- update to CKBI 2.92 from NSS 3.131.1
- updated certificates:
-
# Certificate "OISTE Server Root RSA G1"
-
# Certificate "Amazon Root CA 1"
-
# Certificate "Amazon Root CA 2"
-
# Certificate "Amazon Root CA 3"
-
# Certificate "Amazon Root CA 4"
-
# Certificate "GlobalSign ECC Root CA - R4"
-
# Certificate "GTS Root R1"
-
# Certificate "GTS Root R3"
-
# Certificate "GTS Root R4"
-
# Certificate "TrustAsia Global Root CA G3"
-
# Certificate "TrustAsia Global Root CA G4"
- removed certificates:
-
# Certificate "emSign ECC Root CA - G3"
- added certificates:
-
# Certificate "e-Szigno TLS Root CA 2023"
-
# Certificate "SecureSign Root CA16"
-
# Certificate "SECOM TLS RSA Root CA 2024"
-
# Certificate "SECOM TLS ECC Root CA 2024"
-
# Certificate "SECOM SMIME RSA Root CA 2024"
-
# Certificate "Telia EC Email Root CA v3"
-
# Certificate "Telia EC TLS Root CA v3"
-
# Certificate "Telia RSA Email Root CA v3"
-
# Certificate "Telia RSA TLS Root CA v3"
- distrusted certificates:
-
# Certificate "AffirmTrust Networking"
-
# Certificate "Entrust Root Certification Authority"
-
# Certificate "Secure Global CA"
-
# Certificate "SecureSign RootCA11"
-
# Certificate "SecureTrust CA"
-
# Certificate "SwissSign Silver CA - G2"
-
# Certificate "TeliaSonera Root CA v1"
-
# Certificate "XRamp Global CA Root"
-
# Certificate "certSIGN ROOT CA"
-
# Certificate "ePKI Root Certification Authority"
- no longer trusted for TLS server authentication:
-
# Certificate "QuoVadis Root CA 2"
-
# Certificate "QuoVadis Root CA 3"
-
# Certificate "DigiCert Assured ID Root CA"
-
# Certificate "DigiCert Global Root CA"
-
# Certificate "DigiCert High Assurance EV Root CA"
-
# Certificate "SwissSign Gold CA - G2"
-
# Certificate "COMODO Certification Authority"
-
# Certificate "Certigna"
-
# Certificate "Atos TrustedRoot 2011"
-
# Certificate "Entrust Root Certification Authority - G2"
-
# Certificate "Entrust Root Certification Authority - EC1"
-
# Certificate "GTS Root R2"
