Re: cert.pem update

On Thu, Aug 20, 2026 at 02:31:52PM +0100, Stuart Henderson wrote:
> As usual, update from mozilla's CA bundle.
> 
> Adds these:
> 
> === /C=JP/O=SECOM Trust Systems Co., Ltd./CN=SECOM TLS ECC Root CA 2024
> === /C=JP/O=SECOM Trust Systems Co., Ltd./CN=SECOM TLS RSA Root CA 2024
> === /C=SE/O=Telia Company AB/CN=Telia EC TLS Root CA v3
> === /C=SE/O=Telia Company AB/CN=Telia RSA TLS Root CA v3
> 
> Removes these:
> 
> === /CN=Atos TrustedRoot 2011/O=Atos/C=DE
> === /C=TW/O=Chunghwa Telecom Co., Ltd./OU=ePKI Root Certification Authority
> === /C=JP/O=Cybertrust Japan Co., Ltd./CN=SecureSign Root CA12
> === /C=US/O=Entrust, Inc./OU=www.entrust.net/CPS is incorporated by reference/OU=(c) 2006 Entrust, Inc./CN=Entrust Root Certification Authority
> 
> The last of those expires in November anyway.
> 
> OK?

ok

PS: yuck, that stupid generic extension printer that dumps barely
sanitized garbage to stdout...

> -            setCext-hashedRoot:
> -                0/0-...0...+......0...g*.....E...
> -V|.[x....S.....