Trust store release 2024.3.3 (#264)

Rolling trust store release at 2024-03-24T03:19:47+0000.
$ cfssl-trust -d ./cert.db  -b int release 504h
skipping expired certificate (SKI=4c3811b898005b5a2b703eaa78e4d5676767a77e, serial=120039007, subject='/Verizon Global Root CA/C=US/O=Verizon Business/OU=OmniRoot')
1477 certificates rolled
1 certificates skipped
Successfully rolled new int release 2024.3.3
$ cfssl-trust -d ./cert.db  -b ca release 504h
354 certificates rolled
0 certificates skipped
Successfully rolled new ca release 2024.3.3
$ cfssl-trust -d ./cert.db  -r 2024.3.3 -b int bundle int-bundle.crt
selected release 2024.3.3
Selected 1477 certificates for this release.
$ cfssl-trust -d ./cert.db  -r 2024.3.3 -b ca bundle ca-bundle.crt
selected release 2024.3.3
Selected 354 certificates for this release.
$ certdump ca-bundle.crt  > certdata/ca-bundle.txt
$ certdump int-bundle.crt > certdata/int-bundle.txt
$ git status --porcelain -uno
M  cert.db
M  certdata/int-bundle.txt
M  int-bundle.crt

Co-authored-by: Nicky Semenza <nicky@nickysemenza.com>

certdata/int-bundle.txt

@@ -2480,25 +2480,6 @@ Details:
 	OCSP server:
 		- http://ocsp.comodoca.com
 CERTIFICATE
-Subject: /Verizon Global Root CA/C=US/O=Verizon Business/OU=OmniRoot
-Issuer: /Baltimore CyberTrust Root/C=IE/O=Baltimore/OU=CyberTrust
-	Signature algorithm: RSA / SHA256
-Details:
-	Public key: RSA-2048
-	Serial number: 120039007
-	AKI: E5:9D:59:30:82:47:58:CC:AC:FA:08:54:36:86:7B:3A:B5:04:4D:F0
-	SKI: 4C:38:11:B8:98:00:5B:5A:2B:70:3E:AA:78:E4:D5:67:67:67:A7:7E
-	Valid from: 2014-04-09T15:54:32+0000
-	     until: 2024-04-09T15:54:05+0000
-	Key usages: cert sign, content committment, crl sign, digital signature
-	Basic constraints: valid, is a CA certificate, max path length 2
-	SANs (0):
-	2 AIAs:
-		https://cacert.omniroot.com/baltimoreroot.crt
-		https://cacert.omniroot.com/baltimoreroot.der
-	OCSP server:
-		- http://ocsp.omniroot.com/baltimoreroot
-CERTIFICATE
 Subject: /DigiCert Secure Auth CA/C=US/O=DigiCert Inc/OU=www.digicert.com
 Issuer: /DigiCert Assured ID Root CA/C=US/O=DigiCert Inc/OU=www.digicert.com
 	Signature algorithm: RSA / SHA256

int-bundle.crt

@@ -4527,35 +4527,6 @@ mshlbIFDYLrJfcS0mGPEwk0Fm5kCMCrbRm5ONLS18G0NfDYnuGp7ex7i0GUezn5T
 /QKTj/C/89U3cSp0L2qvkeMN9nsU4w==
 -----END CERTIFICATE-----
 -----BEGIN CERTIFICATE-----
-MIIE6DCCA9CgAwIBAgIEByemXzANBgkqhkiG9w0BAQsFADBaMQswCQYDVQQGEwJJ
-RTESMBAGA1UEChMJQmFsdGltb3JlMRMwEQYDVQQLEwpDeWJlclRydXN0MSIwIAYD
-VQQDExlCYWx0aW1vcmUgQ3liZXJUcnVzdCBSb290MB4XDTE0MDQwOTE1NTQzMloX
-DTI0MDQwOTE1NTQwNVowXDELMAkGA1UEBhMCVVMxGTAXBgNVBAoTEFZlcml6b24g
-QnVzaW5lc3MxETAPBgNVBAsTCE9tbmlSb290MR8wHQYDVQQDExZWZXJpem9uIEds
-b2JhbCBSb290IENBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAigAM
-cB2/6zSGw5lFNR5/Q/erbyQtzRnCELuwyilbqSCrq3IsxOICOW2CuMUR6vj7s55i
-+DMesB/J4/Y32wTIO2NPNuKFpCUdx2kfBL1oRROWBx+UUPU+xSdUnsBJV0SOB2PU
-pq7tIpnMTZZpBBNudomfdBaU+R1UvaK50oMBIgxNRICq/jWJJyWnhonG1RqS44/F
-laAUcproVsUCVRyX+SAu0PU8Exla9uH5CwOCaaeMt9ZvnFY+negqCWBtS+b7i5kU
-9zRPZVmAjblXyKI1IdiIcVZd7oJXLSaQGJ+anJyP79TFY6dUfUeRh30aEqgbGG+p
-b7EnuuQEdM43Hn9mxQIDAQABo4IBsjCCAa4wEgYDVR0TAQH/BAgwBgEB/wIBAjBH
-BgNVHSAEQDA+MDwGBFUdIAAwNDAyBggrBgEFBQcCARYmaHR0cHM6Ly9zZWN1cmUu
-b21uaXJvb3QuY29tL3JlcG9zaXRvcnkwgboGCCsGAQUFBwEBBIGtMIGqMDIGCCsG
-AQUFBzABhiZodHRwOi8vb2NzcC5vbW5pcm9vdC5jb20vYmFsdGltb3Jlcm9vdDA5
-BggrBgEFBQcwAoYtaHR0cHM6Ly9jYWNlcnQub21uaXJvb3QuY29tL2JhbHRpbW9y
-ZXJvb3QuY3J0MDkGCCsGAQUFBzAChi1odHRwczovL2NhY2VydC5vbW5pcm9vdC5j
-b20vYmFsdGltb3Jlcm9vdC5kZXIwDgYDVR0PAQH/BAQDAgHGMB8GA1UdIwQYMBaA
-FOWdWTCCR1jMrPoIVDaGezq1BE3wMEIGA1UdHwQ7MDkwN6A1oDOGMWh0dHA6Ly9j
-ZHAxLnB1YmxpYy10cnVzdC5jb20vQ1JML09tbmlyb290MjAyNS5jcmwwHQYDVR0O
-BBYEFEw4EbiYAFtaK3A+qnjk1WdnZ6d+MA0GCSqGSIb3DQEBCwUAA4IBAQBnrMFy
-zMnsz58Cp1XqmgHvEYwiQpSY7WvRuTK7qymj7cJyj5U0YM9FIbQynzvbTAbSZIB9
-W8Y3HiZHX3pXw69Ng4j+lPfVFgknnHujStJVHaQLDod+a+gxnCefEbpKwPd1Lcwl
-uWlTBSxqU6tWA2WIe909dRaRH5Rzn466CwCfooLSDNvPhRWCHnO0DH01IpYDrXGm
-+oEdeSZp5zfTksAaaCVryeEAfx++88LQS5MVwtt8P1qW93flEgM5/Tg7S9kpTYzu
-a4itxREl6XSPArFMROoLUehcswVhoTey/ZYWXG9sFbgZuHJcZiKzeI8sLImWTBKi
-W6Ez+mcA8SscNlGu
------END CERTIFICATE-----
------BEGIN CERTIFICATE-----
 MIIE/jCCA+agAwIBAgIQCDZl3ED5ayay3q38bUvFbTANBgkqhkiG9w0BAQsFADBl
 MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
 d3cuZGlnaWNlcnQuY29tMSQwIgYDVQQDExtEaWdpQ2VydCBBc3N1cmVkIElEIFJv