Merge pull request #259 from cloudflare/release/2024.2.2

Trust store release 2024.2.2
cloudflare · Feb 23, 2024 · f741049 · f741049
2 parents fabad1f + 372934f
commit f741049
Show file tree

Hide file tree

Showing 5 changed files with 0 additions and 719 deletions.
diff --git a/ca-bundle.crt b/ca-bundle.crt
@@ -6830,25 +6830,6 @@ mUlO+KWA2yUPHGNiiskzZ2s8EIPGrd6ozRaOjfAHN3Gf8qv8QfXBi+wAN10J5U6A
 7/qxXDgGpRtK4dw4LTzcqx+QGtVKnO7RcGzM7vRX+Bi6hG6H
 -----END CERTIFICATE-----
 -----BEGIN CERTIFICATE-----
-MIIDIzCCAgugAwIBAgICJ60wDQYJKoZIhvcNAQELBQAwOjELMAkGA1UEBhMCSU4x
-EjAQBgNVBAoTCUluZGlhIFBLSTEXMBUGA1UEAxMOQ0NBIEluZGlhIDIwMTQwHhcN
-MTQwMzA1MTAxMDQ5WhcNMjQwMzA1MTAxMDQ5WjA6MQswCQYDVQQGEwJJTjESMBAG
-A1UEChMJSW5kaWEgUEtJMRcwFQYDVQQDEw5DQ0EgSW5kaWEgMjAxNDCCASIwDQYJ
-KoZIhvcNAQEBBQADggEPADCCAQoCggEBAN7IUL2K/yINrn+sglna9CkJ1AVrbJYB
-vsylsCF3vhStQC9kb7t4FwX7s+6AAMSakL5GUDJxVVNhMqf/2paerAzFACVNR1Ai
-MLsG7ima4pCDhFn7t9052BQRbLBCPg4wekx6j+QULQFeW9ViLV7hjkEhKffeuoc3
-YaDmkkPSmA2mz6QKbUWYUu4PqQPRCrkiDH0ikdqR9eyYhWyuI7Gm/pc0atYnp1sr
-u3rtLCaLS0ST/N/ELDEUUY2wgxglgoqEEdMhSSBL1CzaA8Ck9PErpnqC7VL+sbSy
-AKeJ9n56FttQzkwYjdOHMrgJRZaPb2i5VoVo1ZFkQF3ZKfiJ25VH5+8CAwEAAaMz
-MDEwDwYDVR0TAQH/BAUwAwEB/zARBgNVHQ4ECgQIQrjFz22zV+EwCwYDVR0PBAQD
-AgEGMA0GCSqGSIb3DQEBCwUAA4IBAQAdAUjv0myKyt8GC1niIZplrlksOWIR6yXL
-g4BhFj4ziULxsGK4Jj0sIJGCkNJeHl+Ng9UlU5EI+r89DRdrGBTF/I+g3RHcViPt
-One9xEgWRMRYtWD7QZe5FvoSSGkW9aV6D4iGLPBQML6FDUkQzW9CYDCFgGC2+awR
-Mx61dQVXiFv3Nbkqa1Pejcel8NMAmxjfm5nZMd3Ft13hy3fNF6UzsOnBtMbyZWhS
-8Koj2KFfSUGX+M/DS1TG2ZujwKKXCuKq7+67m0WF6zohoHJbqjkmKX34zkuFnoXa
-Xco9NkOi0RBvLCiqR2lKfzLM7B69bje+z0EqnRNo5+s8PWSdy+xt
------END CERTIFICATE-----
------BEGIN CERTIFICATE-----
 MIIF8TCCA9mgAwIBAgIIVE2lvEA1VlowDQYJKoZIhvcNAQELBQAwgYUxCzAJBgNV
 BAYTAlBUMUIwQAYDVQQKDDlNVUxUSUNFUlQgLSBTZXJ2acOnb3MgZGUgQ2VydGlm
 aWNhw6fDo28gRWxlY3Ryw7NuaWNhIFMuQS4xMjAwBgNVBAMMKU1VTFRJQ0VSVCBS

diff --git a/cert.db b/cert.db
diff --git a/certdata/ca-bundle.txt b/certdata/ca-bundle.txt
@@ -3562,19 +3562,6 @@ Details:
 	Basic constraints: valid, is a CA certificate
 	SANs (0):
 CERTIFICATE
-Subject: /CCA India 2014/C=IN/O=India PKI
-Issuer: /CCA India 2014/C=IN/O=India PKI
-	Signature algorithm: RSA / SHA256
-Details:
-	Public key: RSA-2048
-	Serial number: 10157
-	SKI: 42:B8:C5:CF:6D:B3:57:E1
-	Valid from: 2014-03-05T10:10:49+0000
-	     until: 2024-03-05T10:10:49+0000
-	Key usages: cert sign, crl sign
-	Basic constraints: valid, is a CA certificate
-	SANs (0):
-CERTIFICATE
 Subject: /MULTICERT Root Certification Authority 01/C=PT/O=MULTICERT -
     Serviços de Certificação Electrónica S.A.
 Issuer: /MULTICERT Root Certification Authority 01/C=PT/O=MULTICERT -

diff --git a/certdata/int-bundle.txt b/certdata/int-bundle.txt
@@ -405,138 +405,6 @@ Details:
 	Basic constraints: valid, is a CA certificate
 	SANs (0):
 CERTIFICATE
-Subject: /Certum Level I CA/C=PL/O=Unizeto Technologies S.A./OU=Certum
-    Certification Authority
-Issuer: /Certum CA/C=PL/O=Unizeto Sp. z o.o.
-	Signature algorithm: RSA / SHA1
-Details:
-	Public key: RSA-2048
-	Serial number: 18453995748100806516327796425654709452
-	SKI: C6:05:BD:63:1D:E2:D8:6E:28:36:1F:45:EE:35:3C:C9:7F:72:CA:3B
-	Valid from: 2009-03-03T12:52:30+0000
-	     until: 2024-03-03T12:52:30+0000
-	Key usages: cert sign, crl sign
-	Basic constraints: valid, is a CA certificate
-	SANs (0):
-	1 AIA:
-		http://repository.certum.pl/ca.cer
-	OCSP server:
-		- http://subca.ocsp-certum.com
-CERTIFICATE
-Subject: /Certum Level II CA/C=PL/O=Unizeto Technologies S.A./OU=Certum
-    Certification Authority
-Issuer: /Certum CA/C=PL/O=Unizeto Sp. z o.o.
-	Signature algorithm: RSA / SHA1
-Details:
-	Public key: RSA-2048
-	Serial number: 293458
-	SKI: 80:62:11:DE:C0:6B:A7:10:E1:08:F0:55:B4:30:83:BF:FA:8F:08:60
-	Valid from: 2009-03-03T12:53:18+0000
-	     until: 2024-03-03T12:53:18+0000
-	Key usages: cert sign, crl sign
-	Basic constraints: valid, is a CA certificate
-	SANs (0):
-CERTIFICATE
-Subject: /Certum Level II CA/C=PL/O=Unizeto Technologies S.A./OU=Certum
-    Certification Authority
-Issuer: /Certum CA/C=PL/O=Unizeto Sp. z o.o.
-	Signature algorithm: RSA / SHA1
-Details:
-	Public key: RSA-2048
-	Serial number: 158234085812018297754750672008681032730
-	SKI: 80:62:11:DE:C0:6B:A7:10:E1:08:F0:55:B4:30:83:BF:FA:8F:08:60
-	Valid from: 2009-03-03T12:53:18+0000
-	     until: 2024-03-03T12:53:18+0000
-	Key usages: cert sign, crl sign
-	Basic constraints: valid, is a CA certificate
-	SANs (0):
-	1 AIA:
-		http://repository.certum.pl/ca.cer
-	OCSP server:
-		- http://subca.ocsp-certum.com
-CERTIFICATE
-Subject: /Certum Level III CA/C=PL/O=Unizeto Technologies S.A./OU=Certum
-    Certification Authority
-Issuer: /Certum CA/C=PL/O=Unizeto Sp. z o.o.
-	Signature algorithm: RSA / SHA1
-Details:
-	Public key: RSA-2048
-	Serial number: 293459
-	SKI: 04:C9:DA:9A:DC:4A:49:77:AF:30:03:04:66:2E:C7:CE:F2:F8:17:7D
-	Valid from: 2009-03-03T12:53:56+0000
-	     until: 2024-03-03T12:53:56+0000
-	Key usages: cert sign, crl sign
-	Basic constraints: valid, is a CA certificate
-	SANs (0):
-CERTIFICATE
-Subject: /Certum Level III CA/C=PL/O=Unizeto Technologies S.A./OU=Certum
-    Certification Authority
-Issuer: /Certum CA/C=PL/O=Unizeto Sp. z o.o.
-	Signature algorithm: RSA / SHA1
-Details:
-	Public key: RSA-2048
-	Serial number: 134242492053681091955046528038375822945
-	SKI: 04:C9:DA:9A:DC:4A:49:77:AF:30:03:04:66:2E:C7:CE:F2:F8:17:7D
-	Valid from: 2009-03-03T12:53:56+0000
-	     until: 2024-03-03T12:53:56+0000
-	Key usages: cert sign, crl sign
-	Basic constraints: valid, is a CA certificate
-	SANs (0):
-	1 AIA:
-		http://repository.certum.pl/ca.cer
-	OCSP server:
-		- http://subca.ocsp-certum.com
-CERTIFICATE
-Subject: /Certum Level IV CA/C=PL/O=Unizeto Technologies S.A./OU=Certum
-    Certification Authority
-Issuer: /Certum CA/C=PL/O=Unizeto Sp. z o.o.
-	Signature algorithm: RSA / SHA1
-Details:
-	Public key: RSA-2048
-	Serial number: 293460
-	SKI: CD:4A:46:CA:03:65:90:E6:31:10:1A:82:C6:A5:1C:5E:D1:50:CF:1F
-	Valid from: 2009-03-03T12:54:25+0000
-	     until: 2024-03-03T12:54:25+0000
-	Key usages: cert sign, crl sign
-	Basic constraints: valid, is a CA certificate
-	SANs (0):
-CERTIFICATE
-Subject: /Certum Level IV CA/C=PL/O=Unizeto Technologies S.A./OU=Certum
-    Certification Authority
-Issuer: /Certum CA/C=PL/O=Unizeto Sp. z o.o.
-	Signature algorithm: RSA / SHA1
-Details:
-	Public key: RSA-2048
-	Serial number: 101883224110697654265552566296414015628
-	SKI: CD:4A:46:CA:03:65:90:E6:31:10:1A:82:C6:A5:1C:5E:D1:50:CF:1F
-	Valid from: 2009-03-03T12:54:25+0000
-	     until: 2024-03-03T12:54:25+0000
-	Key usages: cert sign, crl sign
-	Basic constraints: valid, is a CA certificate
-	SANs (0):
-	1 AIA:
-		http://repository.certum.pl/ca.cer
-	OCSP server:
-		- http://subca.ocsp-certum.com
-CERTIFICATE
-Subject: /Certum Global Services CA/C=PL/O=Unizeto Technologies S.A./OU=Certum
-    Certification Authority
-Issuer: /Certum CA/C=PL/O=Unizeto Sp. z o.o.
-	Signature algorithm: RSA / SHA1
-Details:
-	Public key: RSA-2048
-	Serial number: 262169954935883303583790439389206578407
-	SKI: 45:C5:B2:86:4E:CC:DD:29:97:E4:DD:14:C4:6E:AE:4D:B8:C1:77:F8
-	Valid from: 2009-03-03T13:06:12+0000
-	     until: 2024-03-03T13:06:12+0000
-	Key usages: cert sign, crl sign
-	Basic constraints: valid, is a CA certificate
-	SANs (0):
-	1 AIA:
-		http://repository.certum.pl/ca.cer
-	OCSP server:
-		- http://subca.ocsp-certum.com
-CERTIFICATE
 Subject: /Microsec e-Szigno Root CA 2009/C=HU/O=Microsec Ltd./L=Budapest
 Issuer: /Microsec e-Szigno Root CA 2009/C=HU/O=Microsec Ltd./L=Budapest
 	Signature algorithm: RSA / SHA256
@@ -2570,124 +2438,6 @@ Details:
 	OCSP server:
 		- http://ocsp.affirmtrust.com/comm
 CERTIFICATE
-Subject: /Greenville Health System CA/C=US/O=Greenville Health System/OU=Orion
-    Health Direct Secure Messaging
-Issuer: /Orion Health Direct Secure Messaging CA/C=US/O=Orion Health
-    Inc./OU=Orion Health Direct Secure Messaging
-	Signature algorithm: RSA / SHA256
-Details:
-	Public key: RSA-2048
-	Serial number: 4799643542855959189636201678987692202
-	AKI: A5:6E:22:FF:39:69:3A:23:FB:89:24:17:C6:60:94:00:1A:DA:8E:9E
-	SKI: E0:AD:B7:96:C1:26:8C:12:FC:47:0B:8A:85:77:9E:BF:E1:52:5C:31
-	Valid from: 2014-03-05T12:00:00+0000
-	     until: 2024-03-05T12:00:00+0000
-	Key usages: cert sign, crl sign, digital signature
-	Basic constraints: valid, is a CA certificate, max path length 0
-	SANs (0):
-	1 AIA:
-		http://cacerts.digicert.com/aiaGreenvilleHealthSystemCA.p7c
-	OCSP server:
-		- http://ocsp.digicert.com
-CERTIFICATE
-Subject: /Mary Washington Healthcare CA/C=US/O=Mary Washington
-    Healthcare/OU=Orion Health Direct Secure Messaging
-Issuer: /Orion Health Direct Secure Messaging CA/C=US/O=Orion Health
-    Inc./OU=Orion Health Direct Secure Messaging
-	Signature algorithm: RSA / SHA256
-Details:
-	Public key: RSA-2048
-	Serial number: 13567831232573287739371210764189646787
-	AKI: A5:6E:22:FF:39:69:3A:23:FB:89:24:17:C6:60:94:00:1A:DA:8E:9E
-	SKI: 30:2A:F2:92:2B:48:5D:00:73:E9:01:73:58:32:EC:0D:C3:31:D2:FF
-	Valid from: 2014-03-05T12:00:00+0000
-	     until: 2024-03-05T12:00:00+0000
-	Key usages: cert sign, crl sign, digital signature
-	Basic constraints: valid, is a CA certificate, max path length 0
-	SANs (0):
-	1 AIA:
-		http://cacerts.digicert.com/aiaMaryWashingtonHealthcareCA.p7c
-	OCSP server:
-		- http://ocsp.digicert.com
-CERTIFICATE
-Subject: /Huntsville Hospital System CA/C=US/O=Huntsville Hospital
-    System/OU=Orion Health Direct Secure Messaging
-Issuer: /Orion Health Direct Secure Messaging CA/C=US/O=Orion Health
-    Inc./OU=Orion Health Direct Secure Messaging
-	Signature algorithm: RSA / SHA256
-Details:
-	Public key: RSA-2048
-	Serial number: 20004891234412880071515538153580958626
-	AKI: A5:6E:22:FF:39:69:3A:23:FB:89:24:17:C6:60:94:00:1A:DA:8E:9E
-	SKI: E8:6E:22:CA:F4:99:50:2F:44:F4:D4:2D:62:E7:6C:59:75:DC:FA:19
-	Valid from: 2014-03-05T12:00:00+0000
-	     until: 2024-03-05T12:00:00+0000
-	Key usages: cert sign, crl sign, digital signature
-	Basic constraints: valid, is a CA certificate, max path length 0
-	SANs (0):
-	1 AIA:
-		http://cacerts.digicert.com/aiaHuntsvilleHospitalSystemCA.p7c
-	OCSP server:
-		- http://ocsp.digicert.com
-CERTIFICATE
-Subject: /Western Connecticut Health Network CA/C=US/O=Western Connecticut
-    Health Network/OU=Orion Health Direct Secure Messaging
-Issuer: /Orion Health Direct Secure Messaging CA/C=US/O=Orion Health
-    Inc./OU=Orion Health Direct Secure Messaging
-	Signature algorithm: RSA / SHA256
-Details:
-	Public key: RSA-2048
-	Serial number: 9519368907225747944615778593351764311
-	AKI: A5:6E:22:FF:39:69:3A:23:FB:89:24:17:C6:60:94:00:1A:DA:8E:9E
-	SKI: 5B:4B:77:AF:74:9F:D4:F3:61:46:FE:93:C5:AF:81:51:A1:18:07:5B
-	Valid from: 2014-03-05T12:00:00+0000
-	     until: 2024-03-05T12:00:00+0000
-	Key usages: cert sign, crl sign, digital signature
-	Basic constraints: valid, is a CA certificate, max path length 0
-	SANs (0):
-	1 AIA:
-		http://cacerts.digicert.com/aiaWesternConnecticutHealthNetworkCA.p7c
-	OCSP server:
-		- http://ocsp.digicert.com
-CERTIFICATE
-Subject: /Oregon Health Authority Direct CA/C=US/O=Oregon Health Authority
-Issuer: /DigiCert Federated Trust CA/C=US/O=DigiCert Inc/OU=www.digicert.com
-	Signature algorithm: RSA / SHA256
-Details:
-	Public key: RSA-2048
-	Serial number: 21121453050319733478320272834806357643
-	AKI: 46:08:38:5A:A9:8E:20:BB:0C:AF:5E:31:BA:89:B3:28:BF:AC:8C:36
-	SKI: 6A:4A:91:28:68:70:32:38:56:49:F2:BE:4D:5D:09:28:51:31:CC:0D
-	Valid from: 2014-03-05T12:00:00+0000
-	     until: 2024-03-05T12:00:00+0000
-	Key usages: cert sign, crl sign, digital signature
-	Basic constraints: valid, is a CA certificate, max path length 0
-	SANs (0):
-	1 AIA:
-		http://cacerts.digicert.com/aiaOregonHealthAuthorityDirectCA.p7c
-	OCSP server:
-		- http://ocsp.digicert.com
-CERTIFICATE
-Subject: /North Carolina Health Information Exchange CA/C=US/O=North Carolina
-    Health Information Exchange/OU=Orion Health Direct Secure Messaging
-Issuer: /Orion Health Direct Secure Messaging CA/C=US/O=Orion Health
-    Inc./OU=Orion Health Direct Secure Messaging
-	Signature algorithm: RSA / SHA256
-Details:
-	Public key: RSA-2048
-	Serial number: 8532363830711745581580411374226276804
-	AKI: A5:6E:22:FF:39:69:3A:23:FB:89:24:17:C6:60:94:00:1A:DA:8E:9E
-	SKI: 0F:16:20:4B:5D:1D:A1:D4:E5:04:21:28:84:78:FC:6A:47:2D:11:F3
-	Valid from: 2014-03-05T12:00:00+0000
-	     until: 2024-03-05T12:00:00+0000
-	Key usages: cert sign, crl sign, digital signature
-	Basic constraints: valid, is a CA certificate, max path length 0
-	SANs (0):
-	1 AIA:
-		http://cacerts.digicert.com/aiaNorthCarolinaHealthInformationExchangeCA.p7c
-	OCSP server:
-		- http://ocsp.digicert.com
-CERTIFICATE
 Subject: /COMODO ECC Domain Validation Secure Server CA/C=GB/O=COMODO CA
     Limited/L=Salford/ST=Greater Manchester
 Issuer: /COMODO ECC Certification Authority/C=GB/O=COMODO CA