- update to CKBI 2.92 from NSS 3.131.1
- updated certificates:
-
# Certificate "OISTE Server Root RSA G1"
-
# Certificate "Amazon Root CA 1"
-
# Certificate "Amazon Root CA 2"
-
# Certificate "Amazon Root CA 3"
-
# Certificate "Amazon Root CA 4"
-
# Certificate "GlobalSign ECC Root CA - R4"
-
# Certificate "GTS Root R1"
-
# Certificate "GTS Root R3"
-
# Certificate "GTS Root R4"
-
# Certificate "TrustAsia Global Root CA G3"
-
# Certificate "TrustAsia Global Root CA G4"
- removed certificates:
-
# Certificate "CFCA GT CA"
-
# Certificate "GeoTrust Primary Certification Authority"
-
# Certificate "GeoTrust Primary Certification Authority - G2"
-
# Certificate "GeoTrust Primary Certification Authority - G3"
-
# Certificate "GeoTrust Universal CA"
-
# Certificate "GeoTrust Universal CA 2"
-
# Certificate "VeriSign Class 3 Public Primary Certification Authority - G3"
-
# Certificate "VeriSign Class 3 Public Primary Certification Authority - G4"
-
# Certificate "VeriSign Class 3 Public Primary Certification Authority - G5"
-
# Certificate "VeriSign Universal Root Certification Authority"
-
# Certificate "emSign ECC Root CA - G3"
-
# Certificate "thawte Primary Root CA"
-
# Certificate "thawte Primary Root CA - G2"
-
# Certificate "thawte Primary Root CA - G3"
- added certificates:
-
# Certificate "e-Szigno TLS Root CA 2023"
-
# Certificate "SecureSign Root CA16"
-
# Certificate "SECOM TLS RSA Root CA 2024"
-
# Certificate "SECOM TLS ECC Root CA 2024"
-
# Certificate "SECOM SMIME RSA Root CA 2024"
-
# Certificate "Telia EC Email Root CA v3"
-
# Certificate "Telia EC TLS Root CA v3"
-
# Certificate "Telia RSA Email Root CA v3"
-
# Certificate "Telia RSA TLS Root CA v3"
- distrusted certificates:
-
# Certificate "AC Raíz Certicámara S.A."
-
# Certificate "ACEDICOM Root"
-
# Certificate "AffirmTrust Networking"
-
# Certificate "America Online Root Certification Authority 1"
-
# Certificate "CA Disig Root R1"
-
# Certificate "Certinomis - Autorité Racine"
-
# Certificate "ComSign CA"
-
# Certificate "ComSign Secured CA"
-
# Certificate "EC-ACC"
-
# Certificate "EE Certification Centre Root CA"
-
# Certificate "Entrust Root Certification Authority"
-
# Certificate "Hellenic Academic and Research Institutions RootCA 2011"
-
# Certificate "S-TRUST Authentication and Encryption Root CA 2005:PN"
-
# Certificate "Secure Global CA"
-
# Certificate "SecureSign RootCA11"
-
# Certificate "SecureTrust CA"
-
# Certificate "SECOM Trust Systems CO.,LTD."
-
# Certificate "SwissSign Platinum CA - G2"
-
# Certificate "SwissSign Silver CA - G2"
-
# Certificate "TeliaSonera Root CA v1"
-
# Certificate "XRamp Global CA Root"
-
# Certificate "certSIGN ROOT CA"
-
# Certificate "ePKI Root Certification Authority"
- no longer trusted for TLS server authentication:
-
# Certificate "QuoVadis Root CA 2"
-
# Certificate "QuoVadis Root CA 3"
-
# Certificate "DigiCert Assured ID Root CA"
-
# Certificate "DigiCert Global Root CA"
-
# Certificate "DigiCert High Assurance EV Root CA"
-
# Certificate "SwissSign Gold CA - G2"
-
# Certificate "COMODO Certification Authority"
-
# Certificate "Certigna"
-
# Certificate "Atos TrustedRoot 2011"
-
# Certificate "Entrust Root Certification Authority - G2"
-
# Certificate "Entrust Root Certification Authority - EC1"
-
# Certificate "GTS Root R2"
