Merge pull request #365 from cloudflare/release/2026.2.0

Trust store release 2026.2.0

Author: jvaughan-cloudflare

ca-bundle.crt

@@ -324,27 +324,6 @@ NN6UCRNiUKl5vTijbKwUUwfER/1Vci3M1/O1QCfttQ4vRN4Buc0xqYtGL3cd5WiO
 vWzyhlTzAI6VUdNkQhhHJSAyTpj6dmXDRzrryoFGa2PjgESxz7XBaSI=
 -----END CERTIFICATE-----
 -----BEGIN CERTIFICATE-----
-MIIDYTCCAkmgAwIBAgIQCgEBAQAAAnwAAAAKAAAAAjANBgkqhkiG9w0BAQUFADA6
-MRkwFwYDVQQKExBSU0EgU2VjdXJpdHkgSW5jMR0wGwYDVQQLExRSU0EgU2VjdXJp
-dHkgMjA0OCBWMzAeFw0wMTAyMjIyMDM5MjNaFw0yNjAyMjIyMDM5MjNaMDoxGTAX
-BgNVBAoTEFJTQSBTZWN1cml0eSBJbmMxHTAbBgNVBAsTFFJTQSBTZWN1cml0eSAy
-MDQ4IFYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt49VcdKA3Xtp
-eafwGFAyPGJn9gqVB93mG/Oe2dJBVGutn3y+Gc37RqtBaB4Y6lXIL5F4iSj7Jylg
-/9+PjDvJSZu1pJTOAeo+tWN7fyb9Gd3AIb2E0S1PRsNO3Ng3OTsor8udGuorryGl
-wSMiuLgbWhOHV4PR8CDn6E8jQrAApX2J6elhc5SYcSa8LWrg903w8bYqODGBDSnh
-AMFRD0xS+ARaqn1y07iHKrtjEAMqs6FPDVpeRrc9DvV07Jmf+T0kgYim3WBU6JU2
-PcYJk5qjEoAAVZkZR73QpXzDuvsf9/UP+Ky5tfQ3mBMY3oVbtwyCO4dvlTlYMNpu
-AWgXIszACwIDAQABo2MwYTAPBgNVHRMBAf8EBTADAQH/MA4GA1UdDwEB/wQEAwIB
-BjAfBgNVHSMEGDAWgBQHw1EwpKrpRa41JPr/JCwz0LGdjDAdBgNVHQ4EFgQUB8NR
-MKSq6UWuNST6/yQsM9CxnYwwDQYJKoZIhvcNAQEFBQADggEBAF8+hnZuuDU8TjYc
-HnmYv/3VEhF5Ug7uMYm83X/50cYVIeiKAVQNOvtUudZj1LGqlk2iQk3UUx+LEN5/
-Zb5gEydxiKRz44Rj0aRV4VCT5hsOedBnvEbIvz8XDZXmxpBp3ue0L96VfdASPz0+
-f00/FGj1EVDVwfSQpQgdMWD/YIwjVAqv/qFuxdF6Kmh4zx6CCiC0H63lhbJqaHVO
-rSU3lIW+vaHU6rcMSzyd6BIA8F+sDeGscGNz9395nzIlQnQFgCi/vcEkllgVsRch
-6YlL2weIZ/QVrXA+L02FO8K32/6YaCOJ4XQP3vTFhGMpG8zLB8kApKnXwiJPZ9d3
-7CAFYd4=
------END CERTIFICATE-----
------BEGIN CERTIFICATE-----
 MIIDpDCCAoygAwIBAgIBATANBgkqhkiG9w0BAQUFADBjMQswCQYDVQQGEwJVUzEc
 MBoGA1UEChMTQW1lcmljYSBPbmxpbmUgSW5jLjE2MDQGA1UEAxMtQW1lcmljYSBP
 bmxpbmUgUm9vdCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eSAxMB4XDTAyMDUyODA2

cert.db

@@ -255,20 +255,6 @@ Details:
 	Basic constraints: valid, is a CA certificate
 	SANs (0):
 CERTIFICATE
-Subject: /O=RSA Security Inc/OU=RSA Security 2048 V3
-Issuer: /O=RSA Security Inc/OU=RSA Security 2048 V3
-	Signature algorithm: RSA / SHA1
-Details:
-	Public key: RSA-2048
-	Serial number: 13297492616345471454730593562152402946
-	AKI: 07:C3:51:30:A4:AA:E9:45:AE:35:24:FA:FF:24:2C:33:D0:B1:9D:8C
-	SKI: 07:C3:51:30:A4:AA:E9:45:AE:35:24:FA:FF:24:2C:33:D0:B1:9D:8C
-	Valid from: 2001-02-22T20:39:23+0000
-	     until: 2026-02-22T20:39:23+0000
-	Key usages: cert sign, crl sign
-	Basic constraints: valid, is a CA certificate
-	SANs (0):
-CERTIFICATE
 Subject: /America Online Root Certification Authority 1/C=US/O=America Online
     Inc.
 Issuer: /America Online Root Certification Authority 1/C=US/O=America Online

certdata/ca-bundle.txt

@@ -830,47 +830,6 @@ Details:
 		- http://ocsp2.netlock.hu/gold.cgi
 		- http://ocsp3.netlock.hu/gold.cgi
 CERTIFICATE
-Subject: /DigiCert Assured ID Code Signing CA-1/C=US/O=DigiCert
-    Inc/OU=www.digicert.com
-Issuer: /DigiCert Assured ID Root CA/C=US/O=DigiCert Inc/OU=www.digicert.com
-	Signature algorithm: RSA / SHA1
-Details:
-	Public key: RSA-2048
-	Serial number: 20812206907036738015322008881189383613
-	AKI: 45:EB:A2:AF:F4:92:CB:82:31:2D:51:8B:A7:A7:21:9D:F3:6D:C8:0F
-	SKI: 7B:68:CE:29:AA:C0:17:BE:49:7A:E1:E5:3F:D6:A7:F7:45:8F:35:32
-	Valid from: 2011-02-11T12:00:00+0000
-	     until: 2026-02-10T12:00:00+0000
-	Key usages: cert sign, crl sign, digital signature
-	Extended usages: code signing
-	Basic constraints: valid, is a CA certificate, max path length 0
-	SANs (0):
-	1 AIA:
-		http://cacerts.digicert.com/DigiCertAssuredIDRootCA.crt
-	OCSP server:
-		- http://ocsp.digicert.com
-CERTIFICATE
-Subject: /DigiCert High Assurance Code Signing CA-1/C=US/O=DigiCert
-    Inc/OU=www.digicert.com
-Issuer: /DigiCert High Assurance EV Root CA/C=US/O=DigiCert
-    Inc/OU=www.digicert.com
-	Signature algorithm: RSA / SHA1
-Details:
-	Public key: RSA-2048
-	Serial number: 3680403385497920146360574967411527007
-	AKI: B1:3E:C3:69:03:F8:BF:47:01:D4:98:26:1A:08:02:EF:63:64:2B:C3
-	SKI: 97:48:03:EB:15:08:6B:B9:B2:58:23:CC:94:2E:F1:C6:65:D2:64:8E
-	Valid from: 2011-02-11T12:00:00+0000
-	     until: 2026-02-10T12:00:00+0000
-	Key usages: cert sign, crl sign, digital signature
-	Extended usages: code signing
-	Basic constraints: valid, is a CA certificate, max path length 0
-	SANs (0):
-	1 AIA:
-		http://cacerts.digicert.com/DigiCertHighAssuranceEVRootCA.crt
-	OCSP server:
-		- http://ocsp.digicert.com
-CERTIFICATE
 Subject: /GlobalSign Timestamping CA - G2/C=BE/O=GlobalSign nv-sa
 Issuer: /GlobalSign Root CA/C=BE/O=GlobalSign nv-sa/OU=Root CA
 	Signature algorithm: RSA / SHA1
@@ -4547,66 +4506,6 @@ Details:
 	OCSP server:
 		- http://ocsps.ssl.com
 CERTIFICATE
-Subject: /Soluti CA - DV/C=BR/O=SOLUTI - SOLUCOES EM NEGOCIOS INTELIGENTES
-    S/A/L=Goiânia/ST=Goiás
-Issuer: /Trusted Root CA SHA256 G2/C=BE/O=GlobalSign nv-sa/OU=Trusted Root
-	Signature algorithm: RSA / SHA256
-Details:
-	Public key: RSA-2048
-	Serial number: 1455505521475182705259440521013449
-	AKI: C8:63:9B:08:69:54:C2:98:C8:D9:CD:E3:33:B7:50:5E:F8:C9:01:9B
-	SKI: 87:E1:03:20:65:0B:FA:03:49:A4:F6:73:33:C9:A0:66:BF:D7:87:52
-	Valid from: 2016-02-24T00:00:00+0000
-	     until: 2026-02-24T00:00:00+0000
-	Key usages: cert sign, crl sign
-	Extended usages: client auth, server auth
-	Basic constraints: valid, is a CA certificate, max path length 0
-	SANs (0):
-	1 AIA:
-		http://secure.globalsign.com/cacert/trustrootsha2g2.crt
-	OCSP server:
-		- http://ocsp2.globalsign.com/trustrootsha2g2
-CERTIFICATE
-Subject: /Soluti CA - EV/C=BR/O=SOLUTI - SOLUCOES EM NEGOCIOS INTELIGENTES
-    S/A/L=Goiânia/ST=Goiás
-Issuer: /Trusted Root CA SHA256 G2/C=BE/O=GlobalSign nv-sa/OU=Trusted Root
-	Signature algorithm: RSA / SHA256
-Details:
-	Public key: RSA-2048
-	Serial number: 1455505522786975561226704014216671
-	AKI: C8:63:9B:08:69:54:C2:98:C8:D9:CD:E3:33:B7:50:5E:F8:C9:01:9B
-	SKI: 24:08:BC:0A:80:5C:39:BA:B8:16:77:7E:92:91:4A:32:F2:BA:C9:2A
-	Valid from: 2016-02-24T00:00:00+0000
-	     until: 2026-02-24T00:00:00+0000
-	Key usages: cert sign, crl sign
-	Extended usages: client auth, server auth
-	Basic constraints: valid, is a CA certificate, max path length 0
-	SANs (0):
-	1 AIA:
-		http://secure.globalsign.com/cacert/trustrootsha2g2.crt
-	OCSP server:
-		- http://ocsp2.globalsign.com/trustrootsha2g2
-CERTIFICATE
-Subject: /Soluti CA - OV/C=BR/O=SOLUTI - SOLUCOES EM NEGOCIOS INTELIGENTES
-    S/A/L=Goiânia/ST=Goiás
-Issuer: /Trusted Root CA SHA256 G2/C=BE/O=GlobalSign nv-sa/OU=Trusted Root
-	Signature algorithm: RSA / SHA256
-Details:
-	Public key: RSA-2048
-	Serial number: 1455505522107102801216410382344309
-	AKI: C8:63:9B:08:69:54:C2:98:C8:D9:CD:E3:33:B7:50:5E:F8:C9:01:9B
-	SKI: 89:74:0B:BB:B1:51:75:11:93:EE:4B:4B:20:EF:61:6E:B8:A1:07:E6
-	Valid from: 2016-02-24T00:00:00+0000
-	     until: 2026-02-24T00:00:00+0000
-	Key usages: cert sign, crl sign
-	Extended usages: client auth, server auth
-	Basic constraints: valid, is a CA certificate, max path length 0
-	SANs (0):
-	1 AIA:
-		http://secure.globalsign.com/cacert/trustrootsha2g2.crt
-	OCSP server:
-		- http://ocsp2.globalsign.com/trustrootsha2g2
-CERTIFICATE
 Subject: /Entrust Class 3 Client CA - SHA256/C=US/O=Entrust, Inc./OU=See
     www.entrust.net/legal-terms/OU=(c) 2015 Entrust, Inc. - for authorized use
     only
@@ -4628,27 +4527,6 @@ Details:
 	OCSP server:
 		- http://ocsp.entrust.net
 CERTIFICATE
-Subject: /United Parcel Service, Inc. RSA Client CA/C=US/O=United Parcel
-    Service, Inc./L=Atlanta/ST=GA
-Issuer: /COMODO RSA Certification Authority/C=GB/O=COMODO CA
-    Limited/L=Salford/ST=Greater Manchester
-	Signature algorithm: RSA / SHA384
-Details:
-	Public key: RSA-2048
-	Serial number: 269848883876928263566383392334479268351
-	AKI: BB:AF:7E:02:3D:FA:A6:F1:3C:84:8E:AD:EE:38:98:EC:D9:32:32:D4
-	SKI: 4C:D9:C5:31:93:D6:46:E7:9B:A9:4D:30:8E:0C:B4:76:83:1E:3F:5E
-	Valid from: 2016-02-26T00:00:00+0000
-	     until: 2026-02-25T23:59:59+0000
-	Key usages: cert sign, crl sign, digital signature
-	Extended usages: client auth, s/mime
-	Basic constraints: valid, is a CA certificate, max path length 0
-	SANs (0):
-	1 AIA:
-		http://crt.comodoca.com/COMODORSAAddTrustCA.crt
-	OCSP server:
-		- http://ocsp.comodoca.com
-CERTIFICATE
 Subject: /Optioncare CA/C=US/O=Optioncare/OU=Orion Health Direct Secure
     Messaging
 Issuer: /Orion Health Direct Secure Messaging CA/C=US/O=Orion Health
@@ -20174,25 +20052,6 @@ Details:
 	OCSP server:
 		- http://ocsp.wisekey.com/
 CERTIFICATE
-Subject: /Soluti CA - EV/C=BR/O=SOLUTI - SOLUCOES EM NEGOCIOS INTELIGENTES S/A
-Issuer: /Trusted Root TLS CA SHA256 G3/C=BE/O=GlobalSign nv-sa
-	Signature algorithm: RSA / SHA256
-Details:
-	Public key: RSA-2048
-	Serial number: 159159750753635697499434586775294712474
-	AKI: DE:4F:D7:DD:27:AE:D5:7F:58:81:E1:2C:47:AC:23:B7:C6:7B:57:EF
-	SKI: 24:08:BC:0A:80:5C:39:BA:B8:16:77:7E:92:91:4A:32:F2:BA:C9:2A
-	Valid from: 2020-07-05T00:00:00+0000
-	     until: 2026-02-24T00:00:00+0000
-	Key usages: cert sign, crl sign
-	Extended usages: client auth, server auth
-	Basic constraints: valid, is a CA certificate, max path length 0
-	SANs (0):
-	1 AIA:
-		http://secure.globalsign.com/cacert/trustroottlssha2g3.crt
-	OCSP server:
-		- http://ocsp.globalsign.com/trustroottlssha2g3
-CERTIFICATE
 Subject: /Trusted Root nonTLS CA SHA256 G3/C=BE/O=GlobalSign nv-sa
 Issuer: /GlobalSign/O=GlobalSign/OU=GlobalSign Root CA - R3
 	Signature algorithm: RSA / SHA256
@@ -20212,25 +20071,6 @@ Details:
 	OCSP server:
 		- http://ocsp.globalsign.com/rootr3
 CERTIFICATE
-Subject: /Soluti CA - DV/C=BR/O=SOLUTI - SOLUCOES EM NEGOCIOS INTELIGENTES S/A
-Issuer: /Trusted Root TLS CA SHA256 G3/C=BE/O=GlobalSign nv-sa
-	Signature algorithm: RSA / SHA256
-Details:
-	Public key: RSA-2048
-	Serial number: 159159750043654717501606097123747732643
-	AKI: DE:4F:D7:DD:27:AE:D5:7F:58:81:E1:2C:47:AC:23:B7:C6:7B:57:EF
-	SKI: 87:E1:03:20:65:0B:FA:03:49:A4:F6:73:33:C9:A0:66:BF:D7:87:52
-	Valid from: 2020-07-05T00:00:00+0000
-	     until: 2026-02-24T00:00:00+0000
-	Key usages: cert sign, crl sign
-	Extended usages: client auth, server auth
-	Basic constraints: valid, is a CA certificate, max path length 0
-	SANs (0):
-	1 AIA:
-		http://secure.globalsign.com/cacert/trustroottlssha2g3.crt
-	OCSP server:
-		- http://ocsp.globalsign.com/trustroottlssha2g3
-CERTIFICATE
 Subject: /RNP ICPEdu OV SSL CA 2019/C=BR/O=Rede Nacional de Ensino e Pesquisa
     - RNP
 Issuer: /Trusted Root TLS CA SHA256 G3/C=BE/O=GlobalSign nv-sa
@@ -20289,25 +20129,6 @@ Details:
 	OCSP server:
 		- http://ocsp.globalsign.com/trustrootnontlssha2g3
 CERTIFICATE
-Subject: /Soluti CA - OV/C=BR/O=SOLUTI - SOLUCOES EM NEGOCIOS INTELIGENTES S/A
-Issuer: /Trusted Root TLS CA SHA256 G3/C=BE/O=GlobalSign nv-sa
-	Signature algorithm: RSA / SHA256
-Details:
-	Public key: RSA-2048
-	Serial number: 159159750355625473828539721604600426500
-	AKI: DE:4F:D7:DD:27:AE:D5:7F:58:81:E1:2C:47:AC:23:B7:C6:7B:57:EF
-	SKI: 89:74:0B:BB:B1:51:75:11:93:EE:4B:4B:20:EF:61:6E:B8:A1:07:E6
-	Valid from: 2020-07-05T00:00:00+0000
-	     until: 2026-02-24T00:00:00+0000
-	Key usages: cert sign, crl sign
-	Extended usages: client auth, server auth
-	Basic constraints: valid, is a CA certificate, max path length 0
-	SANs (0):
-	1 AIA:
-		http://secure.globalsign.com/cacert/trustroottlssha2g3.crt
-	OCSP server:
-		- http://ocsp.globalsign.com/trustroottlssha2g3
-CERTIFICATE
 Subject: /Actalis Domain Validation Server CA G3/C=IT/O=Actalis S.p.A./L=Ponte
     San Pietro/ST=Bergamo
 Issuer: /Actalis Authentication Root CA/C=IT/O=Actalis