Repository navigation
- Verify the 118 bundled roots match curl's Mozilla bundle dated 2026-10-20,
including removal of the distrusted emSign C1, C3, and G3 roots. - Download updates from curl's Mozilla CA extraction, verify its SHA-256 checksum,
and validate the PEM before replacing the bundle. - Test that the embedded roots match the PEM file and exclude distrusted emSign roots.