Revision history for Mozilla-CA

20260813
  - Update from Mozilla repository to 2026-08-13
  - Added certificates:
    - OISTE Server Root ECC G1
      sha256: eec997c0c30f216f7e3b8b307d2bae42412d753fc8219dafd1520b2572850f49
    - OISTE Server Root RSA G1
      sha256: 9ae36232a5189ffddb353dfd26520c015395d22777dac59db57b98c089a651e6
    - SECOM TLS ECC Root CA 2024
      sha256: 6ab2ab75f51cb4f4f0156203fbf6f646232f514be059f62833308b82b4d72db1
    - SECOM TLS RSA Root CA 2024
      sha256: 1435f225c5d252d7a21948cc3ce62aecfa88001e3dd72d1cc3555100eb372f93
    - SwissSign RSA TLS Root CA 2022 - 1
      sha256: 193144f431e0fddb740717d4de926a571133884b4360d30e272913cbe660ce41
    - Telia EC TLS Root CA v3
      sha256: 098e08a91dbbf77478b96cceb89b1413a5da37b7c862606a955deb07179f4326
    - Telia RSA TLS Root CA v3
      sha256: d13db1294c45ebc6fc86c6bbf69fa29bdfe692dff7c713c243c7a956c6a2284c
    - TrustAsia TLS ECC Root CA
      sha256: c0076b9ef0531fb1a656d67c4ebe97cd5dbaa41ef44598acc2489878c92d8711
    - TrustAsia TLS RSA Root CA
      sha256: 06c08d7dafd876971eb1124fe67f847ec0c7a158d3ea53cbe940e2ea9791f4c3
    - e-Szigno TLS Root CA 2023
      sha256: b49141502d00663d740f2e7ec340c52800962666121a36d09cf7dd2b90384fb4
  - Removed certificates:
    - AffirmTrust Commercial
      sha256: 0376ab1d54c5f9803ce4b2e201a0ee7eef7b57b636e8a93c9b8d4860c96f5fa7
    - AffirmTrust Networking
      sha256: 0a81ec5a929777f145904af38d5d509f66b5e2c58fcdb531058b0e17f3f0b41b
    - AffirmTrust Premium
      sha256: 70a73f7f376b60074248904534b11482d5bf0e698ecc498df52577ebf2e93b9a
    - AffirmTrust Premium ECC
      sha256: bd71fdf6da97e4cf62d1647add2581b07d79adf8397eb4ecba9c5e8488821423
    - Atos TrustedRoot 2011
      sha256: f356bea244b7a91eb35d53ca9ad7864ace018e2d35d5f8f96ddf68a6f41aa474
    - COMODO Certification Authority
      sha256: 0c2cd63df7806fa399ede809116b575bf87989f06518f9808c860503178baf66
    - Certigna
      sha256: e3b6a2db2ed7ce48842f7ac53241c7b71d54144bfb40c11f3f1d0b42f5eea12d
    - CommScope Public Trust ECC Root-01
      sha256: 11437cda7bb45e41365f45b39a38986b0de00def348e0c7bb0873633800bc38b
    - CommScope Public Trust ECC Root-02
      sha256: 2ffb7f813bbbb3c89ab4e8162d0f16d71509a830cc9d73c262e5140875d1ad4a
    - CommScope Public Trust RSA Root-01
      sha256: 02bdf96e2a45dd9bf18fc7e1dbdf21a0379ba3c9c2610344cfd8d606fec1ed81
    - CommScope Public Trust RSA Root-02
      sha256: ffe943d793424b4f7c440c1c3d648d5363f34b82dc87aa7a9f118fc5dee101f1
    - DigiCert Assured ID Root CA
      sha256: 3e9099b5015e8f486c00bcea9d111ee721faba355a89bcf1df69561e3dc6325c
    - DigiCert Global Root CA
      sha256: 4348a0e9444c78cb265e058d5e8944b4d84f9662bd26db257f8934a443c70161
    - DigiCert High Assurance EV Root CA
      sha256: 7431e5f4c3c1ce4690774f0b61e05440883ba9a01ed00ba6abd7806ed3b118cf
    - Entrust Root Certification Authority
      sha256: 73c176434f1bc6d5adf45b0e76e727287c8de57616c1e6e6141a2b2cbc7d8e4c
    - Entrust Root Certification Authority - EC1
      sha256: 02ed0eb28c14da45165c566791700d6451d7fb56f0b2ab1d3b8eb070e56edff5
    - Entrust Root Certification Authority - G2
      sha256: 43df5774b03e7fef5fe40d931a7bedf1bb2e6b42738c4e6d3841103d3aa7f339
    - FIRMAPROFESIONAL CA ROOT-A WEB
      sha256: bef256daf26e9c69bdec1602359798f3caf71821a03e018257c53c65617f3d4a
    - GLOBALTRUST 2020
      sha256: 9a296a5182d1d451a2e37f439b74daafa267523329f90f9a0d2007c334e23c9a
    - GTS Root R2
      sha256: 8d25cd97229dbf70356bda4eb3cc734031e24cf00fafcfd32dc76eb5841c7ea8
    - QuoVadis Root CA 2
      sha256: 85a0dd7dd720adb7ff05f83d542b209dc7ff4528f7d677b18389fea5e5c49e86
    - QuoVadis Root CA 3
      sha256: 18f1fc7f205df8adddeb7fe007dd57e3af375a9c4d8d73546bf4f1fed1e18d35
    - Secure Global CA
      sha256: 4200f5043ac8590ebb527d209ed1503029fbcbd41ca1b506ec27f15ade7dac69
    - SecureSign Root CA12
      sha256: 3f034bb5704d44b2d08545a02057de93ebf3905fce721acbc730c06ddaee904e
    - SecureTrust CA
      sha256: f1c1b50ae5a20dd8030ec9f6bc24823dd367b5255759b4e71b61fce9f7375d73
    - SwissSign Gold CA - G2
      sha256: 62dd0be9b9f50a163ea0f8e75c053b1eca57ea55c8688f647c6881f2c8357b95
    - TeliaSonera Root CA v1
      sha256: dd6936fe21f8f077c123a1a521c12224f72255b73e03a7260693e8a24b0fa389
    - Trustwave Global Certification Authority
      sha256: 97552015f5ddfc3c8788c006944555408894450084f100867086bc1a2bb58dc8
    - Trustwave Global ECC P256 Certification Authority
      sha256: 945bbc825ea554f489d1fd51a73ddf2ea624ac7019a05205225c22a78ccfa8b4
    - Trustwave Global ECC P384 Certification Authority
      sha256: 55903859c8c0c3ebb8759ece4e2557225ff5758bbd38ebd48276601e1bd58097
    - certSIGN ROOT CA
      sha256: eaa962c4fa4a6bafebe415196d351ccd888d4f53f3fa8ae6d7c466a94e6042bb
    - ePKI Root Certification Authority
      sha256: c0a6f4dc63a24bfdcf54ef2a6a082a0a72de35803e2ff5ff527ae5d87206dfd5

20250602
  - Update from Mozilla repository to 2025-06-02
  - Added certificates:
    - D-TRUST BR Root CA 2 2023
      sha256: 0552e6f83fdf65e8fa9670e666df28a4e21340b510cbe52566f97c4fb94b2bd1
    - D-TRUST EV Root CA 2 2023
      sha256: 8e8221b2e7d4007836a1672f0dcc299c33bc07d316f132fa1a206d587150f1ce
  - Removed certificates:
    - Baltimore CyberTrust Root
      sha256: 16af57a9f676b0ab126095aa5ebadef22ab31119d644ac95cd4b93dbf3f26aeb
    - Comodo AAA Services root
      sha256: d7a7a0fb5d7e2731d771e9484ebcdef71d5f0c3e0a2948782bc83ee0ea699ef4
    - Entrust.net Premium 2048 Secure Server CA
      sha256: 6dc47172e01cbcb0bf62580d895fe2b8ac9ad4f873801e0c10b9c837d21eb177
    - GlobalSign Root CA
      sha256: ebd41040e4bb3ec742c9e381d31ef2a41a48b6685c96e7cef3c1df6cd4331c99
    - Go Daddy Class 2 CA
      sha256: c3846bf24b9e93ca64274c0ec67c1ecc5e024ffcacd2d74019350e81fe546ae4
    - Starfield Class 2 CA
      sha256: 1465fa205397b876faa6f0a9958e5590e40fcc7faa4fb7c2c8677521fb5fb658
    - SwissSign Silver CA - G2
      sha256: be6c4da2bbb9ba59b6f3939768374246c3c005993fa98f020d1dedbed48a81d5
    - XRamp Global CA Root
      sha256: cecddc905099d8dadfc5b1d209b737cbe2c18cfb2c10c0ff0bcf0d3286fc1aa2

20250202
  - Update from Mozilla repository to 2025-02-02
  - Added certificates:
    - GLOBALTRUST 2020
      sha256: 9a296a5182d1d451a2e37f439b74daafa267523329f90f9a0d2007c334e23c9a
  - Removed certificates:
    - Entrust Root Certification Authority - G4
      sha256: db3517d1f6732a2d5ab97c533ec70779ee3270a62fb4ac4238372460e6f01e88
    - SecureSign RootCA11
      sha256: bf0feefb9e3a581ad5f9e9db7589985743d261085c4d314f6f5d7259aa421612
    - Security Communication RootCA3
      sha256: 24a55c2ab051442d0617766541239a4ad032d7c55175aa34ffde2fbc4f5c5294

20240924
  - Update from Mozilla repository to 2024-09-24
  - Added certificates:
    - SecureSign Root CA12
      sha256: 3f034bb5704d44b2d08545a02057de93ebf3905fce721acbc730c06ddaee904e
    - SecureSign Root CA14
      sha256: 4b009c1034494f9ab56bba3ba1d62731fc4d20d8955adcec10a925607261e338
    - SecureSign Root CA15
      sha256: e778f0f095fe843729cd1a0082179e5314a9c291442805e1fb1d8fb6b8886c3a
    - TWCA CYBER Root CA
      sha256: 3f63bb2814be174ec8b6439cf08d6d56f0b7c405883a5648a334424d6b3ec558

20240730
  - Update from Mozilla repository to 2024-07-30
  - Added certificates:
    - FIRMAPROFESIONAL CA ROOT-A WEB
      sha256: bef256daf26e9c69bdec1602359798f3caf71821a03e018257c53c65617f3d4a
  - Removed certificates:
    - GLOBALTRUST 2020
      sha256: 9a296a5182d1d451a2e37f439b74daafa267523329f90f9a0d2007c334e23c9a

20240313
  - Update from Mozilla repository to 2024-03-13
  - Added certificates:
    - Telekom Security TLS ECC Root 2020
      sha256: 578af4ded0853f4e5998db4aeaf9cbea8d945f60b620a38d1a3c13b2bc7ba8e1
    - Telekom Security TLS RSA Root 2023
      sha256: efc65cadbb59adb6efe84da22311b35624b71b3b1ea0da8b6655174ec8978646

20231213
  - Update from Mozilla repository to 2023-12-13
  - Added certificates:
    - CommScope Public Trust ECC Root-01
      sha256: 11437cda7bb45e41365f45b39a38986b0de00def348e0c7bb0873633800bc38b
    - CommScope Public Trust ECC Root-02
      sha256: 2ffb7f813bbbb3c89ab4e8162d0f16d71509a830cc9d73c262e5140875d1ad4a
    - CommScope Public Trust RSA Root-01
      sha256: 02bdf96e2a45dd9bf18fc7e1dbdf21a0379ba3c9c2610344cfd8d606fec1ed81
    - CommScope Public Trust RSA Root-02
      sha256: ffe943d793424b4f7c440c1c3d648d5363f34b82dc87aa7a9f118fc5dee101f1
    - TrustAsia Global Root CA G3
      sha256: e0d3226aeb1163c2e48ff9be3b50b4c6431be7bb1eacc5c36b5d5ec509039a08
    - TrustAsia Global Root CA G4
      sha256: be4b56cb5056c0136a526df444508daa36a0b54f42e4ac38f72af470e479654c
  - Removed certificates:
    - Security Communication Root CA
      sha256: e75e72ed9f560eec6eb4800073a43fc3ad19195a392282017895974a99026b6c

20230821
  - Update from Mozilla repository to 2023-08-21
  - Added certificates:
    - Atos TrustedRoot Root CA ECC TLS 2021
      sha256: b2fae53e14ccd7ab9212064701ae279c1d8988facb775fa8a008914e663988a8
    - Atos TrustedRoot Root CA RSA TLS 2021
      sha256: 81a9088ea59fb364c548a6f85559099b6f0405efbf18e5324ec9f457ba00112f
    - SSL.com TLS ECC Root CA 2022
      sha256: c32ffd9f46f936d16c3673990959434b9ad60aafbb9e7cf33654f144cc1ba143
    - SSL.com TLS RSA Root CA 2022
      sha256: 8faf7d2e2cb4709bb8e0b33666bf75a5dd45b5de480f8ea8d4bfe6bebc17f2ed
    - Sectigo Public Server Authentication Root E46
      sha256: c90f26f0fb1b4018b22227519b5ca2b53e2ca5b3be5cf18efe1bef47380c5383
    - Sectigo Public Server Authentication Root R46
      sha256: 7bb647a62aeeac88bf257aa522d01ffea395e0ab45c73f93f65654ec38f25a06
  - Removed certificates:
    - E-Tugra Global Root CA ECC v3
      sha256: 873f4685fa7f563625252e6d36bcd7f16fc24951f264e47e1b954f4908cdca13
    - E-Tugra Global Root CA RSA v3
      sha256: ef66b0b10a3cdb9f2e3648c76bd2af18ead2bfe6f117655e28c4060da1a3f4c2

20230807
  - Prevent extra headers in tarball and make it reproducible

20230801
  - Update from Mozilla repository to 2023-08-01
  - Added certificates:
    - BJCA Global Root CA1
      sha256: f3896f88fe7c0a882766a7fa6ad2749fb57a7f3e98fb769c1fa7b09c2c44d5ae
    - BJCA Global Root CA2
      sha256: 574df6931e278039667b720afdc1600fc27eb66dd3092979fb73856487212882
  - Removed certificates:
    - E-Tugra Certification Authority
      sha256: b0bfd52bb0d7d9bd92bf5d4dc13da255c02c542f378365ea893911f55e55f23c
    - Hongkong Post Root CA 1
      sha256: f9e67d336c51002ac054c632022d66dda2e7e3fff10ad061ed31d8bbb410cfb2
    - Network Solutions Certificate Authority
      sha256: 15f0ba00a3ac7af3ac884c072b1011a077bd77c097f40164b2f8598abd83860c
    - Staat der Nederlanden EV Root CA
      sha256: 4d2491414cfe956746ec4cefa6cf6f72e28a1329432f9d8a907ac4cb5dadc15a
    - TrustCor ECA-1
      sha256: 5a885db19c01d912c5759388938cafbbdf031ab2d48e91ee15589b42971d039c
    - TrustCor RootCert CA-1
      sha256: d40e9c86cd8fe468c1776959f49ea774fa548684b6c406f3909261f4dce2575c
    - TrustCor RootCert CA-2
      sha256: 0753e940378c1bd5e3836e395daea5cb839e5046f1bd0eae1951cf10fec7c965

20221114
  - Update from Mozilla repository to 2022-11-07
  - stop installing mk-ca-bundle.pl script
  - moved repository and issues to https://github.com/libwww-perl/Mozilla-CA
  - switched tests from Test to Test::More
  - fix license specification in metadata

20211001
  - Update mk-ca-bundle.pl and Mozilla data to 2021-10-01 (Aaron Rowe)
  - Improve metadata for license information (Shoichi Kaji)

20200520
  - Update from Mozilla repository to 2020-05-20
  - Update bundled mk-ca-bundle.pl from upstream.

20180301
  - Update from Mozilla repository to 2018-01-17
  - Update bundled mk-ca-bundle.pl from upstream.

20160104
  - Update from Mozilla repository

20150826
  - Update from Mozilla repository
  - Update license to match license of data source (MPL 2)

20141217
  - Update from Mozilla repository

20130114
  - New certificate: "T-TeleSec GlobalRoot Class 3"

20120823
  - Fix test (RT#79129, reported by Sinan Unur)

20120822
  - Add mk-ca-bundle.pl from git repository to distribution.
  - Add new/additional certificates from the following CAs: Verisign,
    UTN-USER, UTN USERFirst, Sonera, NetLock Qualified, SwissSign
    Platinum, S-TRUST, ComSign, Actalis, Trustis, StartCom, Buypass.

20120309
  - Download the certdata from mozilla over SSL (John Joseph Bachir)
  - CA updates:
    Removes:
    - Hellenic Academic and Research Institutions RootCA 2011

20120118
  - CA updates:
    Add:
    - Security Communication RootCA2
    - EC-ACC
    - Hellenic Academic and Research Institutions RootCA 2011
    Remove:
    - Verisign Class 4 Public Primary Certification Authority - G2
    - TC TrustCenter, Germany, Class 2 CA
    - TC TrustCenter, Germany, Class 3 CA

20111025
  - Do not add CA's only trusted for email and/or code signing (RT#70967)
    (if you need that, please let us know and we can see about putting it
     in as an option)

20110914
  - Remove "untrusted" certificates (RT#70967, Tomas Hoger)

20110904
  - Remove and distrust DigiNotar
  - Add Certinomis, Root CA Generalitat Valenciana, A-Trust-nQual-03 and TWCA