00:7F:75:8F:03:3B:21:1E:C5:4D:8B:CF -CKA_CLASS CK_OBJECT_CLASS CKO_CERTIFICATE -CKA_TOKEN CK_BBOOL CK_TRUE -CKA_PRIVATE CK_BBOOL CK_FALSE -CKA_MODIFIABLE CK_BBOOL CK_FALSE -CKA_LABEL UTF8 "AddTrust Qualified Certificates Root" -CKA_CERTIFICATE_TYPE CK_CERTIFICATE_TYPE CKC_X_509 -CKA_SUBJECT MULTILINE_OCTAL -\060\147\061\013\060\011\006\003\125\004\006\023\002\123\105\061 -\024\060\022\006\003\125\004\012\023\013\101\144\144\124\162\165 -\163\164\040\101\102\061\035\060\033\006\003\125\004\013\023\024 -\101\144\144\124\162\165\163\164\040\124\124\120\040\116\145\164 -\167\157\162\153\061\043\060\041\006\003\125\004\003\023\032\101 -\144\144\124\162\165\163\164\040\121\165\141\154\151\146\151\145 -\144\040\103\101\040\122\157\157\164 -END -CKA_ID UTF8 "0" -CKA_ISSUER MULTILINE_OCTAL -\060\147\061\013\060\011\006\003\125\004\006\023\002\123\105\061 -\024\060\022\006\003\125\004\012\023\013\101\144\144\124\162\165 -\163\164\040\101\102\061\035\060\033\006\003\125\004\013\023\024 -\101\144\144\124\162\165\163\164\040\124\124\120\040\116\145\164 -\167\157\162\153\061\043\060\041\006\003\125\004\003\023\032\101 -\144\144\124\162\165\163\164\040\121\165\141\154\151\146\151\145 -\144\040\103\101\040\122\157\157\164 -END -CKA_SERIAL_NUMBER MULTILINE_OCTAL -\002\001\001 -END -CKA_VALUE MULTILINE_OCTAL -\060\202\004\036\060\202\003\006\240\003\002\001\002\002\001\001 -\060\015\006\011\052\206\110\206\367\015\001\001\005\005\000\060 -\147\061\013\060\011\006\003\125\004\006\023\002\123\105\061\024 -\060\022\006\003\125\004\012\023\013\101\144\144\124\162\165\163 -\164\040\101\102\061\035\060\033\006\003\125\004\013\023\024\101 -\144\144\124\162\165\163\164\040\124\124\120\040\116\145\164\167 -\157\162\153\061\043\060\041\006\003\125\004\003\023\032\101\144 -\144\124\162\165\163\164\040\121\165\141\154\151\146\151\145\144 -\040\103\101\040\122\157\157\164\060\036\027\015\060\060\060\065 -\063\060\061\060\064\064\065\060\132\027\015\062\060\060\065\063 -\060\061\060\064\064\065\060\132\060\147\061\013\060\011\006\003 -\125\004\006\023\002\123\105\061\024\060\022\006\003\125\004\012 -\023\013\101\144\144\124\162\165\163\164\040\101\102\061\035\060 -\033\006\003\125\004\013\023\024\101\144\144\124\162\165\163\164 -\040\124\124\120\040\116\145\164\167\157\162\153\061\043\060\041 -\006\003\125\004\003\023\032\101\144\144\124\162\165\163\164\040 -\121\165\141\154\151\146\151\145\144\040\103\101\040\122\157\157 -\164\060\202\001\042\060\015\006\011\052\206\110\206\367\015\001 -\001\001\005\000\003\202\001\017\000\060\202\001\012\002\202\001 -\001\000\344\036\232\376\334\011\132\207\244\237\107\276\021\137 -\257\204\064\333\142\074\171\170\267\351\060\265\354\014\034\052 -\304\026\377\340\354\161\353\212\365\021\156\355\117\015\221\322 -\022\030\055\111\025\001\302\244\042\023\307\021\144\377\042\022 -\232\271\216\134\057\010\317\161\152\263\147\001\131\361\135\106 -\363\260\170\245\366\016\102\172\343\177\033\314\320\360\267\050 -\375\052\352\236\263\260\271\004\252\375\366\307\264\261\270\052 -\240\373\130\361\031\240\157\160\045\176\076\151\112\177\017\042 -\330\357\255\010\021\232\051\231\341\252\104\105\232\022\136\076 -\235\155\122\374\347\240\075\150\057\360\113\160\174\023\070\255 -\274\025\045\361\326\316\253\242\300\061\326\057\237\340\377\024 -\131\374\204\223\331\207\174\114\124\023\353\237\321\055\021\370 -\030\072\072\336\045\331\367\323\100\355\244\006\022\304\073\341 -\221\301\126\065\360\024\334\145\066\011\156\253\244\007\307\065 -\321\302\003\063\066\133\165\046\155\102\361\022\153\103\157\113 -\161\224\372\064\035\355\023\156\312\200\177\230\057\154\271\145 -\330\351\002\003\001\000\001\243\201\324\060\201\321\060\035\006 -\003\125\035\016\004\026\004\024\071\225\213\142\213\134\311\324 -\200\272\130\017\227\077\025\010\103\314\230\247\060\013\006\003 -\125\035\017\004\004\003\002\001\006\060\017\006\003\125\035\023 -\001\001\377\004\005\060\003\001\001\377\060\201\221\006\003\125 -\035\043\004\201\211\060\201\206\200\024\071\225\213\142\213\134 -\311\324\200\272\130\017\227\077\025\010\103\314\230\247\241\153 -\244\151\060\147\061\013\060\011\006\003\125\004\006\023\002\123 -\105\061\024\060\022\006\003\125\004\012\023\013\101\144\144\124 -\162\165\163\164\040\101\102\061\035\060\033\006\003\125\004\013 -\023\024\101\144\144\124\162\165\163\164\040\124\124\120\040\116 -\145\164\167\157\162\153\061\043\060\041\006\003\125\004\003\023 -\032\101\144\144\124\162\165\163\164\040\121\165\141\154\151\146 -\151\145\144\040\103\101\040\122\157\157\164\202\001\001\060\015 -\006\011\052\206\110\206\367\015\001\001\005\005\000\003\202\001 -\001\000\031\253\165\352\370\213\145\141\225\023\272\151\004\357 -\206\312\023\240\307\252\117\144\033\077\030\366\250\055\054\125 -\217\005\267\060\352\102\152\035\300\045\121\055\247\277\014\263 -\355\357\010\177\154\074\106\032\352\030\103\337\166\314\371\146 -\206\234\054\150\365\351\027\370\061\263\030\304\326\110\175\043 -\114\150\301\176\273\001\024\157\305\331\156\336\273\004\102\152 -\370\366\134\175\345\332\372\207\353\015\065\122\147\320\236\227 -\166\005\223\077\225\307\001\346\151\125\070\177\020\141\231\311 -\343\137\246\312\076\202\143\110\252\342\010\110\076\252\362\262 -\205\142\246\264\247\331\275\067\234\150\265\055\126\175\260\267 -\077\240\261\007\326\351\117\334\336\105\161\060\062\177\033\056 -\011\371\277\122\241\356\302\200\076\006\134\056\125\100\301\033 -\365\160\105\260\334\135\372\366\162\132\167\322\143\315\317\130 -\211\000\102\143\077\171\071\320\104\260\202\156\101\031\350\335 -\340\301\210\132\321\036\161\223\037\044\060\164\345\036\250\336 -\074\047\067\177\203\256\236\167\317\360\060\261\377\113\231\350 -\306\241 -END - -# Trust for Certificate "AddTrust Qualified Certificates Root" -# Issuer: CN=AddTrust Qualified CA Root,OU=AddTrust TTP Network,O=AddTrust AB,C=SE -# Serial Number: 1 (0x1) -# Subject: CN=AddTrust Qualified CA Root,OU=AddTrust TTP Network,O=AddTrust AB,C=SE -# Not Valid Before: Tue May 30 10:44:50 2000 -# Not Valid After : Sat May 30 10:44:50 2020 -# Fingerprint (MD5): 27:EC:39:47:CD:DA:5A:AF:E2:9A:01:65:21:A9:4C:BB -# Fingerprint (SHA1): 4D:23:78:EC:91:95:39:B5:00:7F:75:8F:03:3B:21:1E:C5:4D:8B:CF -CKA_CLASS CK_OBJECT_CLASS CKO_NSS_TRUST -CKA_TOKEN CK_BBOOL CK_TRUE -CKA_PRIVATE CK_BBOOL CK_FALSE -CKA_MODIFIABLE CK_BBOOL CK_FALSE -CKA_LABEL UTF8 "AddTrust Qualified Certificates Root" -CKA_CERT_SHA1_HASH MULTILINE_OCTAL -\115\043\170\354\221\225\071\265\000\177\165\217\003\073\041\036 -\305\115\213\317 -END -CKA_CERT_MD5_HASH MULTILINE_OCTAL -\047\354\071\107\315\332\132\257\342\232\001\145\041\251\114\273 -END -CKA_ISSUER MULTILINE_OCTAL -\060\147\061\013\060\011\006\003\125\004\006\023\002\123\105\061 -\024\060\022\006\003\125\004\012\023\013\101\144\144\124\162\165 -\163\164\040\101\102\061\035\060\033\006\003\125\004\013\023\024 -\101\144\144\124\162\165\163\164\040\124\124\120\040\116\145\164 -\167\157\162\153\061\043\060\041\006\003\125\004\003\023\032\101 -\144\144\124\162\165\163\164\040\121\165\141\154\151\146\151\145 -\144\040\103\101\040\122\157\157\164 -END -CKA_SERIAL_NUMBER MULTILINE_OCTAL -\002\001\001 -END -CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_TRUSTED_DELEGATOR -CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_TRUSTED_DELEGATOR -CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_TRUSTED_DELEGATOR +CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_MUST_VERIFY_TRUST CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE # @@ -1961,6 +1681,7 @@ CKA_VALUE MULTILINE_OCTAL \322\367\127\160\066\263\277\374\050\257\161\045\205\133\023\376 \036\177\132\264\074 END +CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE # Trust for Certificate "Entrust Root Certification Authority" # Issuer: CN=Entrust Root Certification Authority,OU="(c) 2006 Entrust, Inc.",OU=www.entrust.net/CPS is incorporated by reference,O="Entrust, Inc.",C=US @@ -2094,6 +1815,7 @@ CKA_VALUE MULTILINE_OCTAL \331\027\264\321\343\121\053\136\165\350\325\320\334\117\064\355 \302\005\146\200\241\313\346\063 END +CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE # Trust for Certificate "GeoTrust Global CA" # Issuer: CN=GeoTrust Global CA,O=GeoTrust Inc.,C=US @@ -2127,134 +1849,7 @@ CKA_SERIAL_NUMBER MULTILINE_OCTAL END CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_TRUSTED_DELEGATOR CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_TRUSTED_DELEGATOR -CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_TRUSTED_DELEGATOR -CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE - -# -# Certificate "GeoTrust Global CA 2" -# -# Issuer: CN=GeoTrust Global CA 2,O=GeoTrust Inc.,C=US -# Serial Number: 1 (0x1) -# Subject: CN=GeoTrust Global CA 2,O=GeoTrust Inc.,C=US -# Not Valid Before: Thu Mar 04 05:00:00 2004 -# Not Valid After : Mon Mar 04 05:00:00 2019 -# Fingerprint (MD5): 0E:40:A7:6C:DE:03:5D:8F:D1:0F:E4:D1:8D:F9:6C:A9 -# Fingerprint (SHA1): A9:E9:78:08:14:37:58:88:F2:05:19:B0:6D:2B:0D:2B:60:16:90:7D -CKA_CLASS CK_OBJECT_CLASS CKO_CERTIFICATE -CKA_TOKEN CK_BBOOL CK_TRUE -CKA_PRIVATE CK_BBOOL CK_FALSE -CKA_MODIFIABLE CK_BBOOL CK_FALSE -CKA_LABEL UTF8 "GeoTrust Global CA 2" -CKA_CERTIFICATE_TYPE CK_CERTIFICATE_TYPE CKC_X_509 -CKA_SUBJECT MULTILINE_OCTAL -\060\104\061\013\060\011\006\003\125\004\006\023\002\125\123\061 -\026\060\024\006\003\125\004\012\023\015\107\145\157\124\162\165 -\163\164\040\111\156\143\056\061\035\060\033\006\003\125\004\003 -\023\024\107\145\157\124\162\165\163\164\040\107\154\157\142\141 -\154\040\103\101\040\062 -END -CKA_ID UTF8 "0" -CKA_ISSUER MULTILINE_OCTAL -\060\104\061\013\060\011\006\003\125\004\006\023\002\125\123\061 -\026\060\024\006\003\125\004\012\023\015\107\145\157\124\162\165 -\163\164\040\111\156\143\056\061\035\060\033\006\003\125\004\003 -\023\024\107\145\157\124\162\165\163\164\040\107\154\157\142\141 -\154\040\103\101\040\062 -END -CKA_SERIAL_NUMBER MULTILINE_OCTAL -\002\001\001 -END -CKA_VALUE MULTILINE_OCTAL -\060\202\003\146\060\202\002\116\240\003\002\001\002\002\001\001 -\060\015\006\011\052\206\110\206\367\015\001\001\005\005\000\060 -\104\061\013\060\011\006\003\125\004\006\023\002\125\123\061\026 -\060\024\006\003\125\004\012\023\015\107\145\157\124\162\165\163 -\164\040\111\156\143\056\061\035\060\033\006\003\125\004\003\023 -\024\107\145\157\124\162\165\163\164\040\107\154\157\142\141\154 -\040\103\101\040\062\060\036\027\015\060\064\060\063\060\064\060 -\065\060\060\060\060\132\027\015\061\071\060\063\060\064\060\065 -\060\060\060\060\132\060\104\061\013\060\011\006\003\125\004\006 -\023\002\125\123\061\026\060\024\006\003\125\004\012\023\015\107 -\145\157\124\162\165\163\164\040\111\156\143\056\061\035\060\033 -\006\003\125\004\003\023\024\107\145\157\124\162\165\163\164\040 -\107\154\157\142\141\154\040\103\101\040\062\060\202\001\042\060 -\015\006\011\052\206\110\206\367\015\001\001\001\005\000\003\202 -\001\017\000\060\202\001\012\002\202\001\001\000\357\074\115\100 -\075\020\337\073\123\000\341\147\376\224\140\025\076\205\210\361 -\211\015\220\310\050\043\231\005\350\053\040\235\306\363\140\106 -\330\301\262\325\214\061\331\334\040\171\044\201\277\065\062\374 -\143\151\333\261\052\153\356\041\130\362\010\351\170\313\157\313 -\374\026\122\310\221\304\377\075\163\336\261\076\247\302\175\146 -\301\365\176\122\044\032\342\325\147\221\320\202\020\327\170\113 -\117\053\102\071\275\144\055\100\240\260\020\323\070\110\106\210 -\241\014\273\072\063\052\142\230\373\000\235\023\131\177\157\073 -\162\252\356\246\017\206\371\005\141\352\147\177\014\067\226\213 -\346\151\026\107\021\302\047\131\003\263\246\140\302\041\100\126 -\372\240\307\175\072\023\343\354\127\307\263\326\256\235\211\200 -\367\001\347\054\366\226\053\023\015\171\054\331\300\344\206\173 -\113\214\014\162\202\212\373\027\315\000\154\072\023\074\260\204 -\207\113\026\172\051\262\117\333\035\324\013\363\146\067\275\330 -\366\127\273\136\044\172\270\074\213\271\372\222\032\032\204\236 -\330\164\217\252\033\177\136\364\376\105\042\041\002\003\001\000 -\001\243\143\060\141\060\017\006\003\125\035\023\001\001\377\004 -\005\060\003\001\001\377\060\035\006\003\125\035\016\004\026\004 -\024\161\070\066\362\002\061\123\107\053\156\272\145\106\251\020 -\025\130\040\005\011\060\037\006\003\125\035\043\004\030\060\026 -\200\024\161\070\066\362\002\061\123\107\053\156\272\145\106\251 -\020\025\130\040\005\011\060\016\006\003\125\035\017\001\001\377 -\004\004\003\002\001\206\060\015\006\011\052\206\110\206\367\015 -\001\001\005\005\000\003\202\001\001\000\003\367\265\053\253\135 -\020\374\173\262\262\136\254\233\016\176\123\170\131\076\102\004 -\376\165\243\255\254\201\116\327\002\213\136\304\055\310\122\166 -\307\054\037\374\201\062\230\321\113\306\222\223\063\065\061\057 -\374\330\035\104\335\340\201\177\235\351\213\341\144\221\142\013 -\071\010\214\254\164\235\131\331\172\131\122\227\021\271\026\173 -\157\105\323\226\331\061\175\002\066\017\234\073\156\317\054\015 -\003\106\105\353\240\364\177\110\104\306\010\100\314\336\033\160 -\265\051\255\272\213\073\064\145\165\033\161\041\035\054\024\012 -\260\226\225\270\326\352\362\145\373\051\272\117\352\221\223\164 -\151\266\362\377\341\032\320\014\321\166\205\313\212\045\275\227 -\136\054\157\025\231\046\347\266\051\377\042\354\311\002\307\126 -\000\315\111\271\263\154\173\123\004\032\342\250\311\252\022\005 -\043\302\316\347\273\004\002\314\300\107\242\344\304\051\057\133 -\105\127\211\121\356\074\353\122\010\377\007\065\036\237\065\152 -\107\112\126\230\321\132\205\037\214\365\042\277\253\316\203\363 -\342\042\051\256\175\203\100\250\272\154 -END - -# Trust for Certificate "GeoTrust Global CA 2" -# Issuer: CN=GeoTrust Global CA 2,O=GeoTrust Inc.,C=US -# Serial Number: 1 (0x1) -# Subject: CN=GeoTrust Global CA 2,O=GeoTrust Inc.,C=US -# Not Valid Before: Thu Mar 04 05:00:00 2004 -# Not Valid After : Mon Mar 04 05:00:00 2019 -# Fingerprint (MD5): 0E:40:A7:6C:DE:03:5D:8F:D1:0F:E4:D1:8D:F9:6C:A9 -# Fingerprint (SHA1): A9:E9:78:08:14:37:58:88:F2:05:19:B0:6D:2B:0D:2B:60:16:90:7D -CKA_CLASS CK_OBJECT_CLASS CKO_NSS_TRUST -CKA_TOKEN CK_BBOOL CK_TRUE -CKA_PRIVATE CK_BBOOL CK_FALSE -CKA_MODIFIABLE CK_BBOOL CK_FALSE -CKA_LABEL UTF8 "GeoTrust Global CA 2" -CKA_CERT_SHA1_HASH MULTILINE_OCTAL -\251\351\170\010\024\067\130\210\362\005\031\260\155\053\015\053 -\140\026\220\175 -END -CKA_CERT_MD5_HASH MULTILINE_OCTAL -\016\100\247\154\336\003\135\217\321\017\344\321\215\371\154\251 -END -CKA_ISSUER MULTILINE_OCTAL -\060\104\061\013\060\011\006\003\125\004\006\023\002\125\123\061 -\026\060\024\006\003\125\004\012\023\015\107\145\157\124\162\165 -\163\164\040\111\156\143\056\061\035\060\033\006\003\125\004\003 -\023\024\107\145\157\124\162\165\163\164\040\107\154\157\142\141 -\154\040\103\101\040\062 -END -CKA_SERIAL_NUMBER MULTILINE_OCTAL -\002\001\001 -END -CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_TRUSTED_DELEGATOR -CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_TRUSTED_DELEGATOR -CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_TRUSTED_DELEGATOR +CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_MUST_VERIFY_TRUST CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE # @@ -2380,6 +1975,7 @@ CKA_VALUE MULTILINE_OCTAL \247\110\301\134\220\017\313\310\077\372\346\062\341\215\033\157 \244\346\216\330\371\051\110\212\316\163\376\054 END +CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE # Trust for Certificate "GeoTrust Universal CA" # Issuer: CN=GeoTrust Universal CA,O=GeoTrust Inc.,C=US @@ -2413,7 +2009,7 @@ CKA_SERIAL_NUMBER MULTILINE_OCTAL END CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_TRUSTED_DELEGATOR CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_TRUSTED_DELEGATOR -CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_TRUSTED_DELEGATOR +CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_MUST_VERIFY_TRUST CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE # @@ -2539,6 +2135,7 @@ CKA_VALUE MULTILINE_OCTAL \370\351\242\054\114\246\321\046\137\176\257\132\114\332\037\246 \362\034\054\176\256\002\026\322\126\320\057\127\123\107\350\222 END +CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE # Trust for Certificate "GeoTrust Universal CA 2" # Issuer: CN=GeoTrust Universal CA 2,O=GeoTrust Inc.,C=US @@ -2572,7 +2169,7 @@ CKA_SERIAL_NUMBER MULTILINE_OCTAL END CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_TRUSTED_DELEGATOR CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_TRUSTED_DELEGATOR -CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_TRUSTED_DELEGATOR +CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_MUST_VERIFY_TRUST CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE # @@ -2675,6 +2272,7 @@ CKA_VALUE MULTILINE_OCTAL \337\337\063\234\317\343\255\256\216\324\216\346\117\121\257\026 \222\340\134\366\007\017 END +CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE # Trust for Certificate "Visa eCommerce Root" # Issuer: CN=Visa eCommerce Root,OU=Visa International Service Association,O=VISA,C=US @@ -2711,7 +2309,7 @@ CKA_SERIAL_NUMBER MULTILINE_OCTAL END CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_TRUSTED_DELEGATOR CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_TRUSTED_DELEGATOR -CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_TRUSTED_DELEGATOR +CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_MUST_VERIFY_TRUST CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE # @@ -2797,6 +2395,7 @@ CKA_VALUE MULTILINE_OCTAL \355\200\316\211\100\110\152\016\065\312\051\146\025\041\224\054 \350\140\052\233\205\112\100\363\153\212\044\354\006\026\054\163 END +CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE # Trust for Certificate "Certum Root CA" # Issuer: CN=Certum CA,O=Unizeto Sp. z o.o.,C=PL @@ -2829,7 +2428,7 @@ CKA_SERIAL_NUMBER MULTILINE_OCTAL END CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_TRUSTED_DELEGATOR CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_TRUSTED_DELEGATOR -CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_TRUSTED_DELEGATOR +CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_MUST_VERIFY_TRUST CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE # @@ -2942,6 +2541,7 @@ CKA_VALUE MULTILINE_OCTAL \262\143\342\365\142\054\202\324\152\000\101\120\361\071\203\237 \225\351\066\226\230\156 END +CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE # Trust for Certificate "Comodo AAA Services root" # Issuer: CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB @@ -2978,310 +2578,7 @@ CKA_SERIAL_NUMBER MULTILINE_OCTAL END CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_TRUSTED_DELEGATOR CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_TRUSTED_DELEGATOR -CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_TRUSTED_DELEGATOR -CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE - -# -# Certificate "Comodo Secure Services root" -# -# Issuer: CN=Secure Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB -# Serial Number: 1 (0x1) -# Subject: CN=Secure Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB -# Not Valid Before: Thu Jan 01 00:00:00 2004 -# Not Valid After : Sun Dec 31 23:59:59 2028 -# Fingerprint (MD5): D3:D9:BD:AE:9F:AC:67:24:B3:C8:1B:52:E1:B9:A9:BD -# Fingerprint (SHA1): 4A:65:D5:F4:1D:EF:39:B8:B8:90:4A:4A:D3:64:81:33:CF:C7:A1:D1 -CKA_CLASS CK_OBJECT_CLASS CKO_CERTIFICATE -CKA_TOKEN CK_BBOOL CK_TRUE -CKA_PRIVATE CK_BBOOL CK_FALSE -CKA_MODIFIABLE CK_BBOOL CK_FALSE -CKA_LABEL UTF8 "Comodo Secure Services root" -CKA_CERTIFICATE_TYPE CK_CERTIFICATE_TYPE CKC_X_509 -CKA_SUBJECT MULTILINE_OCTAL -\060\176\061\013\060\011\006\003\125\004\006\023\002\107\102\061 -\033\060\031\006\003\125\004\010\014\022\107\162\145\141\164\145 -\162\040\115\141\156\143\150\145\163\164\145\162\061\020\060\016 -\006\003\125\004\007\014\007\123\141\154\146\157\162\144\061\032 -\060\030\006\003\125\004\012\014\021\103\157\155\157\144\157\040 -\103\101\040\114\151\155\151\164\145\144\061\044\060\042\006\003 -\125\004\003\014\033\123\145\143\165\162\145\040\103\145\162\164 -\151\146\151\143\141\164\145\040\123\145\162\166\151\143\145\163 -END -CKA_ID UTF8 "0" -CKA_ISSUER MULTILINE_OCTAL -\060\176\061\013\060\011\006\003\125\004\006\023\002\107\102\061 -\033\060\031\006\003\125\004\010\014\022\107\162\145\141\164\145 -\162\040\115\141\156\143\150\145\163\164\145\162\061\020\060\016 -\006\003\125\004\007\014\007\123\141\154\146\157\162\144\061\032 -\060\030\006\003\125\004\012\014\021\103\157\155\157\144\157\040 -\103\101\040\114\151\155\151\164\145\144\061\044\060\042\006\003 -\125\004\003\014\033\123\145\143\165\162\145\040\103\145\162\164 -\151\146\151\143\141\164\145\040\123\145\162\166\151\143\145\163 -END -CKA_SERIAL_NUMBER MULTILINE_OCTAL -\002\001\001 -END -CKA_VALUE MULTILINE_OCTAL -\060\202\004\077\060\202\003\047\240\003\002\001\002\002\001\001 -\060\015\006\011\052\206\110\206\367\015\001\001\005\005\000\060 -\176\061\013\060\011\006\003\125\004\006\023\002\107\102\061\033 -\060\031\006\003\125\004\010\014\022\107\162\145\141\164\145\162 -\040\115\141\156\143\150\145\163\164\145\162\061\020\060\016\006 -\003\125\004\007\014\007\123\141\154\146\157\162\144\061\032\060 -\030\006\003\125\004\012\014\021\103\157\155\157\144\157\040\103 -\101\040\114\151\155\151\164\145\144\061\044\060\042\006\003\125 -\004\003\014\033\123\145\143\165\162\145\040\103\145\162\164\151 -\146\151\143\141\164\145\040\123\145\162\166\151\143\145\163\060 -\036\027\015\060\064\060\061\060\061\060\060\060\060\060\060\132 -\027\015\062\070\061\062\063\061\062\063\065\071\065\071\132\060 -\176\061\013\060\011\006\003\125\004\006\023\002\107\102\061\033 -\060\031\006\003\125\004\010\014\022\107\162\145\141\164\145\162 -\040\115\141\156\143\150\145\163\164\145\162\061\020\060\016\006 -\003\125\004\007\014\007\123\141\154\146\157\162\144\061\032\060 -\030\006\003\125\004\012\014\021\103\157\155\157\144\157\040\103 -\101\040\114\151\155\151\164\145\144\061\044\060\042\006\003\125 -\004\003\014\033\123\145\143\165\162\145\040\103\145\162\164\151 -\146\151\143\141\164\145\040\123\145\162\166\151\143\145\163\060 -\202\001\042\060\015\006\011\052\206\110\206\367\015\001\001\001 -\005\000\003\202\001\017\000\060\202\001\012\002\202\001\001\000 -\300\161\063\202\212\320\160\353\163\207\202\100\325\035\344\313 -\311\016\102\220\371\336\064\271\241\272\021\364\045\205\363\314 -\162\155\362\173\227\153\263\007\361\167\044\221\137\045\217\366 -\164\075\344\200\302\370\074\015\363\277\100\352\367\310\122\321 -\162\157\357\310\253\101\270\156\056\027\052\225\151\014\315\322 -\036\224\173\055\224\035\252\165\327\263\230\313\254\274\144\123 -\100\274\217\254\254\066\313\134\255\273\335\340\224\027\354\321 -\134\320\277\357\245\225\311\220\305\260\254\373\033\103\337\172 -\010\135\267\270\362\100\033\053\047\236\120\316\136\145\202\210 -\214\136\323\116\014\172\352\010\221\266\066\252\053\102\373\352 -\302\243\071\345\333\046\070\255\213\012\356\031\143\307\034\044 -\337\003\170\332\346\352\301\107\032\013\013\106\011\335\002\374 -\336\313\207\137\327\060\143\150\241\256\334\062\241\272\276\376 -\104\253\150\266\245\027\025\375\275\325\247\247\232\344\104\063 -\351\210\216\374\355\121\353\223\161\116\255\001\347\104\216\253 -\055\313\250\376\001\111\110\360\300\335\307\150\330\222\376\075 -\002\003\001\000\001\243\201\307\060\201\304\060\035\006\003\125 -\035\016\004\026\004\024\074\330\223\210\302\300\202\011\314\001 -\231\006\223\040\351\236\160\011\143\117\060\016\006\003\125\035 -\017\001\001\377\004\004\003\002\001\006\060\017\006\003\125\035 -\023\001\001\377\004\005\060\003\001\001\377\060\201\201\006\003 -\125\035\037\004\172\060\170\060\073\240\071\240\067\206\065\150 -\164\164\160\072\057\057\143\162\154\056\143\157\155\157\144\157 -\143\141\056\143\157\155\057\123\145\143\165\162\145\103\145\162 -\164\151\146\151\143\141\164\145\123\145\162\166\151\143\145\163 -\056\143\162\154\060\071\240\067\240\065\206\063\150\164\164\160 -\072\057\057\143\162\154\056\143\157\155\157\144\157\056\156\145 -\164\057\123\145\143\165\162\145\103\145\162\164\151\146\151\143 -\141\164\145\123\145\162\166\151\143\145\163\056\143\162\154\060 -\015\006\011\052\206\110\206\367\015\001\001\005\005\000\003\202 -\001\001\000\207\001\155\043\035\176\133\027\175\301\141\062\317 -\217\347\363\212\224\131\146\340\236\050\250\136\323\267\364\064 -\346\252\071\262\227\026\305\202\157\062\244\351\214\347\257\375 -\357\302\350\271\113\252\243\364\346\332\215\145\041\373\272\200 -\353\046\050\205\032\376\071\214\336\133\004\004\264\124\371\243 -\147\236\101\372\011\122\314\005\110\250\311\077\041\004\036\316 -\110\153\374\205\350\302\173\257\177\267\314\370\137\072\375\065 -\306\015\357\227\334\114\253\021\341\153\313\061\321\154\373\110 -\200\253\334\234\067\270\041\024\113\015\161\075\354\203\063\156 -\321\156\062\026\354\230\307\026\213\131\246\064\253\005\127\055 -\223\367\252\023\313\322\023\342\267\056\073\315\153\120\027\011 -\150\076\265\046\127\356\266\340\266\335\271\051\200\171\175\217 -\243\360\244\050\244\025\304\205\364\047\324\153\277\345\134\344 -\145\002\166\124\264\343\067\146\044\323\031\141\310\122\020\345 -\213\067\232\271\251\371\035\277\352\231\222\141\226\377\001\315 -\241\137\015\274\161\274\016\254\013\035\107\105\035\301\354\174 -\354\375\051 -END - -# Trust for Certificate "Comodo Secure Services root" -# Issuer: CN=Secure Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB -# Serial Number: 1 (0x1) -# Subject: CN=Secure Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB -# Not Valid Before: Thu Jan 01 00:00:00 2004 -# Not Valid After : Sun Dec 31 23:59:59 2028 -# Fingerprint (MD5): D3:D9:BD:AE:9F:AC:67:24:B3:C8:1B:52:E1:B9:A9:BD -# Fingerprint (SHA1): 4A:65:D5:F4:1D:EF:39:B8:B8:90:4A:4A:D3:64:81:33:CF:C7:A1:D1 -CKA_CLASS CK_OBJECT_CLASS CKO_NSS_TRUST -CKA_TOKEN CK_BBOOL CK_TRUE -CKA_PRIVATE CK_BBOOL CK_FALSE -CKA_MODIFIABLE CK_BBOOL CK_FALSE -CKA_LABEL UTF8 "Comodo Secure Services root" -CKA_CERT_SHA1_HASH MULTILINE_OCTAL -\112\145\325\364\035\357\071\270\270\220\112\112\323\144\201\063 -\317\307\241\321 -END -CKA_CERT_MD5_HASH MULTILINE_OCTAL -\323\331\275\256\237\254\147\044\263\310\033\122\341\271\251\275 -END -CKA_ISSUER MULTILINE_OCTAL -\060\176\061\013\060\011\006\003\125\004\006\023\002\107\102\061 -\033\060\031\006\003\125\004\010\014\022\107\162\145\141\164\145 -\162\040\115\141\156\143\150\145\163\164\145\162\061\020\060\016 -\006\003\125\004\007\014\007\123\141\154\146\157\162\144\061\032 -\060\030\006\003\125\004\012\014\021\103\157\155\157\144\157\040 -\103\101\040\114\151\155\151\164\145\144\061\044\060\042\006\003 -\125\004\003\014\033\123\145\143\165\162\145\040\103\145\162\164 -\151\146\151\143\141\164\145\040\123\145\162\166\151\143\145\163 -END -CKA_SERIAL_NUMBER MULTILINE_OCTAL -\002\001\001 -END -CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_TRUSTED_DELEGATOR -CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_TRUSTED_DELEGATOR -CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_TRUSTED_DELEGATOR -CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE - -# -# Certificate "Comodo Trusted Services root" -# -# Issuer: CN=Trusted Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB -# Serial Number: 1 (0x1) -# Subject: CN=Trusted Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB -# Not Valid Before: Thu Jan 01 00:00:00 2004 -# Not Valid After : Sun Dec 31 23:59:59 2028 -# Fingerprint (MD5): 91:1B:3F:6E:CD:9E:AB:EE:07:FE:1F:71:D2:B3:61:27 -# Fingerprint (SHA1): E1:9F:E3:0E:8B:84:60:9E:80:9B:17:0D:72:A8:C5:BA:6E:14:09:BD -CKA_CLASS CK_OBJECT_CLASS CKO_CERTIFICATE -CKA_TOKEN CK_BBOOL CK_TRUE -CKA_PRIVATE CK_BBOOL CK_FALSE -CKA_MODIFIABLE CK_BBOOL CK_FALSE -CKA_LABEL UTF8 "Comodo Trusted Services root" -CKA_CERTIFICATE_TYPE CK_CERTIFICATE_TYPE CKC_X_509 -CKA_SUBJECT MULTILINE_OCTAL -\060\177\061\013\060\011\006\003\125\004\006\023\002\107\102\061 -\033\060\031\006\003\125\004\010\014\022\107\162\145\141\164\145 -\162\040\115\141\156\143\150\145\163\164\145\162\061\020\060\016 -\006\003\125\004\007\014\007\123\141\154\146\157\162\144\061\032 -\060\030\006\003\125\004\012\014\021\103\157\155\157\144\157\040 -\103\101\040\114\151\155\151\164\145\144\061\045\060\043\006\003 -\125\004\003\014\034\124\162\165\163\164\145\144\040\103\145\162 -\164\151\146\151\143\141\164\145\040\123\145\162\166\151\143\145 -\163 -END -CKA_ID UTF8 "0" -CKA_ISSUER MULTILINE_OCTAL -\060\177\061\013\060\011\006\003\125\004\006\023\002\107\102\061 -\033\060\031\006\003\125\004\010\014\022\107\162\145\141\164\145 -\162\040\115\141\156\143\150\145\163\164\145\162\061\020\060\016 -\006\003\125\004\007\014\007\123\141\154\146\157\162\144\061\032 -\060\030\006\003\125\004\012\014\021\103\157\155\157\144\157\040 -\103\101\040\114\151\155\151\164\145\144\061\045\060\043\006\003 -\125\004\003\014\034\124\162\165\163\164\145\144\040\103\145\162 -\164\151\146\151\143\141\164\145\040\123\145\162\166\151\143\145 -\163 -END -CKA_SERIAL_NUMBER MULTILINE_OCTAL -\002\001\001 -END -CKA_VALUE MULTILINE_OCTAL -\060\202\004\103\060\202\003\053\240\003\002\001\002\002\001\001 -\060\015\006\011\052\206\110\206\367\015\001\001\005\005\000\060 -\177\061\013\060\011\006\003\125\004\006\023\002\107\102\061\033 -\060\031\006\003\125\004\010\014\022\107\162\145\141\164\145\162 -\040\115\141\156\143\150\145\163\164\145\162\061\020\060\016\006 -\003\125\004\007\014\007\123\141\154\146\157\162\144\061\032\060 -\030\006\003\125\004\012\014\021\103\157\155\157\144\157\040\103 -\101\040\114\151\155\151\164\145\144\061\045\060\043\006\003\125 -\004\003\014\034\124\162\165\163\164\145\144\040\103\145\162\164 -\151\146\151\143\141\164\145\040\123\145\162\166\151\143\145\163 -\060\036\027\015\060\064\060\061\060\061\060\060\060\060\060\060 -\132\027\015\062\070\061\062\063\061\062\063\065\071\065\071\132 -\060\177\061\013\060\011\006\003\125\004\006\023\002\107\102\061 -\033\060\031\006\003\125\004\010\014\022\107\162\145\141\164\145 -\162\040\115\141\156\143\150\145\163\164\145\162\061\020\060\016 -\006\003\125\004\007\014\007\123\141\154\146\157\162\144\061\032 -\060\030\006\003\125\004\012\014\021\103\157\155\157\144\157\040 -\103\101\040\114\151\155\151\164\145\144\061\045\060\043\006\003 -\125\004\003\014\034\124\162\165\163\164\145\144\040\103\145\162 -\164\151\146\151\143\141\164\145\040\123\145\162\166\151\143\145 -\163\060\202\001\042\060\015\006\011\052\206\110\206\367\015\001 -\001\001\005\000\003\202\001\017\000\060\202\001\012\002\202\001 -\001\000\337\161\157\066\130\123\132\362\066\124\127\200\304\164 -\010\040\355\030\177\052\035\346\065\232\036\045\254\234\345\226 -\176\162\122\240\025\102\333\131\335\144\172\032\320\270\173\335 -\071\025\274\125\110\304\355\072\000\352\061\021\272\362\161\164 -\032\147\270\317\063\314\250\061\257\243\343\327\177\277\063\055 -\114\152\074\354\213\303\222\322\123\167\044\164\234\007\156\160 -\374\275\013\133\166\272\137\362\377\327\067\113\112\140\170\367 -\360\372\312\160\264\352\131\252\243\316\110\057\251\303\262\013 -\176\027\162\026\014\246\007\014\033\070\317\311\142\267\077\240 -\223\245\207\101\362\267\160\100\167\330\276\024\174\343\250\300 -\172\216\351\143\152\321\017\232\306\322\364\213\072\024\004\126 -\324\355\270\314\156\365\373\342\054\130\275\177\117\153\053\367 -\140\044\130\044\316\046\357\064\221\072\325\343\201\320\262\360 -\004\002\327\133\267\076\222\254\153\022\212\371\344\005\260\073 -\221\111\134\262\353\123\352\370\237\107\206\356\277\225\300\300 -\006\237\322\133\136\021\033\364\307\004\065\051\322\125\134\344 -\355\353\002\003\001\000\001\243\201\311\060\201\306\060\035\006 -\003\125\035\016\004\026\004\024\305\173\130\275\355\332\045\151 -\322\367\131\026\250\263\062\300\173\047\133\364\060\016\006\003 -\125\035\017\001\001\377\004\004\003\002\001\006\060\017\006\003 -\125\035\023\001\001\377\004\005\060\003\001\001\377\060\201\203 -\006\003\125\035\037\004\174\060\172\060\074\240\072\240\070\206 -\066\150\164\164\160\072\057\057\143\162\154\056\143\157\155\157 -\144\157\143\141\056\143\157\155\057\124\162\165\163\164\145\144 -\103\145\162\164\151\146\151\143\141\164\145\123\145\162\166\151 -\143\145\163\056\143\162\154\060\072\240\070\240\066\206\064\150 -\164\164\160\072\057\057\143\162\154\056\143\157\155\157\144\157 -\056\156\145\164\057\124\162\165\163\164\145\144\103\145\162\164 -\151\146\151\143\141\164\145\123\145\162\166\151\143\145\163\056 -\143\162\154\060\015\006\011\052\206\110\206\367\015\001\001\005 -\005\000\003\202\001\001\000\310\223\201\073\211\264\257\270\204 -\022\114\215\322\360\333\160\272\127\206\025\064\020\271\057\177 -\036\260\250\211\140\241\212\302\167\014\120\112\233\000\213\330 -\213\364\101\342\320\203\212\112\034\024\006\260\243\150\005\160 -\061\060\247\123\233\016\351\112\240\130\151\147\016\256\235\366 -\245\054\101\277\074\006\153\344\131\314\155\020\361\226\157\037 -\337\364\004\002\244\237\105\076\310\330\372\066\106\104\120\077 -\202\227\221\037\050\333\030\021\214\052\344\145\203\127\022\022 -\214\027\077\224\066\376\135\260\300\004\167\023\270\364\025\325 -\077\070\314\224\072\125\320\254\230\365\272\000\137\340\206\031 -\201\170\057\050\300\176\323\314\102\012\365\256\120\240\321\076 -\306\241\161\354\077\240\040\214\146\072\211\264\216\324\330\261 -\115\045\107\356\057\210\310\265\341\005\105\300\276\024\161\336 -\172\375\216\173\175\115\010\226\245\022\163\360\055\312\067\047 -\164\022\047\114\313\266\227\351\331\256\010\155\132\071\100\335 -\005\107\165\152\132\041\263\243\030\317\116\367\056\127\267\230 -\160\136\310\304\170\260\142 -END - -# Trust for Certificate "Comodo Trusted Services root" -# Issuer: CN=Trusted Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB -# Serial Number: 1 (0x1) -# Subject: CN=Trusted Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB -# Not Valid Before: Thu Jan 01 00:00:00 2004 -# Not Valid After : Sun Dec 31 23:59:59 2028 -# Fingerprint (MD5): 91:1B:3F:6E:CD:9E:AB:EE:07:FE:1F:71:D2:B3:61:27 -# Fingerprint (SHA1): E1:9F:E3:0E:8B:84:60:9E:80:9B:17:0D:72:A8:C5:BA:6E:14:09:BD -CKA_CLASS CK_OBJECT_CLASS CKO_NSS_TRUST -CKA_TOKEN CK_BBOOL CK_TRUE -CKA_PRIVATE CK_BBOOL CK_FALSE -CKA_MODIFIABLE CK_BBOOL CK_FALSE -CKA_LABEL UTF8 "Comodo Trusted Services root" -CKA_CERT_SHA1_HASH MULTILINE_OCTAL -\341\237\343\016\213\204\140\236\200\233\027\015\162\250\305\272 -\156\024\011\275 -END -CKA_CERT_MD5_HASH MULTILINE_OCTAL -\221\033\077\156\315\236\253\356\007\376\037\161\322\263\141\047 -END -CKA_ISSUER MULTILINE_OCTAL -\060\177\061\013\060\011\006\003\125\004\006\023\002\107\102\061 -\033\060\031\006\003\125\004\010\014\022\107\162\145\141\164\145 -\162\040\115\141\156\143\150\145\163\164\145\162\061\020\060\016 -\006\003\125\004\007\014\007\123\141\154\146\157\162\144\061\032 -\060\030\006\003\125\004\012\014\021\103\157\155\157\144\157\040 -\103\101\040\114\151\155\151\164\145\144\061\045\060\043\006\003 -\125\004\003\014\034\124\162\165\163\164\145\144\040\103\145\162 -\164\151\146\151\143\141\164\145\040\123\145\162\166\151\143\145 -\163 -END -CKA_SERIAL_NUMBER MULTILINE_OCTAL -\002\001\001 -END -CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_TRUSTED_DELEGATOR -CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_TRUSTED_DELEGATOR -CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_TRUSTED_DELEGATOR +CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_MUST_VERIFY_TRUST CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE # @@ -3422,6 +2719,7 @@ CKA_VALUE MULTILINE_OCTAL \207\051\317\362\211\115\324\354\305\342\346\172\320\066\043\212 \112\164\066\371 END +CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE # Trust for Certificate "QuoVadis Root CA" # Issuer: CN=QuoVadis Root Certification Authority,OU=Root Certification Authority,O=QuoVadis Limited,C=BM @@ -3459,7 +2757,7 @@ CKA_SERIAL_NUMBER MULTILINE_OCTAL END CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_TRUSTED_DELEGATOR CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_TRUSTED_DELEGATOR -CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_TRUSTED_DELEGATOR +CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_MUST_VERIFY_TRUST CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE # @@ -3590,6 +2888,7 @@ CKA_VALUE MULTILINE_OCTAL \361\343\261\357\337\221\217\124\052\013\045\301\046\031\304\122 \020\005\145\325\202\020\352\302\061\315\056 END +CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE # Trust for Certificate "QuoVadis Root CA 2" # Issuer: CN=QuoVadis Root CA 2,O=QuoVadis Limited,C=BM @@ -3623,7 +2922,7 @@ CKA_SERIAL_NUMBER MULTILINE_OCTAL END CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_TRUSTED_DELEGATOR CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_TRUSTED_DELEGATOR -CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_TRUSTED_DELEGATOR +CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_MUST_VERIFY_TRUST CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE # @@ -3769,6 +3068,7 @@ CKA_VALUE MULTILINE_OCTAL \341\045\141\063\262\131\033\342\156\327\067\127\266\015\251\022 \332 END +CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE # Trust for Certificate "QuoVadis Root CA 3" # Issuer: CN=QuoVadis Root CA 3,O=QuoVadis Limited,C=BM @@ -3802,7 +3102,7 @@ CKA_SERIAL_NUMBER MULTILINE_OCTAL END CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_TRUSTED_DELEGATOR CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_TRUSTED_DELEGATOR -CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_TRUSTED_DELEGATOR +CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_MUST_VERIFY_TRUST CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE # @@ -3897,6 +3197,7 @@ CKA_VALUE MULTILINE_OCTAL \214\154\041\314\164\102\355\123\377\063\213\217\017\127\001\026 \057\317\246\356\311\160\042\024\275\375\276\154\013\003 END +CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE # Trust for Certificate "Security Communication Root CA" # Issuer: OU=Security Communication RootCA1,O=SECOM Trust.net,C=JP @@ -3931,7 +3232,7 @@ CKA_SERIAL_NUMBER MULTILINE_OCTAL END CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_TRUSTED_DELEGATOR CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_TRUSTED_DELEGATOR -CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_TRUSTED_DELEGATOR +CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_MUST_VERIFY_TRUST CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE # @@ -4019,6 +3320,7 @@ CKA_VALUE MULTILINE_OCTAL \072\216\013\252\062\156\333\374\117\045\237\331\062\307\226\132 \160\254\337\114 END +CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE # Trust for Certificate "Sonera Class 2 Root CA" # Issuer: CN=Sonera Class2 CA,O=Sonera,C=FI @@ -4180,6 +3482,7 @@ CKA_VALUE MULTILINE_OCTAL \370\320\216\362\363\306\256\050\133\247\360\363\066\027\374\303 \005\323\312\003\112\124 END +CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE # Trust for Certificate "UTN USERFirst Email Root CA" # Issuer: CN=UTN-USERFirst-Client Authentication and Email,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US @@ -4224,327 +3527,6 @@ CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_TRUSTED_DELEGATOR CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_MUST_VERIFY_TRUST CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE -# -# Certificate "UTN USERFirst Hardware Root CA" -# -# Issuer: CN=UTN-USERFirst-Hardware,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US -# Serial Number:44:be:0c:8b:50:00:24:b4:11:d3:36:2a:fe:65:0a:fd -# Subject: CN=UTN-USERFirst-Hardware,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US -# Not Valid Before: Fri Jul 09 18:10:42 1999 -# Not Valid After : Tue Jul 09 18:19:22 2019 -# Fingerprint (MD5): 4C:56:41:E5:0D:BB:2B:E8:CA:A3:ED:18:08:AD:43:39 -# Fingerprint (SHA1): 04:83:ED:33:99:AC:36:08:05:87:22:ED:BC:5E:46:00:E3:BE:F9:D7 -CKA_CLASS CK_OBJECT_CLASS CKO_CERTIFICATE -CKA_TOKEN CK_BBOOL CK_TRUE -CKA_PRIVATE CK_BBOOL CK_FALSE -CKA_MODIFIABLE CK_BBOOL CK_FALSE -CKA_LABEL UTF8 "UTN USERFirst Hardware Root CA" -CKA_CERTIFICATE_TYPE CK_CERTIFICATE_TYPE CKC_X_509 -CKA_SUBJECT MULTILINE_OCTAL -\060\201\227\061\013\060\011\006\003\125\004\006\023\002\125\123 -\061\013\060\011\006\003\125\004\010\023\002\125\124\061\027\060 -\025\006\003\125\004\007\023\016\123\141\154\164\040\114\141\153 -\145\040\103\151\164\171\061\036\060\034\006\003\125\004\012\023 -\025\124\150\145\040\125\123\105\122\124\122\125\123\124\040\116 -\145\164\167\157\162\153\061\041\060\037\006\003\125\004\013\023 -\030\150\164\164\160\072\057\057\167\167\167\056\165\163\145\162 -\164\162\165\163\164\056\143\157\155\061\037\060\035\006\003\125 -\004\003\023\026\125\124\116\055\125\123\105\122\106\151\162\163 -\164\055\110\141\162\144\167\141\162\145 -END -CKA_ID UTF8 "0" -CKA_ISSUER MULTILINE_OCTAL -\060\201\227\061\013\060\011\006\003\125\004\006\023\002\125\123 -\061\013\060\011\006\003\125\004\010\023\002\125\124\061\027\060 -\025\006\003\125\004\007\023\016\123\141\154\164\040\114\141\153 -\145\040\103\151\164\171\061\036\060\034\006\003\125\004\012\023 -\025\124\150\145\040\125\123\105\122\124\122\125\123\124\040\116 -\145\164\167\157\162\153\061\041\060\037\006\003\125\004\013\023 -\030\150\164\164\160\072\057\057\167\167\167\056\165\163\145\162 -\164\162\165\163\164\056\143\157\155\061\037\060\035\006\003\125 -\004\003\023\026\125\124\116\055\125\123\105\122\106\151\162\163 -\164\055\110\141\162\144\167\141\162\145 -END -CKA_SERIAL_NUMBER MULTILINE_OCTAL -\002\020\104\276\014\213\120\000\044\264\021\323\066\052\376\145 -\012\375 -END -CKA_VALUE MULTILINE_OCTAL -\060\202\004\164\060\202\003\134\240\003\002\001\002\002\020\104 -\276\014\213\120\000\044\264\021\323\066\052\376\145\012\375\060 -\015\006\011\052\206\110\206\367\015\001\001\005\005\000\060\201 -\227\061\013\060\011\006\003\125\004\006\023\002\125\123\061\013 -\060\011\006\003\125\004\010\023\002\125\124\061\027\060\025\006 -\003\125\004\007\023\016\123\141\154\164\040\114\141\153\145\040 -\103\151\164\171\061\036\060\034\006\003\125\004\012\023\025\124 -\150\145\040\125\123\105\122\124\122\125\123\124\040\116\145\164 -\167\157\162\153\061\041\060\037\006\003\125\004\013\023\030\150 -\164\164\160\072\057\057\167\167\167\056\165\163\145\162\164\162 -\165\163\164\056\143\157\155\061\037\060\035\006\003\125\004\003 -\023\026\125\124\116\055\125\123\105\122\106\151\162\163\164\055 -\110\141\162\144\167\141\162\145\060\036\027\015\071\071\060\067 -\060\071\061\070\061\060\064\062\132\027\015\061\071\060\067\060 -\071\061\070\061\071\062\062\132\060\201\227\061\013\060\011\006 -\003\125\004\006\023\002\125\123\061\013\060\011\006\003\125\004 -\010\023\002\125\124\061\027\060\025\006\003\125\004\007\023\016 -\123\141\154\164\040\114\141\153\145\040\103\151\164\171\061\036 -\060\034\006\003\125\004\012\023\025\124\150\145\040\125\123\105 -\122\124\122\125\123\124\040\116\145\164\167\157\162\153\061\041 -\060\037\006\003\125\004\013\023\030\150\164\164\160\072\057\057 -\167\167\167\056\165\163\145\162\164\162\165\163\164\056\143\157 -\155\061\037\060\035\006\003\125\004\003\023\026\125\124\116\055 -\125\123\105\122\106\151\162\163\164\055\110\141\162\144\167\141 -\162\145\060\202\001\042\060\015\006\011\052\206\110\206\367\015 -\001\001\001\005\000\003\202\001\017\000\060\202\001\012\002\202 -\001\001\000\261\367\303\070\077\264\250\177\317\071\202\121\147 -\320\155\237\322\377\130\363\347\237\053\354\015\211\124\231\271 -\070\231\026\367\340\041\171\110\302\273\141\164\022\226\035\074 -\152\162\325\074\020\147\072\071\355\053\023\315\146\353\225\011 -\063\244\154\227\261\350\306\354\301\165\171\234\106\136\215\253 -\320\152\375\271\052\125\027\020\124\263\031\360\232\366\361\261 -\135\266\247\155\373\340\161\027\153\242\210\373\000\337\376\032 -\061\167\014\232\001\172\261\062\343\053\001\007\070\156\303\245 -\136\043\274\105\233\173\120\301\311\060\217\333\345\053\172\323 -\133\373\063\100\036\240\325\230\027\274\213\207\303\211\323\135 -\240\216\262\252\252\366\216\151\210\006\305\372\211\041\363\010 -\235\151\056\011\063\233\051\015\106\017\214\314\111\064\260\151 -\121\275\371\006\315\150\255\146\114\274\076\254\141\275\012\210 -\016\310\337\075\356\174\004\114\235\012\136\153\221\326\356\307 -\355\050\215\253\115\207\211\163\320\156\244\320\036\026\213\024 -\341\166\104\003\177\143\254\344\315\111\234\305\222\364\253\062 -\241\110\133\002\003\001\000\001\243\201\271\060\201\266\060\013 -\006\003\125\035\017\004\004\003\002\001\306\060\017\006\003\125 -\035\023\001\001\377\004\005\060\003\001\001\377\060\035\006\003 -\125\035\016\004\026\004\024\241\162\137\046\033\050\230\103\225 -\135\007\067\325\205\226\235\113\322\303\105\060\104\006\003\125 -\035\037\004\075\060\073\060\071\240\067\240\065\206\063\150\164 -\164\160\072\057\057\143\162\154\056\165\163\145\162\164\162\165 -\163\164\056\143\157\155\057\125\124\116\055\125\123\105\122\106 -\151\162\163\164\055\110\141\162\144\167\141\162\145\056\143\162 -\154\060\061\006\003\125\035\045\004\052\060\050\006\010\053\006 -\001\005\005\007\003\001\006\010\053\006\001\005\005\007\003\005 -\006\010\053\006\001\005\005\007\003\006\006\010\053\006\001\005 -\005\007\003\007\060\015\006\011\052\206\110\206\367\015\001\001 -\005\005\000\003\202\001\001\000\107\031\017\336\164\306\231\227 -\257\374\255\050\136\165\216\353\055\147\356\116\173\053\327\014 -\377\366\336\313\125\242\012\341\114\124\145\223\140\153\237\022 -\234\255\136\203\054\353\132\256\300\344\055\364\000\143\035\270 -\300\154\362\317\111\273\115\223\157\006\246\012\042\262\111\142 -\010\116\377\310\310\024\262\210\026\135\347\001\344\022\225\345 -\105\064\263\213\151\275\317\264\205\217\165\121\236\175\072\070 -\072\024\110\022\306\373\247\073\032\215\015\202\100\007\350\004 -\010\220\241\211\313\031\120\337\312\034\001\274\035\004\031\173 -\020\166\227\073\356\220\220\312\304\016\037\026\156\165\357\063 -\370\323\157\133\036\226\343\340\164\167\164\173\212\242\156\055 -\335\166\326\071\060\202\360\253\234\122\362\052\307\257\111\136 -\176\307\150\345\202\201\310\152\047\371\047\210\052\325\130\120 -\225\037\360\073\034\127\273\175\024\071\142\053\232\311\224\222 -\052\243\042\014\377\211\046\175\137\043\053\107\327\025\035\251 -\152\236\121\015\052\121\236\201\371\324\073\136\160\022\177\020 -\062\234\036\273\235\370\146\250 -END - -# Trust for Certificate "UTN USERFirst Hardware Root CA" -# Issuer: CN=UTN-USERFirst-Hardware,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US -# Serial Number:44:be:0c:8b:50:00:24:b4:11:d3:36:2a:fe:65:0a:fd -# Subject: CN=UTN-USERFirst-Hardware,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US -# Not Valid Before: Fri Jul 09 18:10:42 1999 -# Not Valid After : Tue Jul 09 18:19:22 2019 -# Fingerprint (MD5): 4C:56:41:E5:0D:BB:2B:E8:CA:A3:ED:18:08:AD:43:39 -# Fingerprint (SHA1): 04:83:ED:33:99:AC:36:08:05:87:22:ED:BC:5E:46:00:E3:BE:F9:D7 -CKA_CLASS CK_OBJECT_CLASS CKO_NSS_TRUST -CKA_TOKEN CK_BBOOL CK_TRUE -CKA_PRIVATE CK_BBOOL CK_FALSE -CKA_MODIFIABLE CK_BBOOL CK_FALSE -CKA_LABEL UTF8 "UTN USERFirst Hardware Root CA" -CKA_CERT_SHA1_HASH MULTILINE_OCTAL -\004\203\355\063\231\254\066\010\005\207\042\355\274\136\106\000 -\343\276\371\327 -END -CKA_CERT_MD5_HASH MULTILINE_OCTAL -\114\126\101\345\015\273\053\350\312\243\355\030\010\255\103\071 -END -CKA_ISSUER MULTILINE_OCTAL -\060\201\227\061\013\060\011\006\003\125\004\006\023\002\125\123 -\061\013\060\011\006\003\125\004\010\023\002\125\124\061\027\060 -\025\006\003\125\004\007\023\016\123\141\154\164\040\114\141\153 -\145\040\103\151\164\171\061\036\060\034\006\003\125\004\012\023 -\025\124\150\145\040\125\123\105\122\124\122\125\123\124\040\116 -\145\164\167\157\162\153\061\041\060\037\006\003\125\004\013\023 -\030\150\164\164\160\072\057\057\167\167\167\056\165\163\145\162 -\164\162\165\163\164\056\143\157\155\061\037\060\035\006\003\125 -\004\003\023\026\125\124\116\055\125\123\105\122\106\151\162\163 -\164\055\110\141\162\144\167\141\162\145 -END -CKA_SERIAL_NUMBER MULTILINE_OCTAL -\002\020\104\276\014\213\120\000\044\264\021\323\066\052\376\145 -\012\375 -END -CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_TRUSTED_DELEGATOR -CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_MUST_VERIFY_TRUST -CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_MUST_VERIFY_TRUST -CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE - -# -# Certificate "UTN USERFirst Object Root CA" -# -# Issuer: CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US -# Serial Number:44:be:0c:8b:50:00:24:b4:11:d3:36:2d:e0:b3:5f:1b -# Subject: CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US -# Not Valid Before: Fri Jul 09 18:31:20 1999 -# Not Valid After : Tue Jul 09 18:40:36 2019 -# Fingerprint (MD5): A7:F2:E4:16:06:41:11:50:30:6B:9C:E3:B4:9C:B0:C9 -# Fingerprint (SHA1): E1:2D:FB:4B:41:D7:D9:C3:2B:30:51:4B:AC:1D:81:D8:38:5E:2D:46 -CKA_CLASS CK_OBJECT_CLASS CKO_CERTIFICATE -CKA_TOKEN CK_BBOOL CK_TRUE -CKA_PRIVATE CK_BBOOL CK_FALSE -CKA_MODIFIABLE CK_BBOOL CK_FALSE -CKA_LABEL UTF8 "UTN USERFirst Object Root CA" -CKA_CERTIFICATE_TYPE CK_CERTIFICATE_TYPE CKC_X_509 -CKA_SUBJECT MULTILINE_OCTAL -\060\201\225\061\013\060\011\006\003\125\004\006\023\002\125\123 -\061\013\060\011\006\003\125\004\010\023\002\125\124\061\027\060 -\025\006\003\125\004\007\023\016\123\141\154\164\040\114\141\153 -\145\040\103\151\164\171\061\036\060\034\006\003\125\004\012\023 -\025\124\150\145\040\125\123\105\122\124\122\125\123\124\040\116 -\145\164\167\157\162\153\061\041\060\037\006\003\125\004\013\023 -\030\150\164\164\160\072\057\057\167\167\167\056\165\163\145\162 -\164\162\165\163\164\056\143\157\155\061\035\060\033\006\003\125 -\004\003\023\024\125\124\116\055\125\123\105\122\106\151\162\163 -\164\055\117\142\152\145\143\164 -END -CKA_ID UTF8 "0" -CKA_ISSUER MULTILINE_OCTAL -\060\201\225\061\013\060\011\006\003\125\004\006\023\002\125\123 -\061\013\060\011\006\003\125\004\010\023\002\125\124\061\027\060 -\025\006\003\125\004\007\023\016\123\141\154\164\040\114\141\153 -\145\040\103\151\164\171\061\036\060\034\006\003\125\004\012\023 -\025\124\150\145\040\125\123\105\122\124\122\125\123\124\040\116 -\145\164\167\157\162\153\061\041\060\037\006\003\125\004\013\023 -\030\150\164\164\160\072\057\057\167\167\167\056\165\163\145\162 -\164\162\165\163\164\056\143\157\155\061\035\060\033\006\003\125 -\004\003\023\024\125\124\116\055\125\123\105\122\106\151\162\163 -\164\055\117\142\152\145\143\164 -END -CKA_SERIAL_NUMBER MULTILINE_OCTAL -\002\020\104\276\014\213\120\000\044\264\021\323\066\055\340\263 -\137\033 -END -CKA_VALUE MULTILINE_OCTAL -\060\202\004\146\060\202\003\116\240\003\002\001\002\002\020\104 -\276\014\213\120\000\044\264\021\323\066\055\340\263\137\033\060 -\015\006\011\052\206\110\206\367\015\001\001\005\005\000\060\201 -\225\061\013\060\011\006\003\125\004\006\023\002\125\123\061\013 -\060\011\006\003\125\004\010\023\002\125\124\061\027\060\025\006 -\003\125\004\007\023\016\123\141\154\164\040\114\141\153\145\040 -\103\151\164\171\061\036\060\034\006\003\125\004\012\023\025\124 -\150\145\040\125\123\105\122\124\122\125\123\124\040\116\145\164 -\167\157\162\153\061\041\060\037\006\003\125\004\013\023\030\150 -\164\164\160\072\057\057\167\167\167\056\165\163\145\162\164\162 -\165\163\164\056\143\157\155\061\035\060\033\006\003\125\004\003 -\023\024\125\124\116\055\125\123\105\122\106\151\162\163\164\055 -\117\142\152\145\143\164\060\036\027\015\071\071\060\067\060\071 -\061\070\063\061\062\060\132\027\015\061\071\060\067\060\071\061 -\070\064\060\063\066\132\060\201\225\061\013\060\011\006\003\125 -\004\006\023\002\125\123\061\013\060\011\006\003\125\004\010\023 -\002\125\124\061\027\060\025\006\003\125\004\007\023\016\123\141 -\154\164\040\114\141\153\145\040\103\151\164\171\061\036\060\034 -\006\003\125\004\012\023\025\124\150\145\040\125\123\105\122\124 -\122\125\123\124\040\116\145\164\167\157\162\153\061\041\060\037 -\006\003\125\004\013\023\030\150\164\164\160\072\057\057\167\167 -\167\056\165\163\145\162\164\162\165\163\164\056\143\157\155\061 -\035\060\033\006\003\125\004\003\023\024\125\124\116\055\125\123 -\105\122\106\151\162\163\164\055\117\142\152\145\143\164\060\202 -\001\042\060\015\006\011\052\206\110\206\367\015\001\001\001\005 -\000\003\202\001\017\000\060\202\001\012\002\202\001\001\000\316 -\252\201\077\243\243\141\170\252\061\000\125\225\021\236\047\017 -\037\034\337\072\233\202\150\060\300\112\141\035\361\057\016\372 -\276\171\367\245\043\357\125\121\226\204\315\333\343\271\156\076 -\061\330\012\040\147\307\364\331\277\224\353\107\004\076\002\316 -\052\242\135\207\004\011\366\060\235\030\212\227\262\252\034\374 -\101\322\241\066\313\373\075\221\272\347\331\160\065\372\344\347 -\220\303\233\243\233\323\074\365\022\231\167\261\267\011\340\150 -\346\034\270\363\224\143\210\152\152\376\013\166\311\276\364\042 -\344\147\271\253\032\136\167\301\205\007\335\015\154\277\356\006 -\307\167\152\101\236\247\017\327\373\356\224\027\267\374\205\276 -\244\253\304\034\061\335\327\266\321\344\360\357\337\026\217\262 -\122\223\327\241\324\211\241\007\056\277\341\001\022\102\036\032 -\341\330\225\064\333\144\171\050\377\272\056\021\302\345\350\133 -\222\110\373\107\013\302\154\332\255\062\203\101\363\245\345\101 -\160\375\145\220\155\372\372\121\304\371\275\226\053\031\004\054 -\323\155\247\334\360\177\157\203\145\342\152\253\207\206\165\002 -\003\001\000\001\243\201\257\060\201\254\060\013\006\003\125\035 -\017\004\004\003\002\001\306\060\017\006\003\125\035\023\001\001 -\377\004\005\060\003\001\001\377\060\035\006\003\125\035\016\004 -\026\004\024\332\355\144\164\024\234\024\074\253\335\231\251\275 -\133\050\115\213\074\311\330\060\102\006\003\125\035\037\004\073 -\060\071\060\067\240\065\240\063\206\061\150\164\164\160\072\057 -\057\143\162\154\056\165\163\145\162\164\162\165\163\164\056\143 -\157\155\057\125\124\116\055\125\123\105\122\106\151\162\163\164 -\055\117\142\152\145\143\164\056\143\162\154\060\051\006\003\125 -\035\045\004\042\060\040\006\010\053\006\001\005\005\007\003\003 -\006\010\053\006\001\005\005\007\003\010\006\012\053\006\001\004 -\001\202\067\012\003\004\060\015\006\011\052\206\110\206\367\015 -\001\001\005\005\000\003\202\001\001\000\010\037\122\261\067\104 -\170\333\375\316\271\332\225\226\230\252\125\144\200\265\132\100 -\335\041\245\305\301\363\137\054\114\310\107\132\151\352\350\360 -\065\065\364\320\045\363\310\246\244\207\112\275\033\261\163\010 -\275\324\303\312\266\065\273\131\206\167\061\315\247\200\024\256 -\023\357\374\261\110\371\153\045\045\055\121\266\054\155\105\301 -\230\310\212\126\135\076\356\103\116\076\153\047\216\320\072\113 -\205\013\137\323\355\152\247\165\313\321\132\207\057\071\165\023 -\132\162\260\002\201\237\276\360\017\204\124\040\142\154\151\324 -\341\115\306\015\231\103\001\015\022\226\214\170\235\277\120\242 -\261\104\252\152\317\027\172\317\157\017\324\370\044\125\137\360 -\064\026\111\146\076\120\106\311\143\161\070\061\142\270\142\271 -\363\123\255\154\265\053\242\022\252\031\117\011\332\136\347\223 -\306\216\024\010\376\360\060\200\030\240\206\205\115\310\175\327 -\213\003\376\156\325\367\235\026\254\222\054\240\043\345\234\221 -\122\037\224\337\027\224\163\303\263\301\301\161\005\040\000\170 -\275\023\122\035\250\076\315\000\037\310 -END - -# Trust for Certificate "UTN USERFirst Object Root CA" -# Issuer: CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US -# Serial Number:44:be:0c:8b:50:00:24:b4:11:d3:36:2d:e0:b3:5f:1b -# Subject: CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US -# Not Valid Before: Fri Jul 09 18:31:20 1999 -# Not Valid After : Tue Jul 09 18:40:36 2019 -# Fingerprint (MD5): A7:F2:E4:16:06:41:11:50:30:6B:9C:E3:B4:9C:B0:C9 -# Fingerprint (SHA1): E1:2D:FB:4B:41:D7:D9:C3:2B:30:51:4B:AC:1D:81:D8:38:5E:2D:46 -CKA_CLASS CK_OBJECT_CLASS CKO_NSS_TRUST -CKA_TOKEN CK_BBOOL CK_TRUE -CKA_PRIVATE CK_BBOOL CK_FALSE -CKA_MODIFIABLE CK_BBOOL CK_FALSE -CKA_LABEL UTF8 "UTN USERFirst Object Root CA" -CKA_CERT_SHA1_HASH MULTILINE_OCTAL -\341\055\373\113\101\327\331\303\053\060\121\113\254\035\201\330 -\070\136\055\106 -END -CKA_CERT_MD5_HASH MULTILINE_OCTAL -\247\362\344\026\006\101\021\120\060\153\234\343\264\234\260\311 -END -CKA_ISSUER MULTILINE_OCTAL -\060\201\225\061\013\060\011\006\003\125\004\006\023\002\125\123 -\061\013\060\011\006\003\125\004\010\023\002\125\124\061\027\060 -\025\006\003\125\004\007\023\016\123\141\154\164\040\114\141\153 -\145\040\103\151\164\171\061\036\060\034\006\003\125\004\012\023 -\025\124\150\145\040\125\123\105\122\124\122\125\123\124\040\116 -\145\164\167\157\162\153\061\041\060\037\006\003\125\004\013\023 -\030\150\164\164\160\072\057\057\167\167\167\056\165\163\145\162 -\164\162\165\163\164\056\143\157\155\061\035\060\033\006\003\125 -\004\003\023\024\125\124\116\055\125\123\105\122\106\151\162\163 -\164\055\117\142\152\145\143\164 -END -CKA_SERIAL_NUMBER MULTILINE_OCTAL -\002\020\104\276\014\213\120\000\044\264\021\323\066\055\340\263 -\137\033 -END -CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_MUST_VERIFY_TRUST -CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_MUST_VERIFY_TRUST -CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_TRUSTED_DELEGATOR -CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE - # # Certificate "Camerfirma Chambers of Commerce Root" # @@ -4666,6 +3648,7 @@ CKA_VALUE MULTILINE_OCTAL \264\145\232\041\220\340\252\320\230\274\070\265\163\074\213\370 \334 END +CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE # Trust for Certificate "Camerfirma Chambers of Commerce Root" # Issuer: CN=Chambers of Commerce Root,OU=http://www.chambersign.org,O=AC Camerfirma SA CIF A82743287,C=EU @@ -4703,7 +3686,7 @@ CKA_SERIAL_NUMBER MULTILINE_OCTAL END CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_TRUSTED_DELEGATOR CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_TRUSTED_DELEGATOR -CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_TRUSTED_DELEGATOR +CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_MUST_VERIFY_TRUST CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE # @@ -4825,6 +3808,7 @@ CKA_VALUE MULTILINE_OCTAL \001\212\005\132\223\276\241\301\377\370\347\016\147\244\107\111 \166\135\165\220\032\365\046\217\360 END +CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE # Trust for Certificate "Camerfirma Global Chambersign Root" # Issuer: CN=Global Chambersign Root,OU=http://www.chambersign.org,O=AC Camerfirma SA CIF A82743287,C=EU @@ -4861,7 +3845,7 @@ CKA_SERIAL_NUMBER MULTILINE_OCTAL END CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_TRUSTED_DELEGATOR CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_TRUSTED_DELEGATOR -CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_TRUSTED_DELEGATOR +CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_MUST_VERIFY_TRUST CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE # @@ -4977,6 +3961,7 @@ CKA_VALUE MULTILINE_OCTAL \073\356\304\114\364\354\047\174\102\302\164\174\202\212\011\311 \264\003\045\274 END +CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE # Trust for Certificate "XRamp Global CA Root" # Issuer: CN=XRamp Global Certification Authority,O=XRamp Security Services Inc,OU=www.xrampsecurity.com,C=US @@ -5015,7 +4000,7 @@ CKA_SERIAL_NUMBER MULTILINE_OCTAL END CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_TRUSTED_DELEGATOR CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_TRUSTED_DELEGATOR -CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_TRUSTED_DELEGATOR +CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_MUST_VERIFY_TRUST CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE # @@ -5123,6 +4108,7 @@ CKA_VALUE MULTILINE_OCTAL \105\346\015\237\050\234\261\271\052\132\127\255\067\017\257\035 \177\333\275\237 END +CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE # Trust for Certificate "Go Daddy Class 2 CA" # Issuer: OU=Go Daddy Class 2 Certification Authority,O="The Go Daddy Group, Inc.",C=US @@ -5158,7 +4144,7 @@ CKA_SERIAL_NUMBER MULTILINE_OCTAL END CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_TRUSTED_DELEGATOR CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_TRUSTED_DELEGATOR -CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_TRUSTED_DELEGATOR +CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_MUST_VERIFY_TRUST CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE # @@ -5267,6 +4253,7 @@ CKA_VALUE MULTILINE_OCTAL \370\267\100\021\106\232\037\171\016\142\277\017\227\354\340\057 \037\027\224 END +CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE # Trust for Certificate "Starfield Class 2 CA" # Issuer: OU=Starfield Class 2 Certification Authority,O="Starfield Technologies, Inc.",C=US @@ -5302,7 +4289,7 @@ CKA_SERIAL_NUMBER MULTILINE_OCTAL END CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_TRUSTED_DELEGATOR CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_TRUSTED_DELEGATOR -CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_TRUSTED_DELEGATOR +CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_MUST_VERIFY_TRUST CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE # @@ -5472,6 +4459,7 @@ CKA_VALUE MULTILINE_OCTAL \064\353\005\377\232\042\256\233\175\077\361\145\121\012\246\060 \152\263\364\210\034\200\015\374\162\212\350\203\136 END +CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE # Trust for Certificate "StartCom Certification Authority" # Issuer: CN=StartCom Certification Authority,OU=Secure Digital Certificate Signing,O=StartCom Ltd.,C=IL @@ -5508,7 +4496,7 @@ CKA_SERIAL_NUMBER MULTILINE_OCTAL END CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_TRUSTED_DELEGATOR CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_TRUSTED_DELEGATOR -CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_TRUSTED_DELEGATOR +CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_MUST_VERIFY_TRUST CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE # @@ -5636,215 +4624,42 @@ CKA_VALUE MULTILINE_OCTAL \020\002\356\047\214\204\377\254\105\015\023\134\203\062\340\045 \245\206\054\174\364\022 END +CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE # Trust for Certificate "Taiwan GRCA" -# Issuer: O=Government Root Certification Authority,C=TW -# Serial Number:1f:9d:59:5a:d7:2f:c2:06:44:a5:80:08:69:e3:5e:f6 -# Subject: O=Government Root Certification Authority,C=TW -# Not Valid Before: Thu Dec 05 13:23:33 2002 -# Not Valid After : Sun Dec 05 13:23:33 2032 -# Fingerprint (MD5): 37:85:44:53:32:45:1F:20:F0:F3:95:E1:25:C4:43:4E -# Fingerprint (SHA1): F4:8B:11:BF:DE:AB:BE:94:54:20:71:E6:41:DE:6B:BE:88:2B:40:B9 -CKA_CLASS CK_OBJECT_CLASS CKO_NSS_TRUST -CKA_TOKEN CK_BBOOL CK_TRUE -CKA_PRIVATE CK_BBOOL CK_FALSE -CKA_MODIFIABLE CK_BBOOL CK_FALSE -CKA_LABEL UTF8 "Taiwan GRCA" -CKA_CERT_SHA1_HASH MULTILINE_OCTAL -\364\213\021\277\336\253\276\224\124\040\161\346\101\336\153\276 -\210\053\100\271 -END -CKA_CERT_MD5_HASH MULTILINE_OCTAL -\067\205\104\123\062\105\037\040\360\363\225\341\045\304\103\116 -END -CKA_ISSUER MULTILINE_OCTAL -\060\077\061\013\060\011\006\003\125\004\006\023\002\124\127\061 -\060\060\056\006\003\125\004\012\014\047\107\157\166\145\162\156 -\155\145\156\164\040\122\157\157\164\040\103\145\162\164\151\146 -\151\143\141\164\151\157\156\040\101\165\164\150\157\162\151\164 -\171 -END -CKA_SERIAL_NUMBER MULTILINE_OCTAL -\002\020\037\235\131\132\327\057\302\006\104\245\200\010\151\343 -\136\366 -END -CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_TRUSTED_DELEGATOR -CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_TRUSTED_DELEGATOR -CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_TRUSTED_DELEGATOR -CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE - -# -# Certificate "Swisscom Root CA 1" -# -# Issuer: CN=Swisscom Root CA 1,OU=Digital Certificate Services,O=Swisscom,C=ch -# Serial Number:5c:0b:85:5c:0b:e7:59:41:df:57:cc:3f:7f:9d:a8:36 -# Subject: CN=Swisscom Root CA 1,OU=Digital Certificate Services,O=Swisscom,C=ch -# Not Valid Before: Thu Aug 18 12:06:20 2005 -# Not Valid After : Mon Aug 18 22:06:20 2025 -# Fingerprint (MD5): F8:38:7C:77:88:DF:2C:16:68:2E:C2:E2:52:4B:B8:F9 -# Fingerprint (SHA1): 5F:3A:FC:0A:8B:64:F6:86:67:34:74:DF:7E:A9:A2:FE:F9:FA:7A:51 -CKA_CLASS CK_OBJECT_CLASS CKO_CERTIFICATE -CKA_TOKEN CK_BBOOL CK_TRUE -CKA_PRIVATE CK_BBOOL CK_FALSE -CKA_MODIFIABLE CK_BBOOL CK_FALSE -CKA_LABEL UTF8 "Swisscom Root CA 1" -CKA_CERTIFICATE_TYPE CK_CERTIFICATE_TYPE CKC_X_509 -CKA_SUBJECT MULTILINE_OCTAL -\060\144\061\013\060\011\006\003\125\004\006\023\002\143\150\061 -\021\060\017\006\003\125\004\012\023\010\123\167\151\163\163\143 -\157\155\061\045\060\043\006\003\125\004\013\023\034\104\151\147 -\151\164\141\154\040\103\145\162\164\151\146\151\143\141\164\145 -\040\123\145\162\166\151\143\145\163\061\033\060\031\006\003\125 -\004\003\023\022\123\167\151\163\163\143\157\155\040\122\157\157 -\164\040\103\101\040\061 -END -CKA_ID UTF8 "0" -CKA_ISSUER MULTILINE_OCTAL -\060\144\061\013\060\011\006\003\125\004\006\023\002\143\150\061 -\021\060\017\006\003\125\004\012\023\010\123\167\151\163\163\143 -\157\155\061\045\060\043\006\003\125\004\013\023\034\104\151\147 -\151\164\141\154\040\103\145\162\164\151\146\151\143\141\164\145 -\040\123\145\162\166\151\143\145\163\061\033\060\031\006\003\125 -\004\003\023\022\123\167\151\163\163\143\157\155\040\122\157\157 -\164\040\103\101\040\061 -END -CKA_SERIAL_NUMBER MULTILINE_OCTAL -\002\020\134\013\205\134\013\347\131\101\337\127\314\077\177\235 -\250\066 -END -CKA_VALUE MULTILINE_OCTAL -\060\202\005\331\060\202\003\301\240\003\002\001\002\002\020\134 -\013\205\134\013\347\131\101\337\127\314\077\177\235\250\066\060 -\015\006\011\052\206\110\206\367\015\001\001\005\005\000\060\144 -\061\013\060\011\006\003\125\004\006\023\002\143\150\061\021\060 -\017\006\003\125\004\012\023\010\123\167\151\163\163\143\157\155 -\061\045\060\043\006\003\125\004\013\023\034\104\151\147\151\164 -\141\154\040\103\145\162\164\151\146\151\143\141\164\145\040\123 -\145\162\166\151\143\145\163\061\033\060\031\006\003\125\004\003 -\023\022\123\167\151\163\163\143\157\155\040\122\157\157\164\040 -\103\101\040\061\060\036\027\015\060\065\060\070\061\070\061\062 -\060\066\062\060\132\027\015\062\065\060\070\061\070\062\062\060 -\066\062\060\132\060\144\061\013\060\011\006\003\125\004\006\023 -\002\143\150\061\021\060\017\006\003\125\004\012\023\010\123\167 -\151\163\163\143\157\155\061\045\060\043\006\003\125\004\013\023 -\034\104\151\147\151\164\141\154\040\103\145\162\164\151\146\151 -\143\141\164\145\040\123\145\162\166\151\143\145\163\061\033\060 -\031\006\003\125\004\003\023\022\123\167\151\163\163\143\157\155 -\040\122\157\157\164\040\103\101\040\061\060\202\002\042\060\015 -\006\011\052\206\110\206\367\015\001\001\001\005\000\003\202\002 -\017\000\060\202\002\012\002\202\002\001\000\320\271\260\250\014 -\331\273\077\041\370\033\325\063\223\200\026\145\040\165\262\075 -\233\140\155\106\310\214\061\157\027\303\372\232\154\126\355\074 -\305\221\127\303\315\253\226\111\220\052\031\113\036\243\155\127 -\335\361\053\142\050\165\105\136\252\326\133\372\013\045\330\241 -\026\371\034\304\056\346\225\052\147\314\320\051\156\074\205\064 -\070\141\111\261\000\237\326\072\161\137\115\155\316\137\271\251 -\344\211\177\152\122\372\312\233\362\334\251\371\235\231\107\077 -\116\051\137\264\246\215\135\173\013\231\021\003\003\376\347\333 -\333\243\377\035\245\315\220\036\001\037\065\260\177\000\333\220 -\157\306\176\173\321\356\172\172\247\252\014\127\157\244\155\305 -\023\073\260\245\331\355\062\034\264\136\147\213\124\334\163\207 -\345\323\027\174\146\120\162\135\324\032\130\301\331\317\330\211 -\002\157\247\111\264\066\135\320\244\336\007\054\266\165\267\050 -\221\326\227\276\050\365\230\036\352\133\046\311\275\260\227\163 -\332\256\221\046\353\150\301\371\071\025\326\147\113\012\155\117 -\313\317\260\344\102\161\214\123\171\347\356\341\333\035\240\156 -\035\214\032\167\065\134\026\036\053\123\037\064\213\321\154\374 -\362\147\007\172\365\255\355\326\232\253\241\261\113\341\314\067 -\137\375\177\315\115\256\270\037\234\103\371\052\130\125\103\105 -\274\226\315\160\016\374\311\343\146\272\116\215\073\201\313\025 -\144\173\271\224\350\135\063\122\205\161\056\117\216\242\006\021 -\121\311\343\313\241\156\061\010\144\014\302\322\074\365\066\350 -\327\320\016\170\043\040\221\311\044\052\145\051\133\042\367\041 -\316\203\136\244\363\336\113\323\150\217\106\165\134\203\011\156 -\051\153\304\160\214\365\235\327\040\057\377\106\322\053\070\302 -\057\165\034\075\176\332\245\357\036\140\205\151\102\323\314\370 -\143\376\036\103\071\205\246\266\143\101\020\263\163\036\274\323 -\372\312\175\026\107\342\247\325\320\243\212\012\010\226\142\126 -\156\064\333\331\002\271\060\165\343\004\322\347\217\302\260\021 -\100\012\254\325\161\002\142\213\061\276\335\306\043\130\061\102 -\103\055\164\371\306\236\246\212\017\351\376\277\203\346\103\127 -\044\272\357\106\064\252\327\022\001\070\355\002\003\001\000\001 -\243\201\206\060\201\203\060\016\006\003\125\035\017\001\001\377 -\004\004\003\002\001\206\060\035\006\003\125\035\041\004\026\060 -\024\060\022\006\007\140\205\164\001\123\000\001\006\007\140\205 -\164\001\123\000\001\060\022\006\003\125\035\023\001\001\377\004 -\010\060\006\001\001\377\002\001\007\060\037\006\003\125\035\043 -\004\030\060\026\200\024\003\045\057\336\157\202\001\072\134\054 -\334\053\241\151\265\147\324\214\323\375\060\035\006\003\125\035 -\016\004\026\004\024\003\045\057\336\157\202\001\072\134\054\334 -\053\241\151\265\147\324\214\323\375\060\015\006\011\052\206\110 -\206\367\015\001\001\005\005\000\003\202\002\001\000\065\020\313 -\354\246\004\015\015\017\315\300\333\253\250\362\210\227\014\337 -\223\057\115\174\100\126\061\172\353\244\017\140\315\172\363\276 -\303\047\216\003\076\244\335\022\357\176\036\164\006\074\077\061 -\362\034\173\221\061\041\264\360\320\154\227\324\351\227\262\044 -\126\036\126\303\065\275\210\005\017\133\020\032\144\341\307\202 -\060\371\062\255\236\120\054\347\170\005\320\061\261\132\230\212 -\165\116\220\134\152\024\052\340\122\107\202\140\346\036\332\201 -\261\373\024\013\132\361\237\322\225\272\076\320\033\326\025\035 -\243\276\206\325\333\017\300\111\144\273\056\120\031\113\322\044 -\370\335\036\007\126\320\070\240\225\160\040\166\214\327\335\036 -\336\237\161\304\043\357\203\023\134\243\044\025\115\051\100\074 -\152\304\251\330\267\246\104\245\015\364\340\235\167\036\100\160 -\046\374\332\331\066\344\171\344\265\077\274\233\145\276\273\021 -\226\317\333\306\050\071\072\010\316\107\133\123\132\305\231\376 -\135\251\335\357\114\324\306\245\255\002\346\214\007\022\036\157 -\003\321\157\240\243\363\051\275\022\307\120\242\260\177\210\251 -\231\167\232\261\300\245\071\056\134\174\151\342\054\260\352\067 -\152\244\341\132\341\365\120\345\203\357\245\273\052\210\347\214 -\333\375\155\136\227\031\250\176\146\165\153\161\352\277\261\307 -\157\240\364\216\244\354\064\121\133\214\046\003\160\241\167\325 -\001\022\127\000\065\333\043\336\016\212\050\231\375\261\020\157 -\113\377\070\055\140\116\054\234\353\147\265\255\111\356\113\037 -\254\257\373\015\220\132\146\140\160\135\252\315\170\324\044\356 -\310\101\240\223\001\222\234\152\236\374\271\044\305\263\025\202 -\176\276\256\225\053\353\261\300\332\343\001\140\013\136\151\254 -\204\126\141\276\161\027\376\035\023\017\376\306\207\105\351\376 -\062\240\032\015\023\244\224\125\161\245\026\213\272\312\211\260 -\262\307\374\217\330\124\265\223\142\235\316\317\131\373\075\030 -\316\052\313\065\025\202\135\377\124\042\133\161\122\373\267\311 -\376\140\233\000\101\144\360\252\052\354\266\102\103\316\211\146 -\201\310\213\237\071\124\003\045\323\026\065\216\204\320\137\372 -\060\032\365\232\154\364\016\123\371\072\133\321\034 -END - -# Trust for Certificate "Swisscom Root CA 1" -# Issuer: CN=Swisscom Root CA 1,OU=Digital Certificate Services,O=Swisscom,C=ch -# Serial Number:5c:0b:85:5c:0b:e7:59:41:df:57:cc:3f:7f:9d:a8:36 -# Subject: CN=Swisscom Root CA 1,OU=Digital Certificate Services,O=Swisscom,C=ch -# Not Valid Before: Thu Aug 18 12:06:20 2005 -# Not Valid After : Mon Aug 18 22:06:20 2025 -# Fingerprint (MD5): F8:38:7C:77:88:DF:2C:16:68:2E:C2:E2:52:4B:B8:F9 -# Fingerprint (SHA1): 5F:3A:FC:0A:8B:64:F6:86:67:34:74:DF:7E:A9:A2:FE:F9:FA:7A:51 +# Issuer: O=Government Root Certification Authority,C=TW +# Serial Number:1f:9d:59:5a:d7:2f:c2:06:44:a5:80:08:69:e3:5e:f6 +# Subject: O=Government Root Certification Authority,C=TW +# Not Valid Before: Thu Dec 05 13:23:33 2002 +# Not Valid After : Sun Dec 05 13:23:33 2032 +# Fingerprint (MD5): 37:85:44:53:32:45:1F:20:F0:F3:95:E1:25:C4:43:4E +# Fingerprint (SHA1): F4:8B:11:BF:DE:AB:BE:94:54:20:71:E6:41:DE:6B:BE:88:2B:40:B9 CKA_CLASS CK_OBJECT_CLASS CKO_NSS_TRUST CKA_TOKEN CK_BBOOL CK_TRUE CKA_PRIVATE CK_BBOOL CK_FALSE CKA_MODIFIABLE CK_BBOOL CK_FALSE -CKA_LABEL UTF8 "Swisscom Root CA 1" +CKA_LABEL UTF8 "Taiwan GRCA" CKA_CERT_SHA1_HASH MULTILINE_OCTAL -\137\072\374\012\213\144\366\206\147\064\164\337\176\251\242\376 -\371\372\172\121 +\364\213\021\277\336\253\276\224\124\040\161\346\101\336\153\276 +\210\053\100\271 END CKA_CERT_MD5_HASH MULTILINE_OCTAL -\370\070\174\167\210\337\054\026\150\056\302\342\122\113\270\371 +\067\205\104\123\062\105\037\040\360\363\225\341\045\304\103\116 END CKA_ISSUER MULTILINE_OCTAL -\060\144\061\013\060\011\006\003\125\004\006\023\002\143\150\061 -\021\060\017\006\003\125\004\012\023\010\123\167\151\163\163\143 -\157\155\061\045\060\043\006\003\125\004\013\023\034\104\151\147 -\151\164\141\154\040\103\145\162\164\151\146\151\143\141\164\145 -\040\123\145\162\166\151\143\145\163\061\033\060\031\006\003\125 -\004\003\023\022\123\167\151\163\163\143\157\155\040\122\157\157 -\164\040\103\101\040\061 +\060\077\061\013\060\011\006\003\125\004\006\023\002\124\127\061 +\060\060\056\006\003\125\004\012\014\047\107\157\166\145\162\156 +\155\145\156\164\040\122\157\157\164\040\103\145\162\164\151\146 +\151\143\141\164\151\157\156\040\101\165\164\150\157\162\151\164 +\171 END CKA_SERIAL_NUMBER MULTILINE_OCTAL -\002\020\134\013\205\134\013\347\131\101\337\127\314\077\177\235 -\250\066 +\002\020\037\235\131\132\327\057\302\006\104\245\200\010\151\343 +\136\366 END CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_TRUSTED_DELEGATOR CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_TRUSTED_DELEGATOR -CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_TRUSTED_DELEGATOR +CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_MUST_VERIFY_TRUST CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE # @@ -5948,6 +4763,7 @@ CKA_VALUE MULTILINE_OCTAL \020\161\235\255\342\303\371\303\231\121\267\053\007\010\316\056 \346\120\262\247\372\012\105\057\242\360\362 END +CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE # Trust for Certificate "DigiCert Assured ID Root CA" # Issuer: CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US @@ -5984,7 +4800,7 @@ CKA_SERIAL_NUMBER MULTILINE_OCTAL END CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_TRUSTED_DELEGATOR CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_TRUSTED_DELEGATOR -CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_TRUSTED_DELEGATOR +CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_MUST_VERIFY_TRUST CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE # @@ -6088,6 +4904,7 @@ CKA_VALUE MULTILINE_OCTAL \001\022\255\310\210\306\230\064\137\215\012\074\306\351\325\225 \225\155\336 END +CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE # Trust for Certificate "DigiCert Global Root CA" # Issuer: CN=DigiCert Global Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US @@ -6124,7 +4941,7 @@ CKA_SERIAL_NUMBER MULTILINE_OCTAL END CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_TRUSTED_DELEGATOR CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_TRUSTED_DELEGATOR -CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_TRUSTED_DELEGATOR +CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_MUST_VERIFY_TRUST CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE # @@ -6229,6 +5046,7 @@ CKA_VALUE MULTILINE_OCTAL \315\354\107\252\045\047\147\240\067\363\000\202\175\124\327\251 \370\351\056\023\243\167\350\037\112 END +CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE # Trust for Certificate "DigiCert High Assurance EV Root CA" # Issuer: CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US @@ -6265,7 +5083,7 @@ CKA_SERIAL_NUMBER MULTILINE_OCTAL END CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_TRUSTED_DELEGATOR CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_TRUSTED_DELEGATOR -CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_TRUSTED_DELEGATOR +CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_MUST_VERIFY_TRUST CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE # @@ -6361,6 +5179,7 @@ CKA_VALUE MULTILINE_OCTAL \010\346\236\005\115\107\030\325\026\351\261\326\266\020\325\273 \227\277\242\216\264\124 END +CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE # Trust for Certificate "Certplus Class 2 Primary CA" # Issuer: CN=Class 2 Primary CA,O=Certplus,C=FR @@ -6487,6 +5306,7 @@ CKA_VALUE MULTILINE_OCTAL \071\277\025\145\034\310\366\167\226\152\012\215\167\013\330\221 \013\004\216\007\333\051\266\012\356\235\202\065\065\020 END +CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE # Trust for Certificate "DST Root CA X3" # Issuer: CN=DST Root CA X3,O=Digital Signature Trust Co. @@ -6628,6 +5448,7 @@ CKA_VALUE MULTILINE_OCTAL \367\016\013\114\234\150\170\173\161\061\307\353\036\340\147\101 \363\267\240\247\315\345\172\063\066\152\372\232\053 END +CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE # Trust for Certificate "DST ACES CA X6" # Issuer: CN=DST ACES CA X6,OU=DST ACES,O=Digital Signature Trust,C=US @@ -6795,6 +5616,7 @@ CKA_VALUE MULTILINE_OCTAL \060\245\311\215\330\253\061\201\037\337\302\146\067\323\223\251 \205\206\171\145\322 END +CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE # Trust for Certificate "SwissSign Platinum CA - G2" # Issuer: CN=SwissSign Platinum CA - G2,O=SwissSign AG,C=CH @@ -6828,7 +5650,7 @@ CKA_SERIAL_NUMBER MULTILINE_OCTAL END CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_MUST_VERIFY_TRUST CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_TRUSTED_DELEGATOR -CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_TRUSTED_DELEGATOR +CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_MUST_VERIFY_TRUST CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE # @@ -6959,6 +5781,7 @@ CKA_VALUE MULTILINE_OCTAL \101\317\001\261\351\270\311\146\364\333\046\363\072\244\164\362 \111\044\133\311\260\320\127\301\372\076\172\341\227\311 END +CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE # Trust for Certificate "SwissSign Gold CA - G2" # Issuer: CN=SwissSign Gold CA - G2,O=SwissSign AG,C=CH @@ -6992,7 +5815,7 @@ CKA_SERIAL_NUMBER MULTILINE_OCTAL END CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_TRUSTED_DELEGATOR CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_TRUSTED_DELEGATOR -CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_TRUSTED_DELEGATOR +CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_MUST_VERIFY_TRUST CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE # @@ -7124,6 +5947,7 @@ CKA_VALUE MULTILINE_OCTAL \036\354\344\012\273\052\114\353\011\140\071\316\312\142\330\056 \156 END +CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE # Trust for Certificate "SwissSign Silver CA - G2" # Issuer: CN=SwissSign Silver CA - G2,O=SwissSign AG,C=CH @@ -7157,7 +5981,7 @@ CKA_SERIAL_NUMBER MULTILINE_OCTAL END CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_TRUSTED_DELEGATOR CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_TRUSTED_DELEGATOR -CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_TRUSTED_DELEGATOR +CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_MUST_VERIFY_TRUST CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE # @@ -7255,6 +6079,7 @@ CKA_VALUE MULTILINE_OCTAL \001\076\200\360\102\240\225\007\136\155\315\314\113\244\105\215 \253\022\350\263\336\132\345\240\174\350\017\042\035\132\351\131 END +CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE # Trust for Certificate "GeoTrust Primary Certification Authority" # Issuer: CN=GeoTrust Primary Certification Authority,O=GeoTrust Inc.,C=US @@ -7409,6 +6234,7 @@ CKA_VALUE MULTILINE_OCTAL \302\047\060\356\247\020\135\067\217\134\071\053\344\004\360\173 \215\126\214\150 END +CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE # Trust for Certificate "thawte Primary Root CA" # Issuer: CN=thawte Primary Root CA,OU="(c) 2006 thawte, Inc. - For authorized use only",OU=Certification Services Division,O="thawte, Inc.",C=US @@ -7449,7 +6275,7 @@ CKA_SERIAL_NUMBER MULTILINE_OCTAL END CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_TRUSTED_DELEGATOR CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_MUST_VERIFY_TRUST -CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_TRUSTED_DELEGATOR +CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_MUST_VERIFY_TRUST CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE # @@ -7583,6 +6409,7 @@ CKA_VALUE MULTILINE_OCTAL \030\077\150\134\362\102\112\205\070\124\203\137\321\350\054\362 \254\021\326\250\355\143\152 END +CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE # Trust for Certificate "VeriSign Class 3 Public Primary Certification Authority - G5" # Issuer: CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU="(c) 2006 VeriSign, Inc. - For authorized use only",OU=VeriSign Trust Network,O="VeriSign, Inc.",C=US @@ -7625,7 +6452,7 @@ CKA_SERIAL_NUMBER MULTILINE_OCTAL END CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_TRUSTED_DELEGATOR CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_TRUSTED_DELEGATOR -CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_TRUSTED_DELEGATOR +CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_MUST_VERIFY_TRUST CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE # @@ -7725,6 +6552,7 @@ CKA_VALUE MULTILINE_OCTAL \143\032\157\004\326\370\306\114\243\232\261\067\264\215\345\050 \113\035\236\054\302\270\150\274\355\002\356\061 END +CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE # Trust for Certificate "SecureTrust CA" # Issuer: CN=SecureTrust CA,O=SecureTrust Corporation,C=US @@ -7759,7 +6587,7 @@ CKA_SERIAL_NUMBER MULTILINE_OCTAL END CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_TRUSTED_DELEGATOR CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_MUST_VERIFY_TRUST -CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_TRUSTED_DELEGATOR +CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_MUST_VERIFY_TRUST CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE # @@ -7859,6 +6687,7 @@ CKA_VALUE MULTILINE_OCTAL \032\257\014\015\125\144\064\110\270\222\271\361\264\120\051\362 \117\043\037\332\154\254\037\104\341\335\043\170\121\133\307\026 END +CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE # Trust for Certificate "Secure Global CA" # Issuer: CN=Secure Global CA,O=SecureTrust Corporation,C=US @@ -7893,7 +6722,7 @@ CKA_SERIAL_NUMBER MULTILINE_OCTAL END CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_TRUSTED_DELEGATOR CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_TRUSTED_DELEGATOR -CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_TRUSTED_DELEGATOR +CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_MUST_VERIFY_TRUST CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE # @@ -8008,6 +6837,7 @@ CKA_VALUE MULTILINE_OCTAL \050\276\060\105\061\036\307\170\276\130\141\070\254\073\342\001 \145 END +CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE # Trust for Certificate "COMODO Certification Authority" # Issuer: CN=COMODO Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB @@ -8046,7 +6876,7 @@ CKA_SERIAL_NUMBER MULTILINE_OCTAL END CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_TRUSTED_DELEGATOR CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_TRUSTED_DELEGATOR -CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_TRUSTED_DELEGATOR +CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_MUST_VERIFY_TRUST CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE # @@ -8153,6 +6983,7 @@ CKA_VALUE MULTILINE_OCTAL \224\265\324\314\271\275\152\065\126\041\336\330\303\353\373\313 \244\140\114\260\125\240\240\173\127\262 END +CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE # Trust for Certificate "Network Solutions Certificate Authority" # Issuer: CN=Network Solutions Certificate Authority,O=Network Solutions L.L.C.,C=US @@ -8278,6 +7109,7 @@ CKA_VALUE MULTILINE_OCTAL \030\067\200\123\376\335\040\340\065\232\066\321\307\001\271\346 \334\335\363\377\035\054\072\026\127\331\222\071\326 END +CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE # Trust for Certificate "COMODO ECC Certification Authority" # Issuer: CN=COMODO ECC Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB @@ -8316,7 +7148,7 @@ CKA_SERIAL_NUMBER MULTILINE_OCTAL END CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_TRUSTED_DELEGATOR CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_TRUSTED_DELEGATOR -CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_TRUSTED_DELEGATOR +CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_MUST_VERIFY_TRUST CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE # @@ -8585,6 +7417,7 @@ CKA_VALUE MULTILINE_OCTAL \310\074\255\010\311\260\230\100\243\052\347\210\203\355\167\217 \164 END +CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE # Trust for Certificate "Security Communication EV RootCA1" # Issuer: OU=Security Communication EV RootCA1,O="SECOM Trust Systems CO.,LTD.",C=JP @@ -8732,6 +7565,7 @@ CKA_VALUE MULTILINE_OCTAL \130\123\265\234\273\157\237\134\305\030\354\335\057\341\230\311 \374\276\337\012\015 END +CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE # Trust for Certificate "OISTE WISeKey Global Root GA CA" # Issuer: CN=OISTE WISeKey Global Root GA CA,OU=OISTE Foundation Endorsed,OU=Copyright (c) 2005,O=WISeKey,C=CH @@ -8866,6 +7700,7 @@ CKA_VALUE MULTILINE_OCTAL \133\041\374\021\221\064\276\101\357\173\235\227\165\377\227\225 \300\226\130\057\352\273\106\327\273\344\331\056 END +CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE # Trust for Certificate "Certigna" # Issuer: CN=Certigna,O=Dhimyotis,C=FR @@ -9047,6 +7882,7 @@ CKA_VALUE MULTILINE_OCTAL \053\257\134\331\355\107\167\140\016\073\017\036\322\300\334\144 \005\211\374\170\326\134\054\046\103\251 END +CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE # Trust for Certificate "AC Raiz Certicamara S.A." # Issuer: CN=AC Ra..z Certic..mara S.A.,O=Sociedad Cameral de Certificaci..n Digital - Certic..mara S.A.,C=CO @@ -9084,7 +7920,7 @@ CKA_SERIAL_NUMBER MULTILINE_OCTAL END CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_MUST_VERIFY_TRUST CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_TRUSTED_DELEGATOR -CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_TRUSTED_DELEGATOR +CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_MUST_VERIFY_TRUST CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE # @@ -9204,6 +8040,7 @@ CKA_VALUE MULTILINE_OCTAL \346\222\303\201\301\063\273\210\036\241\347\342\264\275\061\154 \016\121\075\157\373\226\126\200\342\066\027\321\334\344 END +CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE # Trust for Certificate "TC TrustCenter Class 3 CA II" # Issuer: CN=TC TrustCenter Class 3 CA II,OU=TC TrustCenter Class 3 CA,O=TC TrustCenter GmbH,C=DE @@ -9344,6 +8181,7 @@ CKA_VALUE MULTILINE_OCTAL \012\155\272\071\143\050\206\222\363\030\204\330\373\321\317\005 \126\144\127 END +CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE # Trust for Certificate "Deutsche Telekom Root CA 2" # Issuer: CN=Deutsche Telekom Root CA 2,OU=T-TeleSec Trust Center,O=Deutsche Telekom AG,C=DE @@ -9380,7 +8218,7 @@ CKA_SERIAL_NUMBER MULTILINE_OCTAL END CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_TRUSTED_DELEGATOR CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_TRUSTED_DELEGATOR -CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_TRUSTED_DELEGATOR +CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_MUST_VERIFY_TRUST CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE # @@ -9476,6 +8314,7 @@ CKA_VALUE MULTILINE_OCTAL \214\160\250\337\145\062\364\244\100\214\241\302\104\003\016\224 \000\147\240\161\000\202\110 END +CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE # Trust for Certificate "ComSign CA" # Issuer: C=IL,O=ComSign,CN=ComSign CA @@ -9512,136 +8351,6 @@ CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_TRUSTED_DELEGATOR CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_MUST_VERIFY_TRUST CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE -# -# Certificate "ComSign Secured CA" -# -# Issuer: C=IL,O=ComSign,CN=ComSign Secured CA -# Serial Number:00:c7:28:47:09:b3:b8:6c:45:8c:1d:fa:24:f5:36:4e:e9 -# Subject: C=IL,O=ComSign,CN=ComSign Secured CA -# Not Valid Before: Wed Mar 24 11:37:20 2004 -# Not Valid After : Fri Mar 16 15:04:56 2029 -# Fingerprint (MD5): 40:01:25:06:8D:21:43:6A:0E:43:00:9C:E7:43:F3:D5 -# Fingerprint (SHA1): F9:CD:0E:2C:DA:76:24:C1:8F:BD:F0:F0:AB:B6:45:B8:F7:FE:D5:7A -CKA_CLASS CK_OBJECT_CLASS CKO_CERTIFICATE -CKA_TOKEN CK_BBOOL CK_TRUE -CKA_PRIVATE CK_BBOOL CK_FALSE -CKA_MODIFIABLE CK_BBOOL CK_FALSE -CKA_LABEL UTF8 "ComSign Secured CA" -CKA_CERTIFICATE_TYPE CK_CERTIFICATE_TYPE CKC_X_509 -CKA_SUBJECT MULTILINE_OCTAL -\060\074\061\033\060\031\006\003\125\004\003\023\022\103\157\155 -\123\151\147\156\040\123\145\143\165\162\145\144\040\103\101\061 -\020\060\016\006\003\125\004\012\023\007\103\157\155\123\151\147 -\156\061\013\060\011\006\003\125\004\006\023\002\111\114 -END -CKA_ID UTF8 "0" -CKA_ISSUER MULTILINE_OCTAL -\060\074\061\033\060\031\006\003\125\004\003\023\022\103\157\155 -\123\151\147\156\040\123\145\143\165\162\145\144\040\103\101\061 -\020\060\016\006\003\125\004\012\023\007\103\157\155\123\151\147 -\156\061\013\060\011\006\003\125\004\006\023\002\111\114 -END -CKA_SERIAL_NUMBER MULTILINE_OCTAL -\002\021\000\307\050\107\011\263\270\154\105\214\035\372\044\365 -\066\116\351 -END -CKA_VALUE MULTILINE_OCTAL -\060\202\003\253\060\202\002\223\240\003\002\001\002\002\021\000 -\307\050\107\011\263\270\154\105\214\035\372\044\365\066\116\351 -\060\015\006\011\052\206\110\206\367\015\001\001\005\005\000\060 -\074\061\033\060\031\006\003\125\004\003\023\022\103\157\155\123 -\151\147\156\040\123\145\143\165\162\145\144\040\103\101\061\020 -\060\016\006\003\125\004\012\023\007\103\157\155\123\151\147\156 -\061\013\060\011\006\003\125\004\006\023\002\111\114\060\036\027 -\015\060\064\060\063\062\064\061\061\063\067\062\060\132\027\015 -\062\071\060\063\061\066\061\065\060\064\065\066\132\060\074\061 -\033\060\031\006\003\125\004\003\023\022\103\157\155\123\151\147 -\156\040\123\145\143\165\162\145\144\040\103\101\061\020\060\016 -\006\003\125\004\012\023\007\103\157\155\123\151\147\156\061\013 -\060\011\006\003\125\004\006\023\002\111\114\060\202\001\042\060 -\015\006\011\052\206\110\206\367\015\001\001\001\005\000\003\202 -\001\017\000\060\202\001\012\002\202\001\001\000\306\265\150\137 -\035\224\025\303\244\010\125\055\343\240\127\172\357\351\164\052 -\273\271\174\127\111\032\021\136\117\051\207\014\110\326\152\347 -\217\324\176\127\044\271\006\211\344\034\074\352\254\343\332\041 -\200\163\041\012\357\171\230\154\037\010\377\241\120\175\362\230 -\033\311\124\157\076\245\050\354\041\004\017\105\273\007\075\241 -\300\372\052\230\035\116\006\223\373\365\210\073\253\137\313\026 -\277\346\363\236\112\207\355\031\352\302\237\103\344\361\201\245 -\177\020\117\076\321\112\142\255\123\033\313\203\377\007\145\245 -\222\055\146\251\133\270\132\364\035\264\041\221\112\027\173\236 -\062\376\126\044\071\262\124\204\103\365\204\302\330\274\101\220 -\314\235\326\150\332\351\202\120\251\073\150\317\265\135\002\224 -\140\026\261\103\331\103\135\335\135\207\156\352\273\263\311\153 -\366\003\224\011\160\336\026\021\172\053\350\166\217\111\020\230 -\167\271\143\134\213\063\227\165\366\013\214\262\253\133\336\164 -\040\045\077\343\363\021\371\207\150\206\065\161\303\035\214\055 -\353\345\032\254\017\163\325\202\131\100\200\323\002\003\001\000 -\001\243\201\247\060\201\244\060\014\006\003\125\035\023\004\005 -\060\003\001\001\377\060\104\006\003\125\035\037\004\075\060\073 -\060\071\240\067\240\065\206\063\150\164\164\160\072\057\057\146 -\145\144\151\162\056\143\157\155\163\151\147\156\056\143\157\056 -\151\154\057\143\162\154\057\103\157\155\123\151\147\156\123\145 -\143\165\162\145\144\103\101\056\143\162\154\060\016\006\003\125 -\035\017\001\001\377\004\004\003\002\001\206\060\037\006\003\125 -\035\043\004\030\060\026\200\024\301\113\355\160\266\367\076\174 -\000\073\000\217\307\076\016\105\237\036\135\354\060\035\006\003 -\125\035\016\004\026\004\024\301\113\355\160\266\367\076\174\000 -\073\000\217\307\076\016\105\237\036\135\354\060\015\006\011\052 -\206\110\206\367\015\001\001\005\005\000\003\202\001\001\000\026 -\317\356\222\023\120\253\173\024\236\063\266\102\040\152\324\025 -\275\011\253\374\162\350\357\107\172\220\254\121\301\144\116\351 -\210\275\103\105\201\343\146\043\077\022\206\115\031\344\005\260 -\346\067\302\215\332\006\050\311\017\211\244\123\251\165\077\260 -\226\373\253\114\063\125\371\170\046\106\157\033\066\230\373\102 -\166\301\202\271\216\336\373\105\371\143\033\142\073\071\006\312 -\167\172\250\074\011\317\154\066\075\017\012\105\113\151\026\032 -\105\175\063\003\145\371\122\161\220\046\225\254\114\014\365\213 -\223\077\314\165\164\205\230\272\377\142\172\115\037\211\376\256 -\275\224\000\231\277\021\245\334\340\171\305\026\013\175\002\141 -\035\352\205\371\002\025\117\347\132\211\116\024\157\343\067\113 -\205\365\301\074\141\340\375\005\101\262\222\177\303\035\240\320 -\256\122\144\140\153\030\306\046\234\330\365\144\344\066\032\142 -\237\212\017\076\377\155\116\031\126\116\040\221\154\237\064\063 -\072\064\127\120\072\157\201\136\006\306\365\076\174\116\216\053 -\316\145\006\056\135\322\052\123\164\136\323\156\047\236\217 -END - -# Trust for Certificate "ComSign Secured CA" -# Issuer: C=IL,O=ComSign,CN=ComSign Secured CA -# Serial Number:00:c7:28:47:09:b3:b8:6c:45:8c:1d:fa:24:f5:36:4e:e9 -# Subject: C=IL,O=ComSign,CN=ComSign Secured CA -# Not Valid Before: Wed Mar 24 11:37:20 2004 -# Not Valid After : Fri Mar 16 15:04:56 2029 -# Fingerprint (MD5): 40:01:25:06:8D:21:43:6A:0E:43:00:9C:E7:43:F3:D5 -# Fingerprint (SHA1): F9:CD:0E:2C:DA:76:24:C1:8F:BD:F0:F0:AB:B6:45:B8:F7:FE:D5:7A -CKA_CLASS CK_OBJECT_CLASS CKO_NSS_TRUST -CKA_TOKEN CK_BBOOL CK_TRUE -CKA_PRIVATE CK_BBOOL CK_FALSE -CKA_MODIFIABLE CK_BBOOL CK_FALSE -CKA_LABEL UTF8 "ComSign Secured CA" -CKA_CERT_SHA1_HASH MULTILINE_OCTAL -\371\315\016\054\332\166\044\301\217\275\360\360\253\266\105\270 -\367\376\325\172 -END -CKA_CERT_MD5_HASH MULTILINE_OCTAL -\100\001\045\006\215\041\103\152\016\103\000\234\347\103\363\325 -END -CKA_ISSUER MULTILINE_OCTAL -\060\074\061\033\060\031\006\003\125\004\003\023\022\103\157\155 -\123\151\147\156\040\123\145\143\165\162\145\144\040\103\101\061 -\020\060\016\006\003\125\004\012\023\007\103\157\155\123\151\147 -\156\061\013\060\011\006\003\125\004\006\023\002\111\114 -END -CKA_SERIAL_NUMBER MULTILINE_OCTAL -\002\021\000\307\050\107\011\263\270\154\105\214\035\372\044\365 -\066\116\351 -END -CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_MUST_VERIFY_TRUST -CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_MUST_VERIFY_TRUST -CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_TRUSTED_DELEGATOR -CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE - # # Certificate "Cybertrust Global Root" # @@ -9735,6 +8444,7 @@ CKA_VALUE MULTILINE_OCTAL \130\275\126\061\022\116\021\310\041\340\263\021\221\145\333\264 \246\210\070\316\125 END +CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE # Trust for Certificate "Cybertrust Global Root" # Issuer: CN=Cybertrust Global Root,O="Cybertrust, Inc" @@ -9901,6 +8611,7 @@ CKA_VALUE MULTILINE_OCTAL \204\324\076\040\205\367\112\075\053\234\375\052\012\011\115\352 \201\370\021\234 END +CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE # Trust for Certificate "ePKI Root Certification Authority" # Issuer: OU=ePKI Root Certification Authority,O="Chunghwa Telecom Co., Ltd.",C=TW @@ -9936,7 +8647,7 @@ CKA_SERIAL_NUMBER MULTILINE_OCTAL END CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_TRUSTED_DELEGATOR CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_TRUSTED_DELEGATOR -CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_TRUSTED_DELEGATOR +CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_MUST_VERIFY_TRUST CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE # @@ -10085,6 +8796,7 @@ CKA_VALUE MULTILINE_OCTAL \202\176\044\014\235\375\201\067\343\045\250\355\066\116\225\054 \311\234\220\332\354\251\102\074\255\266\002 END +CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE # Trust for Certificate "TUBITAK UEKAE Kok Sertifika Hizmet Saglayicisi - Surum 3" # Issuer: CN=T..B..TAK UEKAE K..k Sertifika Hizmet Sa..lay..c..s.. - S..r..m ...,OU=Kamu Sertifikasyon Merkezi,OU=Ulusal Elektronik ve Kriptoloji Ara..t..rma Enstit..s.. - UEKAE,O=T..rkiye Bilimsel ve Teknolojik Ara..t..rma Kurumu - T..B..TAK,L=Gebze - Kocaeli,C=TR @@ -10221,6 +8933,7 @@ CKA_VALUE MULTILINE_OCTAL \025\147\336\236\166\020\142\040\276\125\151\225\103\000\071\115 \366\356\260\132\116\111\104\124\130\137\102\203 END +CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE # Trust for Certificate "certSIGN ROOT CA" # Issuer: OU=certSIGN ROOT CA,O=certSIGN,C=RO @@ -10253,129 +8966,6 @@ CKA_SERIAL_NUMBER MULTILINE_OCTAL END CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_TRUSTED_DELEGATOR CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_TRUSTED_DELEGATOR -CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_TRUSTED_DELEGATOR -CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE - -# -# Certificate "CNNIC ROOT" -# -# Issuer: CN=CNNIC ROOT,O=CNNIC,C=CN -# Serial Number: 1228079105 (0x49330001) -# Subject: CN=CNNIC ROOT,O=CNNIC,C=CN -# Not Valid Before: Mon Apr 16 07:09:14 2007 -# Not Valid After : Fri Apr 16 07:09:14 2027 -# Fingerprint (MD5): 21:BC:82:AB:49:C4:13:3B:4B:B2:2B:5C:6B:90:9C:19 -# Fingerprint (SHA1): 8B:AF:4C:9B:1D:F0:2A:92:F7:DA:12:8E:B9:1B:AC:F4:98:60:4B:6F -CKA_CLASS CK_OBJECT_CLASS CKO_CERTIFICATE -CKA_TOKEN CK_BBOOL CK_TRUE -CKA_PRIVATE CK_BBOOL CK_FALSE -CKA_MODIFIABLE CK_BBOOL CK_FALSE -CKA_LABEL UTF8 "CNNIC ROOT" -CKA_CERTIFICATE_TYPE CK_CERTIFICATE_TYPE CKC_X_509 -CKA_SUBJECT MULTILINE_OCTAL -\060\062\061\013\060\011\006\003\125\004\006\023\002\103\116\061 -\016\060\014\006\003\125\004\012\023\005\103\116\116\111\103\061 -\023\060\021\006\003\125\004\003\023\012\103\116\116\111\103\040 -\122\117\117\124 -END -CKA_ID UTF8 "0" -CKA_ISSUER MULTILINE_OCTAL -\060\062\061\013\060\011\006\003\125\004\006\023\002\103\116\061 -\016\060\014\006\003\125\004\012\023\005\103\116\116\111\103\061 -\023\060\021\006\003\125\004\003\023\012\103\116\116\111\103\040 -\122\117\117\124 -END -CKA_SERIAL_NUMBER MULTILINE_OCTAL -\002\004\111\063\000\001 -END -CKA_VALUE MULTILINE_OCTAL -\060\202\003\125\060\202\002\075\240\003\002\001\002\002\004\111 -\063\000\001\060\015\006\011\052\206\110\206\367\015\001\001\005 -\005\000\060\062\061\013\060\011\006\003\125\004\006\023\002\103 -\116\061\016\060\014\006\003\125\004\012\023\005\103\116\116\111 -\103\061\023\060\021\006\003\125\004\003\023\012\103\116\116\111 -\103\040\122\117\117\124\060\036\027\015\060\067\060\064\061\066 -\060\067\060\071\061\064\132\027\015\062\067\060\064\061\066\060 -\067\060\071\061\064\132\060\062\061\013\060\011\006\003\125\004 -\006\023\002\103\116\061\016\060\014\006\003\125\004\012\023\005 -\103\116\116\111\103\061\023\060\021\006\003\125\004\003\023\012 -\103\116\116\111\103\040\122\117\117\124\060\202\001\042\060\015 -\006\011\052\206\110\206\367\015\001\001\001\005\000\003\202\001 -\017\000\060\202\001\012\002\202\001\001\000\323\065\367\077\163 -\167\255\350\133\163\027\302\321\157\355\125\274\156\352\350\244 -\171\262\154\303\243\357\341\237\261\073\110\205\365\232\134\041 -\042\020\054\305\202\316\332\343\232\156\067\341\207\054\334\271 -\014\132\272\210\125\337\375\252\333\037\061\352\001\361\337\071 -\001\301\023\375\110\122\041\304\125\337\332\330\263\124\166\272 -\164\261\267\175\327\300\350\366\131\305\115\310\275\255\037\024 -\332\337\130\104\045\062\031\052\307\176\176\216\256\070\260\060 -\173\107\162\011\061\360\060\333\303\033\166\051\273\151\166\116 -\127\371\033\144\242\223\126\267\157\231\156\333\012\004\234\021 -\343\200\037\313\143\224\020\012\251\341\144\202\061\371\214\047 -\355\246\231\000\366\160\223\030\370\241\064\206\243\335\172\302 -\030\171\366\172\145\065\317\220\353\275\063\223\237\123\253\163 -\073\346\233\064\040\057\035\357\251\035\143\032\240\200\333\003 -\057\371\046\032\206\322\215\273\251\276\122\072\207\147\110\015 -\277\264\240\330\046\276\043\137\163\067\177\046\346\222\004\243 -\177\317\040\247\267\363\072\312\313\231\313\002\003\001\000\001 -\243\163\060\161\060\021\006\011\140\206\110\001\206\370\102\001 -\001\004\004\003\002\000\007\060\037\006\003\125\035\043\004\030 -\060\026\200\024\145\362\061\255\052\367\367\335\122\226\012\307 -\002\301\016\357\246\325\073\021\060\017\006\003\125\035\023\001 -\001\377\004\005\060\003\001\001\377\060\013\006\003\125\035\017 -\004\004\003\002\001\376\060\035\006\003\125\035\016\004\026\004 -\024\145\362\061\255\052\367\367\335\122\226\012\307\002\301\016 -\357\246\325\073\021\060\015\006\011\052\206\110\206\367\015\001 -\001\005\005\000\003\202\001\001\000\113\065\356\314\344\256\277 -\303\156\255\237\225\073\113\077\133\036\337\127\051\242\131\312 -\070\342\271\032\377\236\346\156\062\335\036\256\352\065\267\365 -\223\221\116\332\102\341\303\027\140\120\362\321\134\046\271\202 -\267\352\155\344\234\204\347\003\171\027\257\230\075\224\333\307 -\272\000\347\270\277\001\127\301\167\105\062\014\073\361\264\034 -\010\260\375\121\240\241\335\232\035\023\066\232\155\267\307\074 -\271\341\305\331\027\372\203\325\075\025\240\074\273\036\013\342 -\310\220\077\250\206\014\374\371\213\136\205\313\117\133\113\142 -\021\107\305\105\174\005\057\101\261\236\020\151\033\231\226\340 -\125\171\373\116\206\231\270\224\332\206\070\152\223\243\347\313 -\156\345\337\352\041\125\211\234\175\175\177\230\365\000\211\356 -\343\204\300\134\226\265\305\106\352\106\340\205\125\266\033\311 -\022\326\301\315\315\200\363\002\001\074\310\151\313\105\110\143 -\330\224\320\354\205\016\073\116\021\145\364\202\214\246\075\256 -\056\042\224\011\310\134\352\074\201\135\026\052\003\227\026\125 -\011\333\212\101\202\236\146\233\021 -END - -# Trust for Certificate "CNNIC ROOT" -# Issuer: CN=CNNIC ROOT,O=CNNIC,C=CN -# Serial Number: 1228079105 (0x49330001) -# Subject: CN=CNNIC ROOT,O=CNNIC,C=CN -# Not Valid Before: Mon Apr 16 07:09:14 2007 -# Not Valid After : Fri Apr 16 07:09:14 2027 -# Fingerprint (MD5): 21:BC:82:AB:49:C4:13:3B:4B:B2:2B:5C:6B:90:9C:19 -# Fingerprint (SHA1): 8B:AF:4C:9B:1D:F0:2A:92:F7:DA:12:8E:B9:1B:AC:F4:98:60:4B:6F -CKA_CLASS CK_OBJECT_CLASS CKO_NSS_TRUST -CKA_TOKEN CK_BBOOL CK_TRUE -CKA_PRIVATE CK_BBOOL CK_FALSE -CKA_MODIFIABLE CK_BBOOL CK_FALSE -CKA_LABEL UTF8 "CNNIC ROOT" -CKA_CERT_SHA1_HASH MULTILINE_OCTAL -\213\257\114\233\035\360\052\222\367\332\022\216\271\033\254\364 -\230\140\113\157 -END -CKA_CERT_MD5_HASH MULTILINE_OCTAL -\041\274\202\253\111\304\023\073\113\262\053\134\153\220\234\031 -END -CKA_ISSUER MULTILINE_OCTAL -\060\062\061\013\060\011\006\003\125\004\006\023\002\103\116\061 -\016\060\014\006\003\125\004\012\023\005\103\116\116\111\103\061 -\023\060\021\006\003\125\004\003\023\012\103\116\116\111\103\040 -\122\117\117\124 -END -CKA_SERIAL_NUMBER MULTILINE_OCTAL -\002\004\111\063\000\001 -END -CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_TRUSTED_DELEGATOR -CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_MUST_VERIFY_TRUST CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_MUST_VERIFY_TRUST CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE @@ -10491,6 +9081,7 @@ CKA_VALUE MULTILINE_OCTAL \262\231\042\341\301\053\307\234\370\363\137\250\202\022\353\031 \021\055 END +CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE # Trust for Certificate "GeoTrust Primary Certification Authority - G3" # Issuer: CN=GeoTrust Primary Certification Authority - G3,OU=(c) 2008 GeoTrust Inc. - For authorized use only,O=GeoTrust Inc.,C=US @@ -10530,7 +9121,7 @@ CKA_SERIAL_NUMBER MULTILINE_OCTAL END CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_TRUSTED_DELEGATOR CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_TRUSTED_DELEGATOR -CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_TRUSTED_DELEGATOR +CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_MUST_VERIFY_TRUST CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE # @@ -10619,6 +9210,7 @@ CKA_VALUE MULTILINE_OCTAL \135\235\312\256\275\023\051\104\015\047\133\250\347\150\234\022 \367\130\077\056\162\002\127\243\217\241\024\056 END +CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE # Trust for Certificate "thawte Primary Root CA - G2" # Issuer: CN=thawte Primary Root CA - G2,OU="(c) 2007 thawte, Inc. - For authorized use only",O="thawte, Inc.",C=US @@ -10657,7 +9249,7 @@ CKA_SERIAL_NUMBER MULTILINE_OCTAL END CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_TRUSTED_DELEGATOR CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_MUST_VERIFY_TRUST -CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_TRUSTED_DELEGATOR +CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_MUST_VERIFY_TRUST CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE # @@ -10778,6 +9370,7 @@ CKA_VALUE MULTILINE_OCTAL \034\302\171\334\166\051\257\316\305\054\144\004\136\210\066\156 \061\324\100\032\142\064\066\077\065\001\256\254\143\240 END +CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE # Trust for Certificate "thawte Primary Root CA - G3" # Issuer: CN=thawte Primary Root CA - G3,OU="(c) 2008 thawte, Inc. - For authorized use only",OU=Certification Services Division,O="thawte, Inc.",C=US @@ -10819,7 +9412,7 @@ CKA_SERIAL_NUMBER MULTILINE_OCTAL END CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_TRUSTED_DELEGATOR CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_MUST_VERIFY_TRUST -CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_TRUSTED_DELEGATOR +CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_MUST_VERIFY_TRUST CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE # @@ -10913,6 +9506,7 @@ CKA_VALUE MULTILINE_OCTAL \254\076\250\201\022\320\313\272\320\222\013\266\236\226\252\004 \017\212 END +CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE # Trust for Certificate "GeoTrust Primary Certification Authority - G2" # Issuer: CN=GeoTrust Primary Certification Authority - G2,OU=(c) 2007 GeoTrust Inc. - For authorized use only,O=GeoTrust Inc.,C=US @@ -10952,7 +9546,7 @@ CKA_SERIAL_NUMBER MULTILINE_OCTAL END CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_TRUSTED_DELEGATOR CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_TRUSTED_DELEGATOR -CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_TRUSTED_DELEGATOR +CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_MUST_VERIFY_TRUST CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE # @@ -11082,6 +9676,7 @@ CKA_VALUE MULTILINE_OCTAL \377\303\125\210\203\113\357\005\222\006\161\362\270\230\223\267 \354\315\202\141\361\070\346\117\227\230\052\132\215 END +CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE # Trust for Certificate "VeriSign Universal Root Certification Authority" # Issuer: CN=VeriSign Universal Root Certification Authority,OU="(c) 2008 VeriSign, Inc. - For authorized use only",OU=VeriSign Trust Network,O="VeriSign, Inc.",C=US @@ -11123,7 +9718,7 @@ CKA_SERIAL_NUMBER MULTILINE_OCTAL END CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_TRUSTED_DELEGATOR CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_TRUSTED_DELEGATOR -CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_TRUSTED_DELEGATOR +CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_MUST_VERIFY_TRUST CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE # @@ -11236,6 +9831,7 @@ CKA_VALUE MULTILINE_OCTAL \051\337\033\052\141\173\161\321\336\363\300\345\015\072\112\252 \055\247\330\206\052\335\056\020 END +CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE # Trust for Certificate "VeriSign Class 3 Public Primary Certification Authority - G4" # Issuer: CN=VeriSign Class 3 Public Primary Certification Authority - G4,OU="(c) 2007 VeriSign, Inc. - For authorized use only",OU=VeriSign Trust Network,O="VeriSign, Inc.",C=US @@ -11278,7 +9874,7 @@ CKA_SERIAL_NUMBER MULTILINE_OCTAL END CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_TRUSTED_DELEGATOR CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_TRUSTED_DELEGATOR -CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_TRUSTED_DELEGATOR +CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_MUST_VERIFY_TRUST CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE # @@ -11395,6 +9991,7 @@ CKA_VALUE MULTILINE_OCTAL \264\056\165\225\200\121\152\113\060\246\260\142\241\223\361\233 \330\316\304\143\165\077\131\107\261 END +CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE # Trust for Certificate "NetLock Arany (Class Gold) Főtanúsítvány" # Issuer: CN=NetLock Arany (Class Gold) F..tan..s..tv..ny,OU=Tan..s..tv..nykiad..k (Certification Services),O=NetLock Kft.,L=Budapest,C=HU @@ -11434,7 +10031,7 @@ CKA_SERIAL_NUMBER MULTILINE_OCTAL END CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_TRUSTED_DELEGATOR CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_TRUSTED_DELEGATOR -CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_TRUSTED_DELEGATOR +CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_MUST_VERIFY_TRUST CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE # @@ -11568,6 +10165,7 @@ CKA_VALUE MULTILINE_OCTAL \203\213\235\036\322\122\244\314\035\157\260\230\155\224\061\265 \370\161\012\334\271\374\175\062\140\346\353\257\212\001 END +CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE # Trust for Certificate "Staat der Nederlanden Root CA - G2" # Issuer: CN=Staat der Nederlanden Root CA - G2,O=Staat der Nederlanden,C=NL @@ -11602,7 +10200,7 @@ CKA_SERIAL_NUMBER MULTILINE_OCTAL END CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_TRUSTED_DELEGATOR CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_TRUSTED_DELEGATOR -CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_TRUSTED_DELEGATOR +CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_MUST_VERIFY_TRUST CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE # @@ -11693,6 +10291,7 @@ CKA_VALUE MULTILINE_OCTAL \237\123\330\103\016\135\326\143\202\161\035\200\164\312\366\342 \002\153\331\132 END +CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE # Trust for Certificate "Hongkong Post Root CA 1" # Issuer: CN=Hongkong Post Root CA 1,O=Hongkong Post,C=HK @@ -11823,6 +10422,7 @@ CKA_VALUE MULTILINE_OCTAL \101\047\111\100\356\336\346\043\104\071\334\241\042\326\272\003 \362 END +CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE # Trust for Certificate "SecureSign RootCA11" # Issuer: CN=SecureSign RootCA11,O="Japan Certification Services, Inc.",C=JP @@ -11988,6 +10588,7 @@ CKA_VALUE MULTILINE_OCTAL \147\116\151\206\103\223\070\373\266\333\117\203\221\324\140\176 \113\076\053\070\007\125\230\136\244 END +CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE # Trust for Certificate "ACEDICOM Root" # Issuer: C=ES,O=EDICOM,OU=PKI,CN=ACEDICOM Root @@ -12021,7 +10622,7 @@ CKA_SERIAL_NUMBER MULTILINE_OCTAL END CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_TRUSTED_DELEGATOR CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_TRUSTED_DELEGATOR -CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_TRUSTED_DELEGATOR +CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_MUST_VERIFY_TRUST CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE @@ -12134,6 +10735,7 @@ CKA_VALUE MULTILINE_OCTAL \034\303\165\106\256\065\005\246\366\134\075\041\356\126\360\311 \202\042\055\172\124\253\160\303\175\042\145\202\160\226 END +CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE # Trust for Certificate "Microsec e-Szigno Root CA 2009" # Issuer: E=info@e-szigno.hu,CN=Microsec e-Szigno Root CA 2009,O=Microsec Ltd.,L=Budapest,C=HU @@ -12171,7 +10773,7 @@ CKA_SERIAL_NUMBER MULTILINE_OCTAL END CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_TRUSTED_DELEGATOR CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_TRUSTED_DELEGATOR -CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_TRUSTED_DELEGATOR +CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_MUST_VERIFY_TRUST CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE # @@ -12265,6 +10867,7 @@ CKA_VALUE MULTILINE_OCTAL \316\323\142\120\145\036\353\222\227\203\061\331\263\265\312\107 \130\077\137 END +CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE # Trust for Certificate "GlobalSign Root CA - R3" # Issuer: CN=GlobalSign,O=GlobalSign,OU=GlobalSign Root CA - R3 @@ -12298,7 +10901,7 @@ CKA_SERIAL_NUMBER MULTILINE_OCTAL END CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_TRUSTED_DELEGATOR CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_TRUSTED_DELEGATOR -CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_TRUSTED_DELEGATOR +CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_MUST_VERIFY_TRUST CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE # @@ -12437,6 +11040,7 @@ CKA_VALUE MULTILINE_OCTAL \214\263\042\350\113\174\125\306\235\372\243\024\273\145\205\156 \156\117\022\176\012\074\235\225 END +CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE # Trust for Certificate "Autoridad de Certificacion Firmaprofesional CIF A62634068" # Issuer: CN=Autoridad de Certificacion Firmaprofesional CIF A62634068,C=ES @@ -12471,7 +11075,7 @@ CKA_SERIAL_NUMBER MULTILINE_OCTAL END CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_TRUSTED_DELEGATOR CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_TRUSTED_DELEGATOR -CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_TRUSTED_DELEGATOR +CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_MUST_VERIFY_TRUST CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE # @@ -12605,6 +11209,7 @@ CKA_VALUE MULTILINE_OCTAL \377\356\336\200\330\055\321\070\325\136\055\013\230\175\076\154 \333\374\046\210\307 END +CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE # Trust for Certificate "Izenpe.com" # Issuer: CN=Izenpe.com,O=IZENPE S.A.,C=ES @@ -12638,7 +11243,7 @@ CKA_SERIAL_NUMBER MULTILINE_OCTAL END CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_TRUSTED_DELEGATOR CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_MUST_VERIFY_TRUST -CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_TRUSTED_DELEGATOR +CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_MUST_VERIFY_TRUST CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE # @@ -12809,6 +11414,7 @@ CKA_VALUE MULTILINE_OCTAL \006\274\046\020\155\067\235\354\335\170\214\174\200\305\360\331 \167\110\320 END +CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE # Trust for Certificate "Chambers of Commerce Root - 2008" # Issuer: CN=Chambers of Commerce Root - 2008,O=AC Camerfirma S.A.,serialNumber=A82743287,L=Madrid (see current address at www.camerfirma.com/address),C=EU @@ -12849,7 +11455,7 @@ CKA_SERIAL_NUMBER MULTILINE_OCTAL END CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_TRUSTED_DELEGATOR CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_TRUSTED_DELEGATOR -CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_TRUSTED_DELEGATOR +CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_MUST_VERIFY_TRUST CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE # @@ -13017,6 +11623,7 @@ CKA_VALUE MULTILINE_OCTAL \043\167\330\106\113\171\155\366\214\355\072\177\140\021\170\364 \351\233\256\325\124\300\164\200\321\013\102\237\301 END +CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE # Trust for Certificate "Global Chambersign Root - 2008" # Issuer: CN=Global Chambersign Root - 2008,O=AC Camerfirma S.A.,serialNumber=A82743287,L=Madrid (see current address at www.camerfirma.com/address),C=EU @@ -13056,7 +11663,7 @@ CKA_SERIAL_NUMBER MULTILINE_OCTAL END CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_TRUSTED_DELEGATOR CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_TRUSTED_DELEGATOR -CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_TRUSTED_DELEGATOR +CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_MUST_VERIFY_TRUST CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE # @@ -14883,6 +13490,7 @@ CKA_VALUE MULTILINE_OCTAL \026\262\103\011\014\115\366\247\153\264\231\204\145\312\172\210 \342\342\104\276\134\367\352\034\365 END +CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE # Trust for Certificate "Go Daddy Root Certificate Authority - G2" # Issuer: CN=Go Daddy Root Certificate Authority - G2,O="GoDaddy.com, Inc.",L=Scottsdale,ST=Arizona,C=US @@ -14920,7 +13528,7 @@ CKA_SERIAL_NUMBER MULTILINE_OCTAL END CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_TRUSTED_DELEGATOR CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_MUST_VERIFY_TRUST -CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_TRUSTED_DELEGATOR +CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_MUST_VERIFY_TRUST CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE # @@ -15032,6 +13640,7 @@ CKA_VALUE MULTILINE_OCTAL \241\365\146\005\056\177\071\025\251\052\373\120\213\216\205\151 \364 END +CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE # Trust for Certificate "Starfield Root Certificate Authority - G2" # Issuer: CN=Starfield Root Certificate Authority - G2,O="Starfield Technologies, Inc.",L=Scottsdale,ST=Arizona,C=US @@ -15070,7 +13679,7 @@ CKA_SERIAL_NUMBER MULTILINE_OCTAL END CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_TRUSTED_DELEGATOR CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_MUST_VERIFY_TRUST -CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_TRUSTED_DELEGATOR +CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_MUST_VERIFY_TRUST CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE # @@ -15183,6 +13792,7 @@ CKA_VALUE MULTILINE_OCTAL \157\002\213\147\015\115\046\127\161\332\040\374\301\112\120\215 \261\050\272 END +CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE # Trust for Certificate "Starfield Services Root Certificate Authority - G2" # Issuer: CN=Starfield Services Root Certificate Authority - G2,O="Starfield Technologies, Inc.",L=Scottsdale,ST=Arizona,C=US @@ -15221,7 +13831,7 @@ CKA_SERIAL_NUMBER MULTILINE_OCTAL END CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_TRUSTED_DELEGATOR CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_MUST_VERIFY_TRUST -CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_TRUSTED_DELEGATOR +CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_MUST_VERIFY_TRUST CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE # @@ -15313,6 +13923,7 @@ CKA_VALUE MULTILINE_OCTAL \236\132\116\145\265\224\256\033\337\051\260\026\361\277\000\236 \007\072\027\144\265\004\265\043\041\231\012\225\073\227\174\357 END +CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE # Trust for Certificate "AffirmTrust Commercial" # Issuer: CN=AffirmTrust Commercial,O=AffirmTrust,C=US @@ -15438,6 +14049,7 @@ CKA_VALUE MULTILINE_OCTAL \307\167\257\144\250\223\337\366\151\203\202\140\362\111\102\064 \355\132\000\124\205\034\026\066\222\014\134\372\246\255\277\333 END +CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE # Trust for Certificate "AffirmTrust Networking" # Issuer: CN=AffirmTrust Networking,O=AffirmTrust,C=US @@ -15595,6 +14207,7 @@ CKA_VALUE MULTILINE_OCTAL \200\064\375\277\357\006\243\335\130\305\205\075\076\217\376\236 \051\340\266\270\011\150\031\034\030\103 END +CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE # Trust for Certificate "AffirmTrust Premium" # Issuer: CN=AffirmTrust Premium,O=AffirmTrust,C=US @@ -15700,6 +14313,7 @@ CKA_VALUE MULTILINE_OCTAL \157\256\144\372\130\345\213\036\343\143\276\265\201\315\157\002 \214\171 END +CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE # Trust for Certificate "AffirmTrust Premium ECC" # Issuer: CN=AffirmTrust Premium ECC,O=AffirmTrust,C=US @@ -15838,6 +14452,7 @@ CKA_VALUE MULTILINE_OCTAL \013\047\002\065\051\261\100\225\347\371\350\234\125\210\031\106 \326\267\064\365\176\316\071\232\331\070\361\121\367\117\054 END +CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE # Trust for Certificate "Certum Trusted Network CA" # Issuer: CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL @@ -15874,7 +14489,7 @@ CKA_SERIAL_NUMBER MULTILINE_OCTAL END CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_TRUSTED_DELEGATOR CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_TRUSTED_DELEGATOR -CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_TRUSTED_DELEGATOR +CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_MUST_VERIFY_TRUST CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE # @@ -16007,6 +14622,7 @@ CKA_VALUE MULTILINE_OCTAL \331\027\026\026\012\053\206\337\217\001\031\032\345\273\202\143 \377\276\013\166\026\136\067\067\346\330\164\227\242\231\105\171 END +CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE # Trust for Certificate "Certinomis - Autorité Racine" # Issuer: CN=Certinomis - Autorit.. Racine,OU=0002 433998903,O=Certinomis,C=FR @@ -16141,6 +14757,7 @@ CKA_VALUE MULTILINE_OCTAL \142\047\254\145\042\327\323\074\306\345\216\262\123\314\111\316 \274\060\376\173\016\063\220\373\355\322\024\221\037\007\257 END +CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE # Trust for Certificate "TWCA Root Certification Authority" # Issuer: CN=TWCA Root Certification Authority,OU=Root CA,O=TAIWAN-CA,C=TW @@ -16176,7 +14793,7 @@ CKA_SERIAL_NUMBER MULTILINE_OCTAL END CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_TRUSTED_DELEGATOR CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_TRUSTED_DELEGATOR -CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_TRUSTED_DELEGATOR +CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_MUST_VERIFY_TRUST CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE # @@ -17531,6 +16148,7 @@ CKA_VALUE MULTILINE_OCTAL \112\071\321\005\111\013\247\266\067\201\245\135\214\252\063\136 \201\050\174\247\175\047\353\000\256\215\067 END +CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE # Trust for Certificate "Security Communication RootCA2" # Issuer: OU=Security Communication RootCA2,O="SECOM Trust Systems CO.,LTD.",C=JP @@ -17565,7 +16183,7 @@ CKA_SERIAL_NUMBER MULTILINE_OCTAL END CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_TRUSTED_DELEGATOR CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_TRUSTED_DELEGATOR -CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_TRUSTED_DELEGATOR +CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_MUST_VERIFY_TRUST CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE # @@ -17713,6 +16331,7 @@ CKA_VALUE MULTILINE_OCTAL \234\235\245\140\225\072\122\177\365\321\253\010\156\363\356\133 \371\210\075\176\270\157\156\003\344\102 END +CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE # Trust for Certificate "EC-ACC" # Issuer: CN=EC-ACC,OU=Jerarquia Entitats de Certificacio Catalanes,OU=Vegeu https://www.catcert.net/verarrel (c)03,OU=Serveis Publics de Certificacio,O=Agencia Catalana de Certificacio (NIF Q-0801176-I),C=ES @@ -17875,6 +16494,7 @@ CKA_VALUE MULTILINE_OCTAL \227\265\235\232\231\115\260\074\370\112\000\233\144\335\237\071 \113\321\047\327\270 END +CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE # Trust for Certificate "Hellenic Academic and Research Institutions RootCA 2011" # Issuer: CN=Hellenic Academic and Research Institutions RootCA 2011,O=Hellenic Academic and Research Institutions Cert. Authority,C=GR @@ -17913,7 +16533,7 @@ CKA_SERIAL_NUMBER MULTILINE_OCTAL END CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_TRUSTED_DELEGATOR CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_TRUSTED_DELEGATOR -CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_TRUSTED_DELEGATOR +CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_MUST_VERIFY_TRUST CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE # Explicitly Distrust "MITM subCA 1 issued by Trustwave", Bug 724929 @@ -18110,6 +16730,7 @@ CKA_VALUE MULTILINE_OCTAL \056\163\352\146\050\170\315\035\024\277\240\217\057\056\270\056 \216\362\024\212\314\351\265\174\373\154\235\014\245\341\226 END +CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE # Trust for "Actalis Authentication Root CA" # Issuer: CN=Actalis Authentication Root CA,O=Actalis S.p.A./03358520967,L=Milan,C=IT @@ -18145,7 +16766,7 @@ CKA_SERIAL_NUMBER MULTILINE_OCTAL END CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_TRUSTED_DELEGATOR CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_TRUSTED_DELEGATOR -CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_TRUSTED_DELEGATOR +CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_MUST_VERIFY_TRUST CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE # @@ -18240,6 +16861,7 @@ CKA_VALUE MULTILINE_OCTAL \373\072\162\035\315\366\045\210\036\227\314\041\234\051\001\015 \145\353\127\331\363\127\226\273\110\315\201 END +CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE # Trust for "Trustis FPS Root CA" # Issuer: OU=Trustis FPS Root CA,O=Trustis Limited,C=GB @@ -18440,6 +17062,7 @@ CKA_VALUE MULTILINE_OCTAL \266\323\173\002\366\343\270\324\011\156\153\236\165\204\071\346 \177\045\245\362\110\000\300\244\001\332\077 END +CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE # Trust for "StartCom Certification Authority" # Issuer: CN=StartCom Certification Authority,OU=Secure Digital Certificate Signing,O=StartCom Ltd.,C=IL @@ -18476,7 +17099,7 @@ CKA_SERIAL_NUMBER MULTILINE_OCTAL END CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_TRUSTED_DELEGATOR CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_TRUSTED_DELEGATOR -CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_TRUSTED_DELEGATOR +CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_MUST_VERIFY_TRUST CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE # @@ -18604,6 +17227,7 @@ CKA_VALUE MULTILINE_OCTAL \301\332\070\133\343\251\352\346\241\272\171\357\163\330\266\123 \127\055\366\320\341\327\110 END +CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE # Trust for "StartCom Certification Authority G2" # Issuer: CN=StartCom Certification Authority G2,O=StartCom Ltd.,C=IL @@ -18638,7 +17262,7 @@ CKA_SERIAL_NUMBER MULTILINE_OCTAL END CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_TRUSTED_DELEGATOR CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_TRUSTED_DELEGATOR -CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_TRUSTED_DELEGATOR +CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_MUST_VERIFY_TRUST CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE # @@ -18763,6 +17387,7 @@ CKA_VALUE MULTILINE_OCTAL \143\135\132\130\342\057\343\035\344\251\326\320\012\320\236\277 \327\201\011\361\311\307\046\015\254\230\026\126\240 END +CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE # Trust for "Buypass Class 2 Root CA" # Issuer: CN=Buypass Class 2 Root CA,O=Buypass AS-983163327,C=NO @@ -18921,6 +17546,7 @@ CKA_VALUE MULTILINE_OCTAL \343\370\073\273\334\115\327\144\362\121\276\346\252\253\132\351 \061\356\006\274\163\277\023\142\012\237\307\271\227 END +CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE # Trust for "Buypass Class 3 Root CA" # Issuer: CN=Buypass Class 3 Root CA,O=Buypass AS-983163327,C=NO @@ -19062,6 +17688,7 @@ CKA_VALUE MULTILINE_OCTAL \321\106\232\073\074\170\270\157\241\320\015\144\242\170\036\051 \116\223\303\244\124\024\133 END +CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE # Trust for "T-TeleSec GlobalRoot Class 3" # Issuer: CN=T-TeleSec GlobalRoot Class 3,OU=T-Systems Trust Center,O=T-Systems Enterprise Services GmbH,C=DE @@ -19210,6 +17837,7 @@ CKA_VALUE MULTILINE_OCTAL \031\120\211\140\314\351\044\225\017\302\313\035\362\157\166\220 \307\314\165\301\226\305\235 END +CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE # Trust for "EE Certification Centre Root CA" # Issuer: E=pki@sk.ee,CN=EE Certification Centre Root CA,O=AS Sertifitseerimiskeskus,C=EE @@ -19247,7 +17875,7 @@ CKA_SERIAL_NUMBER MULTILINE_OCTAL END CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_TRUSTED_DELEGATOR CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_MUST_VERIFY_TRUST -CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_TRUSTED_DELEGATOR +CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_MUST_VERIFY_TRUST CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE # Explicitly Distrust "TURKTRUST Mis-issued Intermediate CA 1", Bug 825022 @@ -19439,6 +18067,7 @@ CKA_VALUE MULTILINE_OCTAL \062\015\135\010\125\164\377\214\230\320\012\246\204\152\321\071 \175 END +CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE # Trust for "TURKTRUST Certificate Services Provider Root 2007" # Issuer: O=T..RKTRUST Bilgi ..leti..im ve Bili..im G..venli..i Hizmetleri A...,L=Ankara,C=TR,CN=T..RKTRUST Elektronik Sertifika Hizmet Sa..lay..c..s.. @@ -19480,7 +18109,7 @@ CKA_SERIAL_NUMBER MULTILINE_OCTAL END CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_TRUSTED_DELEGATOR CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_MUST_VERIFY_TRUST -CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_TRUSTED_DELEGATOR +CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_MUST_VERIFY_TRUST CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE # @@ -19587,6 +18216,7 @@ CKA_VALUE MULTILINE_OCTAL \046\210\160\327\352\221\315\076\271\312\300\220\156\132\306\136 \164\145\327\134\376\243\342 END +CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE # Trust for "D-TRUST Root Class 3 CA 2 2009" # Issuer: CN=D-TRUST Root Class 3 CA 2 2009,O=D-Trust GmbH,C=DE @@ -19730,6 +18360,7 @@ CKA_VALUE MULTILINE_OCTAL \075\323\056\243\025\274\250\346\046\345\157\303\334\270\003\041 \352\237\026\361\054\124\265 END +CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE # Trust for "D-TRUST Root Class 3 CA 2 EV 2009" # Issuer: CN=D-TRUST Root Class 3 CA 2 EV 2009,O=D-Trust GmbH,C=DE @@ -19979,6 +18610,7 @@ CKA_VALUE MULTILINE_OCTAL \316\035\222\233\321\151\263\377\277\361\222\012\141\065\077\335 \376\206\364\274\340\032\161\263\142\246 END +CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE # Trust for "PSCProcert" # Issuer: E=acraiz@suscerte.gob.ve,OU=Superintendencia de Servicios de Certificacion Electronica,O=Sistema Nacional de Certificacion Electronica,ST=Distrito Capital,L=Caracas,C=VE,CN=Autoridad de Certificacion Raiz del Estado Venezolano @@ -20026,154 +18658,6 @@ CKA_SERIAL_NUMBER MULTILINE_OCTAL END CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_TRUSTED_DELEGATOR CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_TRUSTED_DELEGATOR -CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_TRUSTED_DELEGATOR -CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE - -# -# Certificate "China Internet Network Information Center EV Certificates Root" -# -# Issuer: CN=China Internet Network Information Center EV Certificates Root,O=China Internet Network Information Center,C=CN -# Serial Number: 1218379777 (0x489f0001) -# Subject: CN=China Internet Network Information Center EV Certificates Root,O=China Internet Network Information Center,C=CN -# Not Valid Before: Tue Aug 31 07:11:25 2010 -# Not Valid After : Sat Aug 31 07:11:25 2030 -# Fingerprint (MD5): 55:5D:63:00:97:BD:6A:97:F5:67:AB:4B:FB:6E:63:15 -# Fingerprint (SHA1): 4F:99:AA:93:FB:2B:D1:37:26:A1:99:4A:CE:7F:F0:05:F2:93:5D:1E -CKA_CLASS CK_OBJECT_CLASS CKO_CERTIFICATE -CKA_TOKEN CK_BBOOL CK_TRUE -CKA_PRIVATE CK_BBOOL CK_FALSE -CKA_MODIFIABLE CK_BBOOL CK_FALSE -CKA_LABEL UTF8 "China Internet Network Information Center EV Certificates Root" -CKA_CERTIFICATE_TYPE CK_CERTIFICATE_TYPE CKC_X_509 -CKA_SUBJECT MULTILINE_OCTAL -\060\201\212\061\013\060\011\006\003\125\004\006\023\002\103\116 -\061\062\060\060\006\003\125\004\012\014\051\103\150\151\156\141 -\040\111\156\164\145\162\156\145\164\040\116\145\164\167\157\162 -\153\040\111\156\146\157\162\155\141\164\151\157\156\040\103\145 -\156\164\145\162\061\107\060\105\006\003\125\004\003\014\076\103 -\150\151\156\141\040\111\156\164\145\162\156\145\164\040\116\145 -\164\167\157\162\153\040\111\156\146\157\162\155\141\164\151\157 -\156\040\103\145\156\164\145\162\040\105\126\040\103\145\162\164 -\151\146\151\143\141\164\145\163\040\122\157\157\164 -END -CKA_ID UTF8 "0" -CKA_ISSUER MULTILINE_OCTAL -\060\201\212\061\013\060\011\006\003\125\004\006\023\002\103\116 -\061\062\060\060\006\003\125\004\012\014\051\103\150\151\156\141 -\040\111\156\164\145\162\156\145\164\040\116\145\164\167\157\162 -\153\040\111\156\146\157\162\155\141\164\151\157\156\040\103\145 -\156\164\145\162\061\107\060\105\006\003\125\004\003\014\076\103 -\150\151\156\141\040\111\156\164\145\162\156\145\164\040\116\145 -\164\167\157\162\153\040\111\156\146\157\162\155\141\164\151\157 -\156\040\103\145\156\164\145\162\040\105\126\040\103\145\162\164 -\151\146\151\143\141\164\145\163\040\122\157\157\164 -END -CKA_SERIAL_NUMBER MULTILINE_OCTAL -\002\004\110\237\000\001 -END -CKA_VALUE MULTILINE_OCTAL -\060\202\003\367\060\202\002\337\240\003\002\001\002\002\004\110 -\237\000\001\060\015\006\011\052\206\110\206\367\015\001\001\005 -\005\000\060\201\212\061\013\060\011\006\003\125\004\006\023\002 -\103\116\061\062\060\060\006\003\125\004\012\014\051\103\150\151 -\156\141\040\111\156\164\145\162\156\145\164\040\116\145\164\167 -\157\162\153\040\111\156\146\157\162\155\141\164\151\157\156\040 -\103\145\156\164\145\162\061\107\060\105\006\003\125\004\003\014 -\076\103\150\151\156\141\040\111\156\164\145\162\156\145\164\040 -\116\145\164\167\157\162\153\040\111\156\146\157\162\155\141\164 -\151\157\156\040\103\145\156\164\145\162\040\105\126\040\103\145 -\162\164\151\146\151\143\141\164\145\163\040\122\157\157\164\060 -\036\027\015\061\060\060\070\063\061\060\067\061\061\062\065\132 -\027\015\063\060\060\070\063\061\060\067\061\061\062\065\132\060 -\201\212\061\013\060\011\006\003\125\004\006\023\002\103\116\061 -\062\060\060\006\003\125\004\012\014\051\103\150\151\156\141\040 -\111\156\164\145\162\156\145\164\040\116\145\164\167\157\162\153 -\040\111\156\146\157\162\155\141\164\151\157\156\040\103\145\156 -\164\145\162\061\107\060\105\006\003\125\004\003\014\076\103\150 -\151\156\141\040\111\156\164\145\162\156\145\164\040\116\145\164 -\167\157\162\153\040\111\156\146\157\162\155\141\164\151\157\156 -\040\103\145\156\164\145\162\040\105\126\040\103\145\162\164\151 -\146\151\143\141\164\145\163\040\122\157\157\164\060\202\001\042 -\060\015\006\011\052\206\110\206\367\015\001\001\001\005\000\003 -\202\001\017\000\060\202\001\012\002\202\001\001\000\233\176\163 -\356\275\073\170\252\144\103\101\365\120\337\224\362\056\262\215 -\112\216\106\124\322\041\022\310\071\062\102\006\351\203\325\237 -\122\355\345\147\003\073\124\301\214\231\231\314\351\300\017\377 -\015\331\204\021\262\270\321\313\133\334\036\371\150\061\144\341 -\233\372\164\353\150\271\040\225\367\306\017\215\107\254\132\006 -\335\141\253\342\354\330\237\027\055\234\312\074\065\227\125\161 -\315\103\205\261\107\026\365\054\123\200\166\317\323\000\144\275 -\100\231\335\314\330\333\304\237\326\023\137\101\203\213\371\015 -\207\222\126\064\154\032\020\013\027\325\132\034\227\130\204\074 -\204\032\056\134\221\064\156\031\137\177\027\151\305\145\357\153 -\041\306\325\120\072\277\141\271\005\215\357\157\064\072\262\157 -\024\143\277\026\073\233\251\052\375\267\053\070\146\006\305\054 -\342\252\147\036\105\247\215\004\146\102\366\217\053\357\210\040 -\151\217\062\214\024\163\332\053\206\221\143\042\232\362\247\333 -\316\211\213\253\135\307\024\301\133\060\152\037\261\267\236\056 -\201\001\002\355\317\226\136\143\333\250\346\070\267\002\003\001 -\000\001\243\143\060\141\060\037\006\003\125\035\043\004\030\060 -\026\200\024\174\162\113\071\307\300\333\142\245\117\233\252\030 -\064\222\242\312\203\202\131\060\017\006\003\125\035\023\001\001 -\377\004\005\060\003\001\001\377\060\016\006\003\125\035\017\001 -\001\377\004\004\003\002\001\006\060\035\006\003\125\035\016\004 -\026\004\024\174\162\113\071\307\300\333\142\245\117\233\252\030 -\064\222\242\312\203\202\131\060\015\006\011\052\206\110\206\367 -\015\001\001\005\005\000\003\202\001\001\000\052\303\307\103\067 -\217\335\255\244\262\014\356\334\024\155\217\050\244\230\111\313 -\014\200\352\363\355\043\146\165\175\305\323\041\147\171\321\163 -\305\265\003\267\130\254\014\124\057\306\126\023\017\061\332\006 -\347\145\073\035\157\066\333\310\035\371\375\200\006\312\243\075 -\146\026\250\235\114\026\175\300\225\106\265\121\344\342\037\327 -\352\006\115\143\215\226\214\357\347\063\127\102\072\353\214\301 -\171\310\115\166\175\336\366\261\267\201\340\240\371\241\170\106 -\027\032\126\230\360\116\075\253\034\355\354\071\334\007\110\367 -\143\376\006\256\302\244\134\152\133\062\210\305\307\063\205\254 -\146\102\107\302\130\044\231\341\345\076\345\165\054\216\103\326 -\135\074\170\036\250\225\202\051\120\321\321\026\272\357\301\276 -\172\331\264\330\314\036\114\106\341\167\261\061\253\275\052\310 -\316\217\156\241\135\177\003\165\064\344\255\211\105\124\136\276 -\256\050\245\273\077\170\171\353\163\263\012\015\375\276\311\367 -\126\254\366\267\355\057\233\041\051\307\070\266\225\304\004\362 -\303\055\375\024\052\220\231\271\007\314\237 -END - -# Trust for "China Internet Network Information Center EV Certificates Root" -# Issuer: CN=China Internet Network Information Center EV Certificates Root,O=China Internet Network Information Center,C=CN -# Serial Number: 1218379777 (0x489f0001) -# Subject: CN=China Internet Network Information Center EV Certificates Root,O=China Internet Network Information Center,C=CN -# Not Valid Before: Tue Aug 31 07:11:25 2010 -# Not Valid After : Sat Aug 31 07:11:25 2030 -# Fingerprint (MD5): 55:5D:63:00:97:BD:6A:97:F5:67:AB:4B:FB:6E:63:15 -# Fingerprint (SHA1): 4F:99:AA:93:FB:2B:D1:37:26:A1:99:4A:CE:7F:F0:05:F2:93:5D:1E -CKA_CLASS CK_OBJECT_CLASS CKO_NSS_TRUST -CKA_TOKEN CK_BBOOL CK_TRUE -CKA_PRIVATE CK_BBOOL CK_FALSE -CKA_MODIFIABLE CK_BBOOL CK_FALSE -CKA_LABEL UTF8 "China Internet Network Information Center EV Certificates Root" -CKA_CERT_SHA1_HASH MULTILINE_OCTAL -\117\231\252\223\373\053\321\067\046\241\231\112\316\177\360\005 -\362\223\135\036 -END -CKA_CERT_MD5_HASH MULTILINE_OCTAL -\125\135\143\000\227\275\152\227\365\147\253\113\373\156\143\025 -END -CKA_ISSUER MULTILINE_OCTAL -\060\201\212\061\013\060\011\006\003\125\004\006\023\002\103\116 -\061\062\060\060\006\003\125\004\012\014\051\103\150\151\156\141 -\040\111\156\164\145\162\156\145\164\040\116\145\164\167\157\162 -\153\040\111\156\146\157\162\155\141\164\151\157\156\040\103\145 -\156\164\145\162\061\107\060\105\006\003\125\004\003\014\076\103 -\150\151\156\141\040\111\156\164\145\162\156\145\164\040\116\145 -\164\167\157\162\153\040\111\156\146\157\162\155\141\164\151\157 -\156\040\103\145\156\164\145\162\040\105\126\040\103\145\162\164 -\151\146\151\143\141\164\145\163\040\122\157\157\164 -END -CKA_SERIAL_NUMBER MULTILINE_OCTAL -\002\004\110\237\000\001 -END -CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_TRUSTED_DELEGATOR -CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_MUST_VERIFY_TRUST CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_MUST_VERIFY_TRUST CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE @@ -20312,6 +18796,7 @@ CKA_VALUE MULTILINE_OCTAL \311\051\041\123\234\046\105\252\023\027\344\347\315\170\342\071 \301\053\022\236\246\236\033\305\346\016\331\061\331 END +CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE # Trust for "Swisscom Root CA 2" # Issuer: CN=Swisscom Root CA 2,OU=Digital Certificate Services,O=Swisscom,C=ch @@ -20346,184 +18831,9 @@ CKA_SERIAL_NUMBER MULTILINE_OCTAL \002\020\036\236\050\350\110\362\345\357\303\174\112\036\132\030 \147\266 END -CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_TRUSTED_DELEGATOR +CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_MUST_VERIFY_TRUST CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_TRUSTED_DELEGATOR -CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_TRUSTED_DELEGATOR -CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE - -# -# Certificate "Swisscom Root EV CA 2" -# -# Issuer: CN=Swisscom Root EV CA 2,OU=Digital Certificate Services,O=Swisscom,C=ch -# Serial Number:00:f2:fa:64:e2:74:63:d3:8d:fd:10:1d:04:1f:76:ca:58 -# Subject: CN=Swisscom Root EV CA 2,OU=Digital Certificate Services,O=Swisscom,C=ch -# Not Valid Before: Fri Jun 24 09:45:08 2011 -# Not Valid After : Wed Jun 25 08:45:08 2031 -# Fingerprint (MD5): 7B:30:34:9F:DD:0A:4B:6B:35:CA:31:51:28:5D:AE:EC -# Fingerprint (SHA1): E7:A1:90:29:D3:D5:52:DC:0D:0F:C6:92:D3:EA:88:0D:15:2E:1A:6B -CKA_CLASS CK_OBJECT_CLASS CKO_CERTIFICATE -CKA_TOKEN CK_BBOOL CK_TRUE -CKA_PRIVATE CK_BBOOL CK_FALSE -CKA_MODIFIABLE CK_BBOOL CK_FALSE -CKA_LABEL UTF8 "Swisscom Root EV CA 2" -CKA_CERTIFICATE_TYPE CK_CERTIFICATE_TYPE CKC_X_509 -CKA_SUBJECT MULTILINE_OCTAL -\060\147\061\013\060\011\006\003\125\004\006\023\002\143\150\061 -\021\060\017\006\003\125\004\012\023\010\123\167\151\163\163\143 -\157\155\061\045\060\043\006\003\125\004\013\023\034\104\151\147 -\151\164\141\154\040\103\145\162\164\151\146\151\143\141\164\145 -\040\123\145\162\166\151\143\145\163\061\036\060\034\006\003\125 -\004\003\023\025\123\167\151\163\163\143\157\155\040\122\157\157 -\164\040\105\126\040\103\101\040\062 -END -CKA_ID UTF8 "0" -CKA_ISSUER MULTILINE_OCTAL -\060\147\061\013\060\011\006\003\125\004\006\023\002\143\150\061 -\021\060\017\006\003\125\004\012\023\010\123\167\151\163\163\143 -\157\155\061\045\060\043\006\003\125\004\013\023\034\104\151\147 -\151\164\141\154\040\103\145\162\164\151\146\151\143\141\164\145 -\040\123\145\162\166\151\143\145\163\061\036\060\034\006\003\125 -\004\003\023\025\123\167\151\163\163\143\157\155\040\122\157\157 -\164\040\105\126\040\103\101\040\062 -END -CKA_SERIAL_NUMBER MULTILINE_OCTAL -\002\021\000\362\372\144\342\164\143\323\215\375\020\035\004\037 -\166\312\130 -END -CKA_VALUE MULTILINE_OCTAL -\060\202\005\340\060\202\003\310\240\003\002\001\002\002\021\000 -\362\372\144\342\164\143\323\215\375\020\035\004\037\166\312\130 -\060\015\006\011\052\206\110\206\367\015\001\001\013\005\000\060 -\147\061\013\060\011\006\003\125\004\006\023\002\143\150\061\021 -\060\017\006\003\125\004\012\023\010\123\167\151\163\163\143\157 -\155\061\045\060\043\006\003\125\004\013\023\034\104\151\147\151 -\164\141\154\040\103\145\162\164\151\146\151\143\141\164\145\040 -\123\145\162\166\151\143\145\163\061\036\060\034\006\003\125\004 -\003\023\025\123\167\151\163\163\143\157\155\040\122\157\157\164 -\040\105\126\040\103\101\040\062\060\036\027\015\061\061\060\066 -\062\064\060\071\064\065\060\070\132\027\015\063\061\060\066\062 -\065\060\070\064\065\060\070\132\060\147\061\013\060\011\006\003 -\125\004\006\023\002\143\150\061\021\060\017\006\003\125\004\012 -\023\010\123\167\151\163\163\143\157\155\061\045\060\043\006\003 -\125\004\013\023\034\104\151\147\151\164\141\154\040\103\145\162 -\164\151\146\151\143\141\164\145\040\123\145\162\166\151\143\145 -\163\061\036\060\034\006\003\125\004\003\023\025\123\167\151\163 -\163\143\157\155\040\122\157\157\164\040\105\126\040\103\101\040 -\062\060\202\002\042\060\015\006\011\052\206\110\206\367\015\001 -\001\001\005\000\003\202\002\017\000\060\202\002\012\002\202\002 -\001\000\304\367\035\057\127\352\127\154\367\160\135\143\260\161 -\122\011\140\104\050\063\243\172\116\012\372\330\352\154\213\121 -\026\032\125\256\124\046\304\314\105\007\101\117\020\171\177\161 -\322\172\116\077\070\116\263\000\306\225\312\133\315\301\052\203 -\327\047\037\061\016\043\026\267\045\313\034\264\271\200\062\136 -\032\235\223\361\350\074\140\054\247\136\127\031\130\121\136\274 -\054\126\013\270\330\357\213\202\264\074\270\302\044\250\023\307 -\240\041\066\033\172\127\051\050\247\056\277\161\045\220\363\104 -\203\151\120\244\344\341\033\142\031\224\011\243\363\303\274\357 -\364\275\354\333\023\235\317\235\110\011\122\147\300\067\051\021 -\036\373\322\021\247\205\030\164\171\344\117\205\024\353\122\067 -\342\261\105\330\314\015\103\177\256\023\322\153\053\077\247\302 -\342\250\155\166\133\103\237\276\264\235\263\046\206\073\037\177 -\345\362\350\146\050\026\045\320\113\227\070\247\344\317\011\321 -\066\303\013\276\332\073\104\130\215\276\361\236\011\153\076\363 -\062\307\053\207\306\354\136\234\366\207\145\255\063\051\304\057 -\211\331\271\313\311\003\235\373\154\224\121\227\020\033\206\013 -\032\033\077\366\002\176\173\324\305\121\144\050\235\365\323\254 -\203\201\210\323\164\264\131\235\301\353\141\063\132\105\321\313 -\071\320\006\152\123\140\035\257\366\373\151\274\152\334\001\317 -\275\371\217\331\275\133\301\072\137\216\332\017\113\251\233\235 -\052\050\153\032\012\174\074\253\042\013\345\167\055\161\366\202 -\065\201\256\370\173\201\346\352\376\254\364\032\233\164\134\350 -\217\044\366\135\235\106\304\054\322\036\053\041\152\203\047\147 -\125\112\244\343\310\062\227\146\220\162\332\343\324\144\056\137 -\343\241\152\366\140\324\347\065\315\312\304\150\215\327\161\310 -\323\044\063\163\261\154\371\152\341\050\333\137\306\075\350\276 -\125\346\067\033\355\044\331\017\031\217\137\143\030\130\120\201 -\121\145\157\362\237\176\152\004\347\064\044\161\272\166\113\130 -\036\031\275\025\140\105\252\014\022\100\001\235\020\342\307\070 -\007\162\012\145\300\266\273\045\051\332\026\236\213\065\213\141 -\355\345\161\127\203\265\074\161\237\343\117\277\176\036\201\237 -\101\227\002\003\001\000\001\243\201\206\060\201\203\060\016\006 -\003\125\035\017\001\001\377\004\004\003\002\001\206\060\035\006 -\003\125\035\041\004\026\060\024\060\022\006\007\140\205\164\001 -\123\002\002\006\007\140\205\164\001\123\002\002\060\022\006\003 -\125\035\023\001\001\377\004\010\060\006\001\001\377\002\001\003 -\060\035\006\003\125\035\016\004\026\004\024\105\331\245\201\156 -\075\210\115\215\161\322\106\301\156\105\036\363\304\200\235\060 -\037\006\003\125\035\043\004\030\060\026\200\024\105\331\245\201 -\156\075\210\115\215\161\322\106\301\156\105\036\363\304\200\235 -\060\015\006\011\052\206\110\206\367\015\001\001\013\005\000\003 -\202\002\001\000\224\072\163\006\237\122\113\060\134\324\376\261 -\134\045\371\327\216\157\365\207\144\237\355\024\216\270\004\216 -\050\113\217\252\173\216\071\264\331\130\366\173\241\065\012\241 -\235\212\367\143\345\353\275\071\202\324\343\172\055\157\337\023 -\074\272\376\176\126\230\013\363\124\237\315\104\116\156\074\341 -\076\025\277\006\046\235\344\360\220\266\324\302\236\060\056\037 -\357\307\172\304\120\307\352\173\332\120\313\172\046\313\000\264 -\132\253\265\223\037\200\211\204\004\225\215\215\177\011\223\277 -\324\250\250\344\143\155\331\144\344\270\051\132\010\277\120\341 -\204\017\125\173\137\010\042\033\365\275\231\036\024\366\316\364 -\130\020\202\263\012\075\031\301\277\133\253\252\231\330\362\061 -\275\345\070\146\334\130\005\307\355\143\032\056\012\227\174\207 -\223\053\262\212\343\361\354\030\345\165\266\051\207\347\334\213 -\032\176\264\330\311\323\212\027\154\175\051\104\276\212\252\365 -\176\072\056\150\061\223\271\152\332\232\340\333\351\056\245\204 -\315\034\012\270\112\010\371\234\361\141\046\230\223\267\173\146 -\354\221\136\335\121\077\333\163\017\255\004\130\011\335\004\002 -\225\012\076\323\166\337\246\020\036\200\075\350\315\244\144\321 -\063\307\222\307\342\116\104\343\011\311\116\302\135\207\016\022 -\236\277\017\311\005\020\336\172\243\261\074\362\077\245\252\047 -\171\255\061\175\037\375\374\031\151\305\335\271\077\174\315\306 -\264\302\060\036\176\156\222\327\177\141\166\132\217\353\225\115 -\274\021\156\041\174\131\067\231\320\006\274\371\006\155\062\026 -\245\331\151\250\341\334\074\200\036\140\121\334\327\124\041\036 -\312\142\167\117\372\330\217\263\053\072\015\170\162\311\150\101 -\132\107\112\302\243\353\032\327\012\253\074\062\125\310\012\021 -\234\337\164\326\360\100\025\035\310\271\217\265\066\305\257\370 -\042\270\312\035\363\326\266\031\017\237\141\145\152\352\164\310 -\174\217\303\117\135\145\202\037\331\015\211\332\165\162\373\357 -\361\107\147\023\263\310\321\031\210\047\046\232\231\171\177\036 -\344\054\077\173\356\361\336\115\213\226\227\303\325\077\174\033 -\043\355\244\263\035\026\162\103\113\040\341\131\176\302\350\255 -\046\277\242\367 -END - -# Trust for "Swisscom Root EV CA 2" -# Issuer: CN=Swisscom Root EV CA 2,OU=Digital Certificate Services,O=Swisscom,C=ch -# Serial Number:00:f2:fa:64:e2:74:63:d3:8d:fd:10:1d:04:1f:76:ca:58 -# Subject: CN=Swisscom Root EV CA 2,OU=Digital Certificate Services,O=Swisscom,C=ch -# Not Valid Before: Fri Jun 24 09:45:08 2011 -# Not Valid After : Wed Jun 25 08:45:08 2031 -# Fingerprint (MD5): 7B:30:34:9F:DD:0A:4B:6B:35:CA:31:51:28:5D:AE:EC -# Fingerprint (SHA1): E7:A1:90:29:D3:D5:52:DC:0D:0F:C6:92:D3:EA:88:0D:15:2E:1A:6B -CKA_CLASS CK_OBJECT_CLASS CKO_NSS_TRUST -CKA_TOKEN CK_BBOOL CK_TRUE -CKA_PRIVATE CK_BBOOL CK_FALSE -CKA_MODIFIABLE CK_BBOOL CK_FALSE -CKA_LABEL UTF8 "Swisscom Root EV CA 2" -CKA_CERT_SHA1_HASH MULTILINE_OCTAL -\347\241\220\051\323\325\122\334\015\017\306\222\323\352\210\015 -\025\056\032\153 -END -CKA_CERT_MD5_HASH MULTILINE_OCTAL -\173\060\064\237\335\012\113\153\065\312\061\121\050\135\256\354 -END -CKA_ISSUER MULTILINE_OCTAL -\060\147\061\013\060\011\006\003\125\004\006\023\002\143\150\061 -\021\060\017\006\003\125\004\012\023\010\123\167\151\163\163\143 -\157\155\061\045\060\043\006\003\125\004\013\023\034\104\151\147 -\151\164\141\154\040\103\145\162\164\151\146\151\143\141\164\145 -\040\123\145\162\166\151\143\145\163\061\036\060\034\006\003\125 -\004\003\023\025\123\167\151\163\163\143\157\155\040\122\157\157 -\164\040\105\126\040\103\101\040\062 -END -CKA_SERIAL_NUMBER MULTILINE_OCTAL -\002\021\000\362\372\144\342\164\143\323\215\375\020\035\004\037 -\166\312\130 -END -CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_TRUSTED_DELEGATOR -CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_MUST_VERIFY_TRUST -CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_TRUSTED_DELEGATOR +CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_MUST_VERIFY_TRUST CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE # @@ -20651,6 +18961,7 @@ CKA_VALUE MULTILINE_OCTAL \016\353\264\261\274\267\114\311\153\277\241\363\331\364\355\342 \360\343\355\144\236\075\057\226\122\117\200\123\213 END +CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE # Trust for "CA Disig Root R1" # Issuer: CN=CA Disig Root R1,O=Disig a.s.,L=Bratislava,C=SK @@ -20685,7 +18996,7 @@ CKA_SERIAL_NUMBER MULTILINE_OCTAL END CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_TRUSTED_DELEGATOR CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_TRUSTED_DELEGATOR -CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_TRUSTED_DELEGATOR +CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_MUST_VERIFY_TRUST CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE # @@ -20813,6 +19124,7 @@ CKA_VALUE MULTILINE_OCTAL \044\304\123\031\351\036\051\025\357\346\155\260\177\055\147\375 \363\154\033\165\106\243\345\112\027\351\244\327\013 END +CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE # Trust for "CA Disig Root R2" # Issuer: CN=CA Disig Root R2,O=Disig a.s.,L=Bratislava,C=SK @@ -20847,7 +19159,7 @@ CKA_SERIAL_NUMBER MULTILINE_OCTAL END CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_TRUSTED_DELEGATOR CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_TRUSTED_DELEGATOR -CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_TRUSTED_DELEGATOR +CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_MUST_VERIFY_TRUST CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE # @@ -21012,6 +19324,7 @@ CKA_VALUE MULTILINE_OCTAL \302\130\200\033\240\227\241\374\131\215\351\021\366\321\017\113 \125\064\106\052\213\206\073 END +CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE # Trust for "ACCVRAIZ1" # Issuer: C=ES,O=ACCV,OU=PKIACCV,CN=ACCVRAIZ1 @@ -21045,7 +19358,7 @@ CKA_SERIAL_NUMBER MULTILINE_OCTAL END CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_TRUSTED_DELEGATOR CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_TRUSTED_DELEGATOR -CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_TRUSTED_DELEGATOR +CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_MUST_VERIFY_TRUST CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE # @@ -21171,6 +19484,7 @@ CKA_VALUE MULTILINE_OCTAL \311\014\277\317\022\216\027\055\043\150\224\347\253\376\251\262 \053\006\320\004\315 END +CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE # Trust for "TWCA Global Root CA" # Issuer: CN=TWCA Global Root CA,OU=Root CA,O=TAIWAN-CA,C=TW @@ -21205,7 +19519,7 @@ CKA_SERIAL_NUMBER MULTILINE_OCTAL END CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_TRUSTED_DELEGATOR CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_TRUSTED_DELEGATOR -CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_TRUSTED_DELEGATOR +CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_MUST_VERIFY_TRUST CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE # @@ -21327,6 +19641,7 @@ CKA_VALUE MULTILINE_OCTAL \141\124\310\034\272\312\301\312\341\271\040\114\217\072\223\211 \245\240\314\277\323\366\165\244\165\226\155\126 END +CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE # Trust for "TeliaSonera Root CA v1" # Issuer: CN=TeliaSonera Root CA v1,O=TeliaSonera @@ -21514,6 +19829,7 @@ CKA_VALUE MULTILINE_OCTAL \064\277\376\043\227\067\322\071\372\075\015\006\013\264\333\073 \243\253\157\134\035\266\176\350\263\202\064\355\006\134\044 END +CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE # Trust for "E-Tugra Certification Authority" # Issuer: CN=E-Tugra Certification Authority,OU=E-Tugra Sertifikasyon Merkezi,O=E-Tu..ra EBG Bili..im Teknolojileri ve Hizmetleri A....,L=Ankara,C=TR @@ -21554,7 +19870,7 @@ CKA_SERIAL_NUMBER MULTILINE_OCTAL END CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_TRUSTED_DELEGATOR CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_MUST_VERIFY_TRUST -CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_TRUSTED_DELEGATOR +CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_MUST_VERIFY_TRUST CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE # @@ -21662,6 +19978,7 @@ CKA_VALUE MULTILINE_OCTAL \332\320\031\056\252\074\361\373\063\200\166\344\315\255\031\117 \005\047\216\023\241\156\302 END +CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE # Trust for "T-TeleSec GlobalRoot Class 2" # Issuer: CN=T-TeleSec GlobalRoot Class 2,OU=T-Systems Trust Center,O=T-Systems Enterprise Services GmbH,C=DE @@ -21792,6 +20109,7 @@ CKA_VALUE MULTILINE_OCTAL \052\267\030\076\247\031\331\013\175\261\067\101\102\260\272\140 \035\362\376\011\021\260\360\207\173\247\235 END +CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE # Trust for "Atos TrustedRoot 2011" # Issuer: C=DE,O=Atos,CN=Atos TrustedRoot 2011 @@ -21824,7 +20142,7 @@ CKA_SERIAL_NUMBER MULTILINE_OCTAL END CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_TRUSTED_DELEGATOR CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_TRUSTED_DELEGATOR -CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_TRUSTED_DELEGATOR +CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_MUST_VERIFY_TRUST CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE # @@ -21951,6 +20269,7 @@ CKA_VALUE MULTILINE_OCTAL \172\340\113\266\144\226\143\225\204\302\112\315\034\056\044\207 \063\140\345\303 END +CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE # Trust for "QuoVadis Root CA 1 G3" # Issuer: CN=QuoVadis Root CA 1 G3,O=QuoVadis Limited,C=BM @@ -21985,7 +20304,7 @@ CKA_SERIAL_NUMBER MULTILINE_OCTAL END CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_TRUSTED_DELEGATOR CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_TRUSTED_DELEGATOR -CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_TRUSTED_DELEGATOR +CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_MUST_VERIFY_TRUST CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE # @@ -22112,6 +20431,7 @@ CKA_VALUE MULTILINE_OCTAL \261\154\064\311\035\354\110\053\073\170\355\146\304\216\171\151 \203\336\177\214 END +CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE # Trust for "QuoVadis Root CA 2 G3" # Issuer: CN=QuoVadis Root CA 2 G3,O=QuoVadis Limited,C=BM @@ -22146,7 +20466,7 @@ CKA_SERIAL_NUMBER MULTILINE_OCTAL END CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_TRUSTED_DELEGATOR CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_MUST_VERIFY_TRUST -CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_TRUSTED_DELEGATOR +CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_MUST_VERIFY_TRUST CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE # @@ -22273,6 +20593,7 @@ CKA_VALUE MULTILINE_OCTAL \177\175\256\200\365\007\114\266\076\234\161\124\231\004\113\375 \130\371\230\364 END +CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE # Trust for "QuoVadis Root CA 3 G3" # Issuer: CN=QuoVadis Root CA 3 G3,O=QuoVadis Limited,C=BM @@ -22307,7 +20628,7 @@ CKA_SERIAL_NUMBER MULTILINE_OCTAL END CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_TRUSTED_DELEGATOR CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_TRUSTED_DELEGATOR -CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_TRUSTED_DELEGATOR +CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_MUST_VERIFY_TRUST CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE # @@ -22409,6 +20730,7 @@ CKA_VALUE MULTILINE_OCTAL \314\303\177\252\004\047\273\323\167\270\142\333\027\174\234\050 \042\023\163\154\317\046\365\212\051\347 END +CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE # Trust for "DigiCert Assured ID Root G2" # Issuer: CN=DigiCert Assured ID Root G2,OU=www.digicert.com,O=DigiCert Inc,C=US @@ -22445,7 +20767,7 @@ CKA_SERIAL_NUMBER MULTILINE_OCTAL END CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_TRUSTED_DELEGATOR CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_TRUSTED_DELEGATOR -CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_TRUSTED_DELEGATOR +CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_MUST_VERIFY_TRUST CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE # @@ -22526,6 +20848,7 @@ CKA_VALUE MULTILINE_OCTAL \136\221\023\247\335\244\156\222\314\062\326\365\041\146\307\057 \352\226\143\152\145\105\222\225\001\264 END +CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE # Trust for "DigiCert Assured ID Root G3" # Issuer: CN=DigiCert Assured ID Root G3,OU=www.digicert.com,O=DigiCert Inc,C=US @@ -22562,7 +20885,7 @@ CKA_SERIAL_NUMBER MULTILINE_OCTAL END CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_TRUSTED_DELEGATOR CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_TRUSTED_DELEGATOR -CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_TRUSTED_DELEGATOR +CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_MUST_VERIFY_TRUST CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE # @@ -22664,6 +20987,7 @@ CKA_VALUE MULTILINE_OCTAL \166\356\074\215\304\135\126\133\242\331\146\156\263\065\067\345 \062\266 END +CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE # Trust for "DigiCert Global Root G2" # Issuer: CN=DigiCert Global Root G2,OU=www.digicert.com,O=DigiCert Inc,C=US @@ -22700,7 +21024,7 @@ CKA_SERIAL_NUMBER MULTILINE_OCTAL END CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_TRUSTED_DELEGATOR CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_TRUSTED_DELEGATOR -CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_TRUSTED_DELEGATOR +CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_MUST_VERIFY_TRUST CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE # @@ -22781,6 +21105,7 @@ CKA_VALUE MULTILINE_OCTAL \053\250\232\251\212\305\321\000\275\370\124\342\232\345\133\174 \263\047\027 END +CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE # Trust for "DigiCert Global Root G3" # Issuer: CN=DigiCert Global Root G3,OU=www.digicert.com,O=DigiCert Inc,C=US @@ -22817,7 +21142,7 @@ CKA_SERIAL_NUMBER MULTILINE_OCTAL END CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_TRUSTED_DELEGATOR CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_TRUSTED_DELEGATOR -CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_TRUSTED_DELEGATOR +CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_MUST_VERIFY_TRUST CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE # @@ -22951,6 +21276,7 @@ CKA_VALUE MULTILINE_OCTAL \336\214\201\041\255\007\020\107\021\255\207\075\007\321\165\274 \317\363\146\176 END +CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE # Trust for "DigiCert Trusted Root G4" # Issuer: CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US @@ -22987,7 +21313,7 @@ CKA_SERIAL_NUMBER MULTILINE_OCTAL END CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_TRUSTED_DELEGATOR CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_TRUSTED_DELEGATOR -CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_TRUSTED_DELEGATOR +CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_MUST_VERIFY_TRUST CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE # @@ -23117,6 +21443,7 @@ CKA_VALUE MULTILINE_OCTAL \376\314\040\164\243\055\251\056\153\313\300\202\021\041\265\223 \171\356\104\206\276\327\036\344\036\373 END +CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE # Trust for "WoSign" # Issuer: CN=Certification Authority of WoSign,O=WoSign CA Limited,C=CN @@ -23152,7 +21479,7 @@ CKA_SERIAL_NUMBER MULTILINE_OCTAL END CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_TRUSTED_DELEGATOR CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_TRUSTED_DELEGATOR -CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_TRUSTED_DELEGATOR +CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_MUST_VERIFY_TRUST CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE # @@ -23278,6 +21605,7 @@ CKA_VALUE MULTILINE_OCTAL \330\253\361\002\142\301\261\176\125\141\317\023\327\046\260\327 \234\313\051\213\070\112\013\016\220\215\272\241 END +CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE # Trust for "WoSign China" # Issuer: CN=CA ...............,O=WoSign CA Limited,C=CN @@ -23312,7 +21640,7 @@ CKA_SERIAL_NUMBER MULTILINE_OCTAL END CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_TRUSTED_DELEGATOR CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_TRUSTED_DELEGATOR -CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_TRUSTED_DELEGATOR +CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_MUST_VERIFY_TRUST CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE # @@ -23454,6 +21782,7 @@ CKA_VALUE MULTILINE_OCTAL \265\024\151\146\016\202\347\315\316\310\055\246\121\177\041\301 \065\123\205\006\112\135\237\255\273\033\137\164 END +CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE # Trust for "COMODO RSA Certification Authority" # Issuer: CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB @@ -23492,7 +21821,7 @@ CKA_SERIAL_NUMBER MULTILINE_OCTAL END CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_TRUSTED_DELEGATOR CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_TRUSTED_DELEGATOR -CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_TRUSTED_DELEGATOR +CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_MUST_VERIFY_TRUST CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE # @@ -23635,6 +21964,7 @@ CKA_VALUE MULTILINE_OCTAL \216\074\103\152\035\247\030\336\175\075\026\361\142\371\312\220 \250\375 END +CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE # Trust for "USERTrust RSA Certification Authority" # Issuer: CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US @@ -23673,7 +22003,7 @@ CKA_SERIAL_NUMBER MULTILINE_OCTAL END CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_TRUSTED_DELEGATOR CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_TRUSTED_DELEGATOR -CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_TRUSTED_DELEGATOR +CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_MUST_VERIFY_TRUST CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE # @@ -23763,6 +22093,7 @@ CKA_VALUE MULTILINE_OCTAL \242\106\201\210\152\072\106\321\251\233\115\311\141\332\321\135 \127\152\030 END +CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE # Trust for "USERTrust ECC Certification Authority" # Issuer: CN=USERTrust ECC Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US @@ -23801,7 +22132,7 @@ CKA_SERIAL_NUMBER MULTILINE_OCTAL END CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_TRUSTED_DELEGATOR CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_TRUSTED_DELEGATOR -CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_TRUSTED_DELEGATOR +CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_MUST_VERIFY_TRUST CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE # @@ -23874,6 +22205,7 @@ CKA_VALUE MULTILINE_OCTAL \322\267\156\033\002\000\027\252\147\246\025\221\336\372\224\354 \173\013\370\237\204 END +CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE # Trust for "GlobalSign ECC Root CA - R4" # Issuer: CN=GlobalSign,O=GlobalSign,OU=GlobalSign ECC Root CA - R4 @@ -23909,7 +22241,7 @@ CKA_SERIAL_NUMBER MULTILINE_OCTAL END CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_TRUSTED_DELEGATOR CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_TRUSTED_DELEGATOR -CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_TRUSTED_DELEGATOR +CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_MUST_VERIFY_TRUST CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE # @@ -23986,6 +22318,7 @@ CKA_VALUE MULTILINE_OCTAL \307\014\274\247\141\151\361\367\073\341\052\313\371\053\363\146 \220\067 END +CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE # Trust for "GlobalSign ECC Root CA - R5" # Issuer: CN=GlobalSign,O=GlobalSign,OU=GlobalSign ECC Root CA - R5 @@ -24021,7 +22354,7 @@ CKA_SERIAL_NUMBER MULTILINE_OCTAL END CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_TRUSTED_DELEGATOR CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_TRUSTED_DELEGATOR -CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_TRUSTED_DELEGATOR +CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_MUST_VERIFY_TRUST CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE # @@ -24160,6 +22493,7 @@ CKA_VALUE MULTILINE_OCTAL \013\344\271\257\221\373\120\114\014\272\300\044\047\321\025\333 \145\110\041\012\057\327\334\176\240\314\145\176\171 END +CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE # Trust for "VeriSign-C3SSA-G2-temporary-intermediate-after-1024bit-removal" # Issuer: CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU="(c) 2006 VeriSign, Inc. - For authorized use only",OU=VeriSign Trust Network,O="VeriSign, Inc.",C=US @@ -24331,6 +22665,7 @@ CKA_VALUE MULTILINE_OCTAL \254\035\152\335\071\151\344\341\171\170\276\316\005\277\241\014 \367\200\173\041\147\047\060\131 END +CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE # Trust for "Staat der Nederlanden Root CA - G3" # Issuer: CN=Staat der Nederlanden Root CA - G3,O=Staat der Nederlanden,C=NL @@ -24494,6 +22829,7 @@ CKA_VALUE MULTILINE_OCTAL \220\003\244\352\044\207\077\331\275\331\351\362\137\120\111\034 \356\354\327\056 END +CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE # Trust for "Staat der Nederlanden EV Root CA" # Issuer: CN=Staat der Nederlanden EV Root CA,O=Staat der Nederlanden,C=NL @@ -24655,6 +22991,7 @@ CKA_VALUE MULTILINE_OCTAL \037\220\032\325\112\234\356\321\160\154\314\356\364\127\370\030 \272\204\156\207 END +CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE # Trust for "IdenTrust Commercial Root CA 1" # Issuer: CN=IdenTrust Commercial Root CA 1,O=IdenTrust,C=US @@ -24816,6 +23153,7 @@ CKA_VALUE MULTILINE_OCTAL \113\034\144\347\374\346\153\220\335\151\175\151\375\000\126\245 \267\254\266\255\267\312\076\001\357\234 END +CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE # Trust for "IdenTrust Public Sector Root CA 1" # Issuer: CN=IdenTrust Public Sector Root CA 1,O=IdenTrust,C=US @@ -24960,6 +23298,7 @@ CKA_VALUE MULTILINE_OCTAL \052\062\215\241\342\072\321\020\040\042\071\175\064\105\157\161 \073\303\035\374\377\262\117\250\342\366\060\036 END +CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE # Trust for "S-TRUST Universal Root CA" # Issuer: CN=S-TRUST Universal Root CA,OU=S-TRUST Certification Services,O=Deutscher Sparkassen Verlag GmbH,C=DE @@ -25122,6 +23461,7 @@ CKA_VALUE MULTILINE_OCTAL \261\211\241\177\164\203\232\111\327\334\116\173\212\110\157\213 \105\366 END +CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE # Trust for "Entrust Root Certification Authority - G2" # Issuer: CN=Entrust Root Certification Authority - G2,OU="(c) 2009 Entrust, Inc. - for authorized use only",OU=See www.entrust.net/legal-terms,O="Entrust, Inc.",C=US @@ -25163,7 +23503,7 @@ CKA_SERIAL_NUMBER MULTILINE_OCTAL END CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_TRUSTED_DELEGATOR CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_TRUSTED_DELEGATOR -CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_TRUSTED_DELEGATOR +CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_MUST_VERIFY_TRUST CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE # @@ -25266,6 +23606,7 @@ CKA_VALUE MULTILINE_OCTAL \216\046\010\350\174\222\150\155\163\330\157\046\254\041\002\270 \231\267\046\101\133\045\140\256\320\110\032\356\006 END +CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE # Trust for "Entrust Root Certification Authority - EC1" # Issuer: CN=Entrust Root Certification Authority - EC1,OU="(c) 2012 Entrust, Inc. - for authorized use only",OU=See www.entrust.net/legal-terms,O="Entrust, Inc.",C=US @@ -25307,7 +23648,7 @@ CKA_SERIAL_NUMBER MULTILINE_OCTAL END CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_TRUSTED_DELEGATOR CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_TRUSTED_DELEGATOR -CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_TRUSTED_DELEGATOR +CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_MUST_VERIFY_TRUST CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE # @@ -25438,6 +23779,7 @@ CKA_VALUE MULTILINE_OCTAL \226\017\112\065\347\116\102\300\165\315\007\317\346\054\353\173 \056 END +CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE # Trust for "CFCA EV ROOT" # Issuer: CN=CFCA EV ROOT,O=China Financial Certification Authority,C=CN @@ -25735,6 +24077,7 @@ CKA_VALUE MULTILINE_OCTAL \261\312\161\115\023\027\071\046\305\051\041\053\223\051\152\226 \372\253\101\341\113\266\065\013\300\233\025 END +CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE # Trust for "TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı H5" # Issuer: CN=T..RKTRUST Elektronik Sertifika Hizmet Sa..lay..c..s.. H5,O=T..RKTRUST Bilgi ..leti..im ve Bili..im G..venli..i Hizmetleri A....,L=Ankara,C=TR @@ -25775,7 +24118,7 @@ CKA_SERIAL_NUMBER MULTILINE_OCTAL END CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_TRUSTED_DELEGATOR CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_MUST_VERIFY_TRUST -CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_TRUSTED_DELEGATOR +CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_MUST_VERIFY_TRUST CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE # @@ -25906,6 +24249,7 @@ CKA_VALUE MULTILINE_OCTAL \210\025\106\317\355\151\065\377\165\015\106\363\316\161\341\305 \153\206\102\006\271\101 END +CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE # Trust for "Certinomis - Root CA" # Issuer: CN=Certinomis - Root CA,OU=0002 433998903,O=Certinomis,C=FR @@ -26044,6 +24388,7 @@ CKA_VALUE MULTILINE_OCTAL \313\216\075\103\151\234\232\130\320\044\073\337\033\100\226\176 \065\255\201\307\116\161\272\210\023 END +CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE # Trust for "OISTE WISeKey Global Root GB CA" # Issuer: CN=OISTE WISeKey Global Root GB CA,OU=OISTE Foundation Endorsed,O=WISeKey,C=CH @@ -26080,7 +24425,7 @@ CKA_SERIAL_NUMBER MULTILINE_OCTAL END CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_TRUSTED_DELEGATOR CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_TRUSTED_DELEGATOR -CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_TRUSTED_DELEGATOR +CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_MUST_VERIFY_TRUST CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE # @@ -26178,6 +24523,7 @@ CKA_VALUE MULTILINE_OCTAL \135\107\267\041\362\215\321\012\231\216\343\156\076\255\160\340 \217\271\312\314\156\201\061\366\173\234\172\171\344\147\161\030 END +CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE # Trust for "Certification Authority of WoSign G2" # Issuer: CN=Certification Authority of WoSign G2,O=WoSign CA Limited,C=CN @@ -26213,7 +24559,7 @@ CKA_SERIAL_NUMBER MULTILINE_OCTAL END CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_TRUSTED_DELEGATOR CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_TRUSTED_DELEGATOR -CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_TRUSTED_DELEGATOR +CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_MUST_VERIFY_TRUST CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE # @@ -26286,6 +24632,7 @@ CKA_VALUE MULTILINE_OCTAL \177\336\126\364\220\261\025\021\330\262\042\025\320\057\303\046 \056\153\361\221\262\220\145\364\232\346\220\356\112 END +CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE # Trust for "CA WoSign ECC Root" # Issuer: CN=CA WoSign ECC Root,O=WoSign CA Limited,C=CN @@ -26320,7 +24667,7 @@ CKA_SERIAL_NUMBER MULTILINE_OCTAL END CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_TRUSTED_DELEGATOR CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_TRUSTED_DELEGATOR -CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_TRUSTED_DELEGATOR +CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_MUST_VERIFY_TRUST CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE # @@ -26418,6 +24765,7 @@ CKA_VALUE MULTILINE_OCTAL \056\365\251\013\077\324\135\341\317\204\237\342\031\302\137\212 \326\040\036\343\163\267 END +CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE # Trust for "SZAFIR ROOT CA2" # Issuer: CN=SZAFIR ROOT CA2,O=Krajowa Izba Rozliczeniowa S.A.,C=PL @@ -26595,6 +24943,7 @@ CKA_VALUE MULTILINE_OCTAL \103\150\010\152\137\073\360\166\143\373\314\006\054\246\306\342 \016\265\271\276\044\217 END +CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE # Trust for "Certum Trusted Network CA 2" # Issuer: CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL @@ -26781,6 +25130,7 @@ CKA_VALUE MULTILINE_OCTAL \251\220\227\015\255\123\322\132\035\207\152\000\227\145\142\264 \276\157\152\247\365\054\102\355\062\255\266\041\236\276\274 END +CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE # Trust for "Hellenic Academic and Research Institutions RootCA 2015" # Issuer: CN=Hellenic Academic and Research Institutions RootCA 2015,O=Hellenic Academic and Research Institutions Cert. Authority,L=Athens,C=GR @@ -26916,6 +25266,7 @@ CKA_VALUE MULTILINE_OCTAL \162\041\027\313\042\101\016\214\023\230\070\232\124\155\233\312 \342\174\352\002\130\042\221 END +CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE # Trust for "Hellenic Academic and Research Institutions ECC RootCA 2015" # Issuer: CN=Hellenic Academic and Research Institutions ECC RootCA 2015,O=Hellenic Academic and Research Institutions Cert. Authority,L=Athens,C=GR @@ -27080,6 +25431,7 @@ CKA_VALUE MULTILINE_OCTAL \244\335\327\131\364\156\335\376\252\303\221\320\056\102\007\300 \014\115\123\315\044\261\114\133\036\121\364\337\351\222\372 END +CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE # Trust for "Certplus Root CA G1" # Issuer: CN=Certplus Root CA G1,O=Certplus,C=FR @@ -27185,6 +25537,7 @@ CKA_VALUE MULTILINE_OCTAL \345\274\371\171\151\334\255\105\053\367\266\061\163\314\006\245 \123\223\221\032\223\256\160\152\147\272\327\236\345\141\032\137 END +CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE # Trust for "Certplus Root CA G2" # Issuer: CN=Certplus Root CA G2,O=Certplus,C=FR @@ -27346,6 +25699,7 @@ CKA_VALUE MULTILINE_OCTAL \315\340\103\207\326\344\272\112\303\154\022\177\376\052\346\043 \326\214\161 END +CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE # Trust for "OpenTrust Root CA G1" # Issuer: CN=OpenTrust Root CA G1,O=OpenTrust,C=FR @@ -27508,6 +25862,7 @@ CKA_VALUE MULTILINE_OCTAL \174\053\067\324\172\321\167\064\217\347\371\102\367\074\201\014 \113\122\012 END +CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE # Trust for "OpenTrust Root CA G2" # Issuer: CN=OpenTrust Root CA G2,O=OpenTrust,C=FR @@ -27617,6 +25972,7 @@ CKA_VALUE MULTILINE_OCTAL \342\174\151\345\135\232\370\101\037\073\071\223\223\235\125\352 \315\215\361\373\301 END +CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE # Trust for "OpenTrust Root CA G3" # Issuer: CN=OpenTrust Root CA G3,O=OpenTrust,C=FR @@ -27780,6 +26136,7 @@ CKA_VALUE MULTILINE_OCTAL \317\245\124\064\167\275\354\211\233\351\027\103\337\133\333\137 \376\216\036\127\242\315\100\235\176\142\042\332\336\030\047 END +CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE # Trust for "ISRG Root X1" # Issuer: CN=ISRG Root X1,O=Internet Security Research Group,C=US @@ -27942,6 +26299,7 @@ CKA_VALUE MULTILINE_OCTAL \272\357\060\167\344\124\342\270\204\231\130\200\252\023\213\121 \072\117\110\366\213\266\263 END +CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE # Trust for "AC RAIZ FNMT-RCM" # Issuer: OU=AC RAIZ FNMT-RCM,O=FNMT-RCM,C=ES @@ -28066,6 +26424,7 @@ CKA_VALUE MULTILINE_OCTAL \256\245\321\175\272\020\236\206\154\033\212\271\131\063\370\353 \304\220\276\361\271 END +CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE # Trust for "Amazon Root CA 1" # Issuer: CN=Amazon Root CA 1,O=Amazon,C=US @@ -28222,6 +26581,7 @@ CKA_VALUE MULTILINE_OCTAL \137\041\020\307\371\363\272\002\012\047\007\305\361\326\307\323 \340\373\011\140\154 END +CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE # Trust for "Amazon Root CA 2" # Issuer: CN=Amazon Root CA 2,O=Amazon,C=US @@ -28321,6 +26681,7 @@ CKA_VALUE MULTILINE_OCTAL \263\226\371\353\306\052\370\266\054\376\072\220\024\026\327\214 \143\044\110\034\337\060\175\325\150\073 END +CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE # Trust for "Amazon Root CA 3" # Issuer: CN=Amazon Root CA 3,O=Amazon,C=US @@ -28424,6 +26785,7 @@ CKA_VALUE MULTILINE_OCTAL \324\254\213\153\153\111\022\123\063\255\327\344\276\044\374\265 \012\166\324\245\274\020 END +CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE # Trust for "Amazon Root CA 4" # Issuer: CN=Amazon Root CA 4,O=Amazon,C=US @@ -28590,6 +26952,7 @@ CKA_VALUE MULTILINE_OCTAL \334\066\052\341\224\150\223\307\146\162\104\017\200\041\062\154 \045\307\043\200\203\012\353 END +CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE # Trust for "LuxTrust Global Root 2" # Issuer: CN=LuxTrust Global Root 2,O=LuxTrust S.A.,C=LU @@ -28738,6 +27101,7 @@ CKA_VALUE MULTILINE_OCTAL \007\277\164\340\230\070\025\125\170\356\162\000\134\031\243\364 \322\063\340\377\275\321\124\071\051\017 END +CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE # Trust for "Symantec Class 1 Public Primary Certification Authority - G6" # Issuer: CN=Symantec Class 1 Public Primary Certification Authority - G6,OU=Symantec Trust Network,O=Symantec Corporation,C=US @@ -28891,6 +27255,7 @@ CKA_VALUE MULTILINE_OCTAL \124\276\142\273\071\254\150\022\110\221\040\245\313\261\335\376 \157\374\132\344\202\125\131\257\061\251 END +CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE # Trust for "Symantec Class 2 Public Primary Certification Authority - G6" # Issuer: CN=Symantec Class 2 Public Primary Certification Authority - G6,OU=Symantec Trust Network,O=Symantec Corporation,C=US @@ -29023,6 +27388,7 @@ CKA_VALUE MULTILINE_OCTAL \046\235\011\075\367\155\220\321\005\104\057\260\274\203\223\150 \362\014\105\111\071\277\231\004\034\323\020\240 END +CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE # Trust for "Symantec Class 1 Public Primary Certification Authority - G4" # Issuer: CN=Symantec Class 1 Public Primary Certification Authority - G4,OU=Symantec Trust Network,O=Symantec Corporation,C=US @@ -29155,6 +27521,7 @@ CKA_VALUE MULTILINE_OCTAL \000\130\123\317\176\261\113\015\345\120\206\353\236\153\337\377 \051\246\330\107\331\240\226\030\333\362\105\263 END +CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE # Trust for "Symantec Class 2 Public Primary Certification Authority - G4" # Issuer: CN=Symantec Class 2 Public Primary Certification Authority - G4,OU=Symantec Trust Network,O=Symantec Corporation,C=US @@ -29299,6 +27666,7 @@ CKA_VALUE MULTILINE_OCTAL \047\133\055\060\050\053\237\110\232\144\053\231\357\362\165\111 \137\134 END +CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE # Trust for "D-TRUST Root CA 3 2013" # Issuer: CN=D-TRUST Root CA 3 2013,O=D-Trust GmbH,C=DE @@ -29460,6 +27828,7 @@ CKA_VALUE MULTILINE_OCTAL \226\215\317\266\375\000\235\132\024\232\277\002\104\365\301\302 \237\042\136\242\017\241\343 END +CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE # Trust for "TUBITAK Kamu SM SSL Kok Sertifikasi - Surum 1" # Issuer: CN=TUBITAK Kamu SM SSL Kok Sertifikasi - Surum 1,OU=Kamu Sertifikasyon Merkezi - Kamu SM,O=Turkiye Bilimsel ve Teknolojik Arastirma Kurumu - TUBITAK,L=Gebze - Kocaeli,C=TR diff --git a/security/nss/lib/ckfw/builtins/nssckbi.h b/security/nss/lib/ckfw/builtins/nssckbi.h index 6e7aa2b61..498751d13 100644 --- a/security/nss/lib/ckfw/builtins/nssckbi.h +++ b/security/nss/lib/ckfw/builtins/nssckbi.h @@ -46,8 +46,8 @@ * It's recommend to switch back to 0 after having reached version 98/99. */ #define NSS_BUILTINS_LIBRARY_VERSION_MAJOR 2 -#define NSS_BUILTINS_LIBRARY_VERSION_MINOR 14 -#define NSS_BUILTINS_LIBRARY_VERSION "2.14" +#define NSS_BUILTINS_LIBRARY_VERSION_MINOR 16 +#define NSS_BUILTINS_LIBRARY_VERSION "2.16" /* These version numbers detail the semantic changes to the ckfw engine. */ #define NSS_BUILTINS_HARDWARE_VERSION_MAJOR 1 -- cgit v1.2.3