You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
1.4 KiB
1.4 KiB
The CA-Certificates package is based on the list provided
by the Mozilla Foundation.
This version of the package contains the following adjustments:
(a)
The following root CA certificate is included in Mozilla's list:
Subject/Issuer: "E=premium-server@thawte.com,CN=Thawte Premium Server CA,OU=Certification Services Division,O=Thawte Consulting cc,L=Cape Town,ST=Western Cape,C=ZA"
Serial Number: 1 (0x1)
Signature Algorithm: PKCS #1 MD5 With RSA Encryption
Fingerprint (SHA1): 62:7F:8D:78:27:65:63:99:D2:7D:7F:90:44:C9:FE:B3:F3:3E:FA:9A
For compatibility with signed applets and OpenJDK, this package includes
an additional version of the root CA certificate, which contains the
same issuer/subject names and the same public key, but which contains a
different signature algorithm, serial number and validity dates:
Serial Number:36:12:22:96:c5:e3:38:a5:20:a1:d2:5f:4c:d7:09:54
Signature Algorithm: PKCS #1 SHA-1 With RSA Encryption
Fingerprint (SHA1): E0:AB:05:94:20:72:54:93:05:60:62:02:36:70:F7:CD:2E:FC:66:66
Thawte/Symantec have confirmed that the certificate is authentic at:
https://bugzilla.mozilla.org/show_bug.cgi?id=1100532#c9
(b)
Mozilla has removed several CA certificates that use 1024 bit keys.
For compatibility reasons, this package keeps several of those removed
CA certificates still trusted by default.
Please refer to the ca-legacy(8) man page and the ca-legacy utility
to learn how to disable them, if desired.