From fe333d258435864ef16f506d406418fe77350cd8 Mon Sep 17 00:00:00 2001 From: "Node.js GitHub Bot" Date: Tue, 13 Jun 2023 01:55:36 +0100 Subject: [PATCH] crypto: update root certificates to NSS 3.90 This is the certdata.txt[0] from NSS 3.90, released on 2023-04-06. This is the version of NSS that shipped in Firefox 113 on 2023-05-09. Certificates added: - BJCA Global Root CA1 - BJCA Global Root CA2 [0] https://hg.mozilla.org/projects/nss/raw-file/NSS_3_90_RTM/lib/ckfw/builtins/certdata.txt PR-URL: https://github.com/nodejs/node/pull/48416 Reviewed-By: Luigi Pinca Reviewed-By: Mohammed Keyvanzadeh Reviewed-By: Marco Ippolito --- src/node_root_certs.h | 45 +++++++ tools/certdata.txt | 283 ++++++++++++++++++++++++++++++++++++++++++ 2 files changed, 328 insertions(+) diff --git a/src/node_root_certs.h b/src/node_root_certs.h index 010a4d1616f2f5..f2608086aa9f1c 100644 --- a/src/node_root_certs.h +++ b/src/node_root_certs.h @@ -3363,4 +3363,49 @@ "9sRGKEkz0FhDKmMpzE2xtHqiuQ04pV1IKv3LsnNdo4gIxwwCMQDAqy0Obe0YottT6SXbVQjg\n" "UMzfRGEWgqtJsLKB7HOHeLRMsmIbEvoWTSVLY70eN9k=\n" "-----END CERTIFICATE-----", + +/* BJCA Global Root CA1 */ +"-----BEGIN CERTIFICATE-----\n" +"MIIFdDCCA1ygAwIBAgIQVW9l47TZkGobCdFsPsBsIDANBgkqhkiG9w0BAQsFADBUMQswCQYD\n" +"VQQGEwJDTjEmMCQGA1UECgwdQkVJSklORyBDRVJUSUZJQ0FURSBBVVRIT1JJVFkxHTAbBgNV\n" +"BAMMFEJKQ0EgR2xvYmFsIFJvb3QgQ0ExMB4XDTE5MTIxOTAzMTYxN1oXDTQ0MTIxMjAzMTYx\n" +"N1owVDELMAkGA1UEBhMCQ04xJjAkBgNVBAoMHUJFSUpJTkcgQ0VSVElGSUNBVEUgQVVUSE9S\n" +"SVRZMR0wGwYDVQQDDBRCSkNBIEdsb2JhbCBSb290IENBMTCCAiIwDQYJKoZIhvcNAQEBBQAD\n" +"ggIPADCCAgoCggIBAPFmCL3ZxRVhy4QEQaVpN3cdwbB7+sN3SJATcmTRuHyQNZ0YeYjjlwE8\n" +"R4HyDqKYDZ4/N+AZspDyRhySsTphzvq3Rp4Dhtczbu33RYx2N95ulpH3134rhxfVizXuhJFy\n" +"V9xgw8O558dnJCNPYwpj9mZ9S1WnP3hkSWkSl+BMDdMJoDIwOvqfwPKcxRIqLhy1BDPapDgR\n" +"at7GGPZHOiJBhyL8xIkoVNiMpTAK+BcWyqw3/XmnkRd4OJmtWO2y3syJfQOcs4ll5+M7sSKG\n" +"jwZteAf9kRJ/sGsciQ35uMt0WwfCyPQ10WRjeulumijWML3mG90Vr4TqnMfK9Q7q8l0ph49p\n" +"czm+LiRvRSGsxdRpJQaDrXpIhRMsDQa4bHlW/KNnMoH1V6XKV0Jp6VwkYe/iMBhORJhVb3rC\n" +"k9gZtt58R4oRTklH2yiUAguUSiz5EtBP6DF+bHq/pj+bOT0CFqMYs2esWz8sgytnOYFcuX6U\n" +"1WTdno9uruh8W7TXakdI136z1C2OVnZOz2nxbkRs1CTqjSShGL+9V/6pmTW12xB3uD1IutbB\n" +"5/EjPtffhZ0nPNRAvQoMvfXnjSXWgXSHRtQpdaJCbPdzied9v3pKH9MiyRVVz99vfFXQpIsH\n" +"ETdfg6YmV6YBW37+WGgHqel62bno/1Afq8K0wM7o6v0PvY1NuLxxAgMBAAGjQjBAMB0GA1Ud\n" +"DgQWBBTF7+3M2I0hxkjk49cULqcWk+WYATAPBgNVHRMBAf8EBTADAQH/MA4GA1UdDwEB/wQE\n" +"AwIBBjANBgkqhkiG9w0BAQsFAAOCAgEAUoKsITQfI/Ki2Pm4rzc2IInRNwPWaZ+4YRC6ojGY\n" +"WUfo0Q0lHhVBDOAqVdVXUsv45Mdpox1NcQJeXyFFYEhcCY5JEMEE3KliawLwQ8hOnThJdMky\n" +"cFRtwUf8jrQ2ntScvd0g1lPJGKm1Vrl2i5VnZu69mP6u775u+2D2/VnGKhs/I0qUJDAnyIm8\n" +"60Qkmss9vk/Ves6OF8tiwdneHg56/0OGNFK8YT88X7vZdrRTvJez/opMEi4r89fO4aL/3Xtw\n" +"+zuhTaRjAv04l5U/BXCga99igUOLtFkNSoxUnMW7gZ/NfaXvCyUeOiDbHPwfmGcCCtRzRBPb\n" +"UYQaVQNW4AB+dAb/OMRyHdOoP2gxXdMJxy6MW2Pg6Nwe0uxhHvLe5e/2mXZgLR6UcnHGCyoy\n" +"x5JO1UbXHfmpGQrI+pXObSOYqgs4rZpWDW+N8TEAiMEXnM0ZNjX+VVOg4DwzX5Ze4jLp3zO7\n" +"Bkqp2IRzznfSxqxx4VyjHQy7Ct9f4qNx2No3WqB4K/TUfet27fJhcKVlmtOJNBir+3I+17Q9\n" +"eVzYH6Eze9mCUAyTF6ps3MKCuwJXNq+YJyo5UOGwifUll35HaBC07HPKs5fRJNz2YqAo07Wj\n" +"uGS3iGJCz51TzZm+ZGiPTx4SSPfSKcOYKMryMguTjClPPGAyzQWWYezyr/6zcCwupvI=\n" +"-----END CERTIFICATE-----", + +/* BJCA Global Root CA2 */ +"-----BEGIN CERTIFICATE-----\n" +"MIICJTCCAaugAwIBAgIQLBcIfWQqwP6FGFkGz7RK6zAKBggqhkjOPQQDAzBUMQswCQYDVQQG\n" +"EwJDTjEmMCQGA1UECgwdQkVJSklORyBDRVJUSUZJQ0FURSBBVVRIT1JJVFkxHTAbBgNVBAMM\n" +"FEJKQ0EgR2xvYmFsIFJvb3QgQ0EyMB4XDTE5MTIxOTAzMTgyMVoXDTQ0MTIxMjAzMTgyMVow\n" +"VDELMAkGA1UEBhMCQ04xJjAkBgNVBAoMHUJFSUpJTkcgQ0VSVElGSUNBVEUgQVVUSE9SSVRZ\n" +"MR0wGwYDVQQDDBRCSkNBIEdsb2JhbCBSb290IENBMjB2MBAGByqGSM49AgEGBSuBBAAiA2IA\n" +"BJ3LgJGNU2e1uVCxA/jlSR9BIgmwUVJY1is0j8USRhTFiy8shP8sbqjV8QnjAyEUxEM9fMEs\n" +"xEtqSs3ph+B99iK++kpRuDCK/eHeGBIK9ke35xe/J4rUQUyWPGCWwf0VHKNCMEAwHQYDVR0O\n" +"BBYEFNJKsVF/BvDRgh9Obl+rg/xI1LCRMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQD\n" +"AgEGMAoGCCqGSM49BAMDA2gAMGUCMBq8W9f+qdJUDkpd0m2xQNz0Q9XSSpkZElaA94M04TVO\n" +"SG0ED1cxMDAtsaqdAzjbBgIxAMvMh1PLet8gUXOQwKhbYdDFUDn9hf7B43j4ptZLvZuHjw/l\n" +"1lOWqzzIQNph91Oj9w==\n" +"-----END CERTIFICATE-----", #endif // defined(NODE_WANT_INTERNALS) && NODE_WANT_INTERNALS diff --git a/tools/certdata.txt b/tools/certdata.txt index c1c5b7b2dda2b6..f604b265e2df58 100644 --- a/tools/certdata.txt +++ b/tools/certdata.txt @@ -24233,3 +24233,286 @@ CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_TRUSTED_DELEGATOR CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_TRUSTED_DELEGATOR CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_MUST_VERIFY_TRUST CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE + +# +# Certificate "BJCA Global Root CA1" +# +# Issuer: CN=BJCA Global Root CA1,O=BEIJING CERTIFICATE AUTHORITY,C=CN +# Serial Number:55:6f:65:e3:b4:d9:90:6a:1b:09:d1:6c:3e:c0:6c:20 +# Subject: CN=BJCA Global Root CA1,O=BEIJING CERTIFICATE AUTHORITY,C=CN +# Not Valid Before: Thu Dec 19 03:16:17 2019 +# Not Valid After : Mon Dec 12 03:16:17 2044 +# Fingerprint (SHA-256): F3:89:6F:88:FE:7C:0A:88:27:66:A7:FA:6A:D2:74:9F:B5:7A:7F:3E:98:FB:76:9C:1F:A7:B0:9C:2C:44:D5:AE +# Fingerprint (SHA1): D5:EC:8D:7B:4C:BA:79:F4:E7:E8:CB:9D:6B:AE:77:83:10:03:21:6A +CKA_CLASS CK_OBJECT_CLASS CKO_CERTIFICATE +CKA_TOKEN CK_BBOOL CK_TRUE +CKA_PRIVATE CK_BBOOL CK_FALSE +CKA_MODIFIABLE CK_BBOOL CK_FALSE +CKA_LABEL UTF8 "BJCA Global Root CA1" +CKA_CERTIFICATE_TYPE CK_CERTIFICATE_TYPE CKC_X_509 +CKA_SUBJECT MULTILINE_OCTAL +\060\124\061\013\060\011\006\003\125\004\006\023\002\103\116\061 +\046\060\044\006\003\125\004\012\014\035\102\105\111\112\111\116 +\107\040\103\105\122\124\111\106\111\103\101\124\105\040\101\125 +\124\110\117\122\111\124\131\061\035\060\033\006\003\125\004\003 +\014\024\102\112\103\101\040\107\154\157\142\141\154\040\122\157 +\157\164\040\103\101\061 +END +CKA_ID UTF8 "0" +CKA_ISSUER MULTILINE_OCTAL +\060\124\061\013\060\011\006\003\125\004\006\023\002\103\116\061 +\046\060\044\006\003\125\004\012\014\035\102\105\111\112\111\116 +\107\040\103\105\122\124\111\106\111\103\101\124\105\040\101\125 +\124\110\117\122\111\124\131\061\035\060\033\006\003\125\004\003 +\014\024\102\112\103\101\040\107\154\157\142\141\154\040\122\157 +\157\164\040\103\101\061 +END +CKA_SERIAL_NUMBER MULTILINE_OCTAL +\002\020\125\157\145\343\264\331\220\152\033\011\321\154\076\300 +\154\040 +END +CKA_VALUE MULTILINE_OCTAL +\060\202\005\164\060\202\003\134\240\003\002\001\002\002\020\125 +\157\145\343\264\331\220\152\033\011\321\154\076\300\154\040\060 +\015\006\011\052\206\110\206\367\015\001\001\013\005\000\060\124 +\061\013\060\011\006\003\125\004\006\023\002\103\116\061\046\060 +\044\006\003\125\004\012\014\035\102\105\111\112\111\116\107\040 +\103\105\122\124\111\106\111\103\101\124\105\040\101\125\124\110 +\117\122\111\124\131\061\035\060\033\006\003\125\004\003\014\024 +\102\112\103\101\040\107\154\157\142\141\154\040\122\157\157\164 +\040\103\101\061\060\036\027\015\061\071\061\062\061\071\060\063 +\061\066\061\067\132\027\015\064\064\061\062\061\062\060\063\061 +\066\061\067\132\060\124\061\013\060\011\006\003\125\004\006\023 +\002\103\116\061\046\060\044\006\003\125\004\012\014\035\102\105 +\111\112\111\116\107\040\103\105\122\124\111\106\111\103\101\124 +\105\040\101\125\124\110\117\122\111\124\131\061\035\060\033\006 +\003\125\004\003\014\024\102\112\103\101\040\107\154\157\142\141 +\154\040\122\157\157\164\040\103\101\061\060\202\002\042\060\015 +\006\011\052\206\110\206\367\015\001\001\001\005\000\003\202\002 +\017\000\060\202\002\012\002\202\002\001\000\361\146\010\275\331 +\305\025\141\313\204\004\101\245\151\067\167\035\301\260\173\372 +\303\167\110\220\023\162\144\321\270\174\220\065\235\030\171\210 +\343\227\001\074\107\201\362\016\242\230\015\236\077\067\340\031 +\262\220\362\106\034\222\261\072\141\316\372\267\106\236\003\206 +\327\063\156\355\367\105\214\166\067\336\156\226\221\367\327\176 +\053\207\027\325\213\065\356\204\221\162\127\334\140\303\303\271 +\347\307\147\044\043\117\143\012\143\366\146\175\113\125\247\077 +\170\144\111\151\022\227\340\114\015\323\011\240\062\060\072\372 +\237\300\362\234\305\022\052\056\034\265\004\063\332\244\070\021 +\152\336\306\030\366\107\072\042\101\207\042\374\304\211\050\124 +\330\214\245\060\012\370\027\026\312\254\067\375\171\247\221\027 +\170\070\231\255\130\355\262\336\314\211\175\003\234\263\211\145 +\347\343\073\261\042\206\217\006\155\170\007\375\221\022\177\260 +\153\034\211\015\371\270\313\164\133\007\302\310\364\065\321\144 +\143\172\351\156\232\050\326\060\275\346\033\335\025\257\204\352 +\234\307\312\365\016\352\362\135\051\207\217\151\163\071\276\056 +\044\157\105\041\254\305\324\151\045\006\203\255\172\110\205\023 +\054\015\006\270\154\171\126\374\243\147\062\201\365\127\245\312 +\127\102\151\351\134\044\141\357\342\060\030\116\104\230\125\157 +\172\302\223\330\031\266\336\174\107\212\021\116\111\107\333\050 +\224\002\013\224\112\054\371\022\320\117\350\061\176\154\172\277 +\246\077\233\071\075\002\026\243\030\263\147\254\133\077\054\203 +\053\147\071\201\134\271\176\224\325\144\335\236\217\156\256\350 +\174\133\264\327\152\107\110\327\176\263\324\055\216\126\166\116 +\317\151\361\156\104\154\324\044\352\215\044\241\030\277\275\127 +\376\251\231\065\265\333\020\167\270\075\110\272\326\301\347\361 +\043\076\327\337\205\235\047\074\324\100\275\012\014\275\365\347 +\215\045\326\201\164\207\106\324\051\165\242\102\154\367\163\211 +\347\175\277\172\112\037\323\042\311\025\125\317\337\157\174\125 +\320\244\213\007\021\067\137\203\246\046\127\246\001\133\176\376 +\130\150\007\251\351\172\331\271\350\377\120\037\253\302\264\300 +\316\350\352\375\017\275\215\115\270\274\161\002\003\001\000\001 +\243\102\060\100\060\035\006\003\125\035\016\004\026\004\024\305 +\357\355\314\330\215\041\306\110\344\343\327\024\056\247\026\223 +\345\230\001\060\017\006\003\125\035\023\001\001\377\004\005\060 +\003\001\001\377\060\016\006\003\125\035\017\001\001\377\004\004 +\003\002\001\006\060\015\006\011\052\206\110\206\367\015\001\001 +\013\005\000\003\202\002\001\000\122\202\254\041\064\037\043\362 +\242\330\371\270\257\067\066\040\211\321\067\003\326\151\237\270 +\141\020\272\242\061\230\131\107\350\321\015\045\036\025\101\014 +\340\052\125\325\127\122\313\370\344\307\151\243\035\115\161\002 +\136\137\041\105\140\110\134\011\216\111\020\301\004\334\251\142 +\153\002\360\103\310\116\235\070\111\164\311\062\160\124\155\301 +\107\374\216\264\066\236\324\234\275\335\040\326\123\311\030\251 +\265\126\271\166\213\225\147\146\356\275\230\376\256\357\276\156 +\373\140\366\375\131\306\052\033\077\043\112\224\044\060\047\310 +\211\274\353\104\044\232\313\075\276\117\325\172\316\216\027\313 +\142\301\331\336\036\016\172\377\103\206\064\122\274\141\077\074 +\137\273\331\166\264\123\274\227\263\376\212\114\022\056\053\363 +\327\316\341\242\377\335\173\160\373\073\241\115\244\143\002\375 +\070\227\225\077\005\160\240\153\337\142\201\103\213\264\131\015 +\112\214\124\234\305\273\201\237\315\175\245\357\013\045\036\072 +\040\333\034\374\037\230\147\002\012\324\163\104\023\333\121\204 +\032\125\003\126\340\000\176\164\006\377\070\304\162\035\323\250 +\077\150\061\135\323\011\307\056\214\133\143\340\350\334\036\322 +\354\141\036\362\336\345\357\366\231\166\140\055\036\224\162\161 +\306\013\052\062\307\222\116\325\106\327\035\371\251\031\012\310 +\372\225\316\155\043\230\252\013\070\255\232\126\015\157\215\361 +\061\000\210\301\027\234\315\031\066\065\376\125\123\240\340\074 +\063\137\226\136\342\062\351\337\063\273\006\112\251\330\204\163 +\316\167\322\306\254\161\341\134\243\035\014\273\012\337\137\342 +\243\161\330\332\067\132\240\170\053\364\324\175\353\166\355\362 +\141\160\245\145\232\323\211\064\030\253\373\162\076\327\264\075 +\171\134\330\037\241\063\173\331\202\120\014\223\027\252\154\334 +\302\202\273\002\127\066\257\230\047\052\071\120\341\260\211\365 +\045\227\176\107\150\020\264\354\163\312\263\227\321\044\334\366 +\142\240\050\323\265\243\270\144\267\210\142\102\317\235\123\315 +\231\276\144\150\217\117\036\022\110\367\322\051\303\230\050\312 +\362\062\013\223\214\051\117\074\140\062\315\005\226\141\354\362 +\257\376\263\160\054\056\246\362 +END +CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE +CKA_NSS_SERVER_DISTRUST_AFTER CK_BBOOL CK_FALSE +CKA_NSS_EMAIL_DISTRUST_AFTER CK_BBOOL CK_FALSE + +# Trust for "BJCA Global Root CA1" +# Issuer: CN=BJCA Global Root CA1,O=BEIJING CERTIFICATE AUTHORITY,C=CN +# Serial Number:55:6f:65:e3:b4:d9:90:6a:1b:09:d1:6c:3e:c0:6c:20 +# Subject: CN=BJCA Global Root CA1,O=BEIJING CERTIFICATE AUTHORITY,C=CN +# Not Valid Before: Thu Dec 19 03:16:17 2019 +# Not Valid After : Mon Dec 12 03:16:17 2044 +# Fingerprint (SHA-256): F3:89:6F:88:FE:7C:0A:88:27:66:A7:FA:6A:D2:74:9F:B5:7A:7F:3E:98:FB:76:9C:1F:A7:B0:9C:2C:44:D5:AE +# Fingerprint (SHA1): D5:EC:8D:7B:4C:BA:79:F4:E7:E8:CB:9D:6B:AE:77:83:10:03:21:6A +CKA_CLASS CK_OBJECT_CLASS CKO_NSS_TRUST +CKA_TOKEN CK_BBOOL CK_TRUE +CKA_PRIVATE CK_BBOOL CK_FALSE +CKA_MODIFIABLE CK_BBOOL CK_FALSE +CKA_LABEL UTF8 "BJCA Global Root CA1" +CKA_CERT_SHA1_HASH MULTILINE_OCTAL +\325\354\215\173\114\272\171\364\347\350\313\235\153\256\167\203 +\020\003\041\152 +END +CKA_CERT_MD5_HASH MULTILINE_OCTAL +\102\062\231\166\103\063\066\044\065\007\202\233\050\371\320\220 +END +CKA_ISSUER MULTILINE_OCTAL +\060\124\061\013\060\011\006\003\125\004\006\023\002\103\116\061 +\046\060\044\006\003\125\004\012\014\035\102\105\111\112\111\116 +\107\040\103\105\122\124\111\106\111\103\101\124\105\040\101\125 +\124\110\117\122\111\124\131\061\035\060\033\006\003\125\004\003 +\014\024\102\112\103\101\040\107\154\157\142\141\154\040\122\157 +\157\164\040\103\101\061 +END +CKA_SERIAL_NUMBER MULTILINE_OCTAL +\002\020\125\157\145\343\264\331\220\152\033\011\321\154\076\300 +\154\040 +END +CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_TRUSTED_DELEGATOR +CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_TRUSTED_DELEGATOR +CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_MUST_VERIFY_TRUST +CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE + +# +# Certificate "BJCA Global Root CA2" +# +# Issuer: CN=BJCA Global Root CA2,O=BEIJING CERTIFICATE AUTHORITY,C=CN +# Serial Number:2c:17:08:7d:64:2a:c0:fe:85:18:59:06:cf:b4:4a:eb +# Subject: CN=BJCA Global Root CA2,O=BEIJING CERTIFICATE AUTHORITY,C=CN +# Not Valid Before: Thu Dec 19 03:18:21 2019 +# Not Valid After : Mon Dec 12 03:18:21 2044 +# Fingerprint (SHA-256): 57:4D:F6:93:1E:27:80:39:66:7B:72:0A:FD:C1:60:0F:C2:7E:B6:6D:D3:09:29:79:FB:73:85:64:87:21:28:82 +# Fingerprint (SHA1): F4:27:86:EB:6E:B8:6D:88:31:67:02:FB:BA:66:A4:53:00:AA:7A:A6 +CKA_CLASS CK_OBJECT_CLASS CKO_CERTIFICATE +CKA_TOKEN CK_BBOOL CK_TRUE +CKA_PRIVATE CK_BBOOL CK_FALSE +CKA_MODIFIABLE CK_BBOOL CK_FALSE +CKA_LABEL UTF8 "BJCA Global Root CA2" +CKA_CERTIFICATE_TYPE CK_CERTIFICATE_TYPE CKC_X_509 +CKA_SUBJECT MULTILINE_OCTAL +\060\124\061\013\060\011\006\003\125\004\006\023\002\103\116\061 +\046\060\044\006\003\125\004\012\014\035\102\105\111\112\111\116 +\107\040\103\105\122\124\111\106\111\103\101\124\105\040\101\125 +\124\110\117\122\111\124\131\061\035\060\033\006\003\125\004\003 +\014\024\102\112\103\101\040\107\154\157\142\141\154\040\122\157 +\157\164\040\103\101\062 +END +CKA_ID UTF8 "0" +CKA_ISSUER MULTILINE_OCTAL +\060\124\061\013\060\011\006\003\125\004\006\023\002\103\116\061 +\046\060\044\006\003\125\004\012\014\035\102\105\111\112\111\116 +\107\040\103\105\122\124\111\106\111\103\101\124\105\040\101\125 +\124\110\117\122\111\124\131\061\035\060\033\006\003\125\004\003 +\014\024\102\112\103\101\040\107\154\157\142\141\154\040\122\157 +\157\164\040\103\101\062 +END +CKA_SERIAL_NUMBER MULTILINE_OCTAL +\002\020\054\027\010\175\144\052\300\376\205\030\131\006\317\264 +\112\353 +END +CKA_VALUE MULTILINE_OCTAL +\060\202\002\045\060\202\001\253\240\003\002\001\002\002\020\054 +\027\010\175\144\052\300\376\205\030\131\006\317\264\112\353\060 +\012\006\010\052\206\110\316\075\004\003\003\060\124\061\013\060 +\011\006\003\125\004\006\023\002\103\116\061\046\060\044\006\003 +\125\004\012\014\035\102\105\111\112\111\116\107\040\103\105\122 +\124\111\106\111\103\101\124\105\040\101\125\124\110\117\122\111 +\124\131\061\035\060\033\006\003\125\004\003\014\024\102\112\103 +\101\040\107\154\157\142\141\154\040\122\157\157\164\040\103\101 +\062\060\036\027\015\061\071\061\062\061\071\060\063\061\070\062 +\061\132\027\015\064\064\061\062\061\062\060\063\061\070\062\061 +\132\060\124\061\013\060\011\006\003\125\004\006\023\002\103\116 +\061\046\060\044\006\003\125\004\012\014\035\102\105\111\112\111 +\116\107\040\103\105\122\124\111\106\111\103\101\124\105\040\101 +\125\124\110\117\122\111\124\131\061\035\060\033\006\003\125\004 +\003\014\024\102\112\103\101\040\107\154\157\142\141\154\040\122 +\157\157\164\040\103\101\062\060\166\060\020\006\007\052\206\110 +\316\075\002\001\006\005\053\201\004\000\042\003\142\000\004\235 +\313\200\221\215\123\147\265\271\120\261\003\370\345\111\037\101 +\042\011\260\121\122\130\326\053\064\217\305\022\106\024\305\213 +\057\054\204\377\054\156\250\325\361\011\343\003\041\024\304\103 +\075\174\301\054\304\113\152\112\315\351\207\340\175\366\042\276 +\372\112\121\270\060\212\375\341\336\030\022\012\366\107\267\347 +\027\277\047\212\324\101\114\226\074\140\226\301\375\025\034\243 +\102\060\100\060\035\006\003\125\035\016\004\026\004\024\322\112 +\261\121\177\006\360\321\202\037\116\156\137\253\203\374\110\324 +\260\221\060\017\006\003\125\035\023\001\001\377\004\005\060\003 +\001\001\377\060\016\006\003\125\035\017\001\001\377\004\004\003 +\002\001\006\060\012\006\010\052\206\110\316\075\004\003\003\003 +\150\000\060\145\002\060\032\274\133\327\376\251\322\124\016\112 +\135\322\155\261\100\334\364\103\325\322\112\231\031\022\126\200 +\367\203\064\341\065\116\110\155\004\017\127\061\060\060\055\261 +\252\235\003\070\333\006\002\061\000\313\314\207\123\313\172\337 +\040\121\163\220\300\250\133\141\320\305\120\071\375\205\376\301 +\343\170\370\246\326\113\275\233\207\217\017\345\326\123\226\253 +\074\310\100\332\141\367\123\243\367 +END +CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE +CKA_NSS_SERVER_DISTRUST_AFTER CK_BBOOL CK_FALSE +CKA_NSS_EMAIL_DISTRUST_AFTER CK_BBOOL CK_FALSE + +# Trust for "BJCA Global Root CA2" +# Issuer: CN=BJCA Global Root CA2,O=BEIJING CERTIFICATE AUTHORITY,C=CN +# Serial Number:2c:17:08:7d:64:2a:c0:fe:85:18:59:06:cf:b4:4a:eb +# Subject: CN=BJCA Global Root CA2,O=BEIJING CERTIFICATE AUTHORITY,C=CN +# Not Valid Before: Thu Dec 19 03:18:21 2019 +# Not Valid After : Mon Dec 12 03:18:21 2044 +# Fingerprint (SHA-256): 57:4D:F6:93:1E:27:80:39:66:7B:72:0A:FD:C1:60:0F:C2:7E:B6:6D:D3:09:29:79:FB:73:85:64:87:21:28:82 +# Fingerprint (SHA1): F4:27:86:EB:6E:B8:6D:88:31:67:02:FB:BA:66:A4:53:00:AA:7A:A6 +CKA_CLASS CK_OBJECT_CLASS CKO_NSS_TRUST +CKA_TOKEN CK_BBOOL CK_TRUE +CKA_PRIVATE CK_BBOOL CK_FALSE +CKA_MODIFIABLE CK_BBOOL CK_FALSE +CKA_LABEL UTF8 "BJCA Global Root CA2" +CKA_CERT_SHA1_HASH MULTILINE_OCTAL +\364\047\206\353\156\270\155\210\061\147\002\373\272\146\244\123 +\000\252\172\246 +END +CKA_CERT_MD5_HASH MULTILINE_OCTAL +\136\012\366\107\137\246\024\350\021\001\225\077\115\001\353\074 +END +CKA_ISSUER MULTILINE_OCTAL +\060\124\061\013\060\011\006\003\125\004\006\023\002\103\116\061 +\046\060\044\006\003\125\004\012\014\035\102\105\111\112\111\116 +\107\040\103\105\122\124\111\106\111\103\101\124\105\040\101\125 +\124\110\117\122\111\124\131\061\035\060\033\006\003\125\004\003 +\014\024\102\112\103\101\040\107\154\157\142\141\154\040\122\157 +\157\164\040\103\101\062 +END +CKA_SERIAL_NUMBER MULTILINE_OCTAL +\002\020\054\027\010\175\144\052\300\376\205\030\131\006\317\264 +\112\353 +END +CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_TRUSTED_DELEGATOR +CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_TRUSTED_DELEGATOR +CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_MUST_VERIFY_TRUST +CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE