No Bug, mozilla-central repo-update HSTS HPKP remote-settings - a=repo-update r=jcristau

Differential Revision: https://phabricator.services.mozilla.com/D123079
2024-11-23 21:01:08 +00:00 · 2021-08-19 12:19:55 +00:00 · 2021-08-19 12:19:55 +00:00 · c7cfba7954
commit c7cfba7954
parent d0cec07e15
4 changed files with 512 additions and 353 deletions
--- a/security/manager/ssl/StaticHPKPins.h
+++ b/security/manager/ssl/StaticHPKPins.h
@ -1149,4 +1149,4 @@ static const TransportSecurityPreload kPublicKeyPinningPreloadList[] = {

 static const int32_t kUnknownId = -1;

-static const PRTime kPreloadPKPinsExpirationTime = INT64_C(1637577866050000);
+static const PRTime kPreloadPKPinsExpirationTime = INT64_C(1637837218142000);
--- a/security/manager/ssl/nsSTSPreloadList.inc
+++ b/security/manager/ssl/nsSTSPreloadList.inc
--- a/services/settings/dumps/blocklists/addons-bloomfilters.json
+++ b/services/settings/dumps/blocklists/addons-bloomfilters.json
@ -1,5 +1,38 @@
 {
  "data": [
+    {
+      "stash": {
+        "blocked": [
+          "location-seeker@ext:1.0",
+          "medianewtab@com:1.1.11",
+          "book-enthusiast@ext:1.0",
+          "cnn-news@ext:1.0",
+          "vegan_chef@ext:1.0",
+          "britannica_finder@ext:1.0",
+          "wiki_search@ext:1.0",
+          "video_search@co:1.0",
+          "biology_assistant@ext:1.0",
+          "webclip@com:1.1.4",
+          "besttab@com:1.1.13",
+          "search_the_video@com:1.0",
+          "webtab@com:1.1.4",
+          "anime-freak-net@ext:1.0",
+          "quickpage@com:1.1.13",
+          "oxford-dict-net@ext:1.0",
+          "{b9020031-0ddd-4c54-8eba-4309bc1460e9}:0.6",
+          "shortcutvideo@com:1.0.4",
+          "cutshot@com:1.0.8",
+          "chemistry_assistant@ext:1.0",
+          "clipsearch@ext:1.0"
+        ],
+        "unblocked": []
+      },
+      "schema": 1628879876731,
+      "key_format": "{guid}:{version}",
+      "stash_time": 1629246909829,
+      "id": "c7f775e7-05e6-4e1b-8d7a-ce19dacf1cd7",
+      "last_modified": 1629247069884
+    },
    {
      "stash": {
        "blocked": [
--- a/services/settings/dumps/security-state/intermediates.json
+++ b/services/settings/dumps/security-state/intermediates.json
@ -1,5 +1,347 @@
 {
  "data": [
+    {
+      "schema": 1628258299195,
+      "derHash": "TlZm2sV5FhzwC42HBG0HTWycDA45lMZTvleZhzbFXZM=",
+      "subject": "CN=SwissSign RSA TLS Root CA 2021 - 1,O=SwissSign AG,C=CH",
+      "subjectDN": "MFExCzAJBgNVBAYTAkNIMRUwEwYDVQQKEwxTd2lzc1NpZ24gQUcxKzApBgNVBAMTIlN3aXNzU2lnbiBSU0EgVExTIFJvb3QgQ0EgMjAyMSAtIDE=",
+      "whitelist": false,
+      "attachment": {
+        "hash": "042c8b8edc66e748609524d1216e11e829cb1ea83b1e8436f4780f77b2f587c8",
+        "size": 2324,
+        "filename": "nUaOHm7QsD6Xagrjxl1hPu2HFDpXiamEvjDZ1IoWx24=.pem",
+        "location": "security-state-staging/intermediates/d9318494-fb6c-4bb5-b608-ffc24fc3cf5c.pem",
+        "mimetype": "application/x-pem-file"
+      },
+      "pubKeyHash": "nUaOHm7QsD6Xagrjxl1hPu2HFDpXiamEvjDZ1IoWx24=",
+      "crlite_enrolled": false,
+      "id": "4dbd71fd-d75e-46bf-98be-d2a76863a40a",
+      "last_modified": 1629359842438
+    },
+    {
+      "schema": 1628258300820,
+      "derHash": "vIu9fSedLl8HC872+vOqsb7zDaPrKHVCQpWtFH8q7wc=",
+      "subject": "CN=SwissSign RSA SMIME Root CA 2021 - 1,O=SwissSign AG,C=CH",
+      "subjectDN": "MFMxCzAJBgNVBAYTAkNIMRUwEwYDVQQKEwxTd2lzc1NpZ24gQUcxLTArBgNVBAMTJFN3aXNzU2lnbiBSU0EgU01JTUUgUm9vdCBDQSAyMDIxIC0gMQ==",
+      "whitelist": false,
+      "attachment": {
+        "hash": "1f319976c1c0fd2ff4a52e8fac41cf199e02731a70087681607fe7b3133160c8",
+        "size": 2328,
+        "filename": "HKpRHDLoh8f2rEFEWyjA0ZeopKTbs4zV87Xess-HD4U=.pem",
+        "location": "security-state-staging/intermediates/22d80059-836c-4a22-9631-c2432c02e90c.pem",
+        "mimetype": "application/x-pem-file"
+      },
+      "pubKeyHash": "HKpRHDLoh8f2rEFEWyjA0ZeopKTbs4zV87Xess+HD4U=",
+      "crlite_enrolled": false,
+      "id": "6bdf31ea-f0ff-4951-b310-0d3b28fd83d7",
+      "last_modified": 1629359842425
+    },
+    {
+      "schema": 1628280240116,
+      "derHash": "OcsZn0HGqCqtg8KBASdZbQLMTsdm0N/jGwHVDRd0dJ8=",
+      "subject": "CN=SwissSign RSA TLS EV ICA 2021 - 1,O=SwissSign AG,C=CH",
+      "subjectDN": "MFAxCzAJBgNVBAYTAkNIMRUwEwYDVQQKEwxTd2lzc1NpZ24gQUcxKjAoBgNVBAMTIVN3aXNzU2lnbiBSU0EgVExTIEVWIElDQSAyMDIxIC0gMQ==",
+      "whitelist": false,
+      "attachment": {
+        "hash": "762606517f59b459f2621c2fc75b3dbaa0b1b65d43e690165ec66b602a2a333c",
+        "size": 2605,
+        "filename": "vhTi8lZlOLaSt18G-qUx2M9Th5OcyP5bSIpb1W75B-4=.pem",
+        "location": "security-state-staging/intermediates/d6460050-3052-4201-821d-1252a102098e.pem",
+        "mimetype": "application/x-pem-file"
+      },
+      "pubKeyHash": "vhTi8lZlOLaSt18G+qUx2M9Th5OcyP5bSIpb1W75B+4=",
+      "crlite_enrolled": false,
+      "id": "c4b15ee1-8052-4cff-ad62-fae606d29d16",
+      "last_modified": 1629359842412
+    },
+    {
+      "schema": 1628280241845,
+      "derHash": "DlXQmFSCu7fEkOuhR8WgIaLCogidOor1fQHt1UDKWkU=",
+      "subject": "CN=SwissSign RSA TLS DV ICA 2021 - 1,O=SwissSign AG,C=CH",
+      "subjectDN": "MFAxCzAJBgNVBAYTAkNIMRUwEwYDVQQKEwxTd2lzc1NpZ24gQUcxKjAoBgNVBAMTIVN3aXNzU2lnbiBSU0EgVExTIERWIElDQSAyMDIxIC0gMQ==",
+      "whitelist": false,
+      "attachment": {
+        "hash": "3ae7fc2f0d23bef14972e3154b5eea231f26a4fdaf80e3344c6d4b6e18e8d9db",
+        "size": 2605,
+        "filename": "Ss2dQDgixRL9ORRngPe7uCywHw5_E9Qk2Wziz9rLT1s=.pem",
+        "location": "security-state-staging/intermediates/5cb1edf9-627a-4865-86b1-3ec141a531f4.pem",
+        "mimetype": "application/x-pem-file"
+      },
+      "pubKeyHash": "Ss2dQDgixRL9ORRngPe7uCywHw5/E9Qk2Wziz9rLT1s=",
+      "crlite_enrolled": false,
+      "id": "c04e50e0-c2cb-4d39-bc63-310fb2480df1",
+      "last_modified": 1629359842399
+    },
+    {
+      "schema": 1628280243649,
+      "derHash": "frj2Ma0chAjpcWrpILzWd5c7BZ6ZCu0B3aXhxZcLQCw=",
+      "subject": "CN=SwissSign RSA TLS Root CA 2021 - 1,O=SwissSign AG,C=CH",
+      "subjectDN": "MFExCzAJBgNVBAYTAkNIMRUwEwYDVQQKEwxTd2lzc1NpZ24gQUcxKzApBgNVBAMTIlN3aXNzU2lnbiBSU0EgVExTIFJvb3QgQ0EgMjAyMSAtIDE=",
+      "whitelist": false,
+      "attachment": {
+        "hash": "58bbfd7b0e504fb6397ee10ee6822ccf19f8e05c9937946aa0d7aa6fb11aa944",
+        "size": 1987,
+        "filename": "nUaOHm7QsD6Xagrjxl1hPu2HFDpXiamEvjDZ1IoWx24=.pem",
+        "location": "security-state-staging/intermediates/d3113b26-84d6-42f4-8f4c-71338d0445c6.pem",
+        "mimetype": "application/x-pem-file"
+      },
+      "pubKeyHash": "nUaOHm7QsD6Xagrjxl1hPu2HFDpXiamEvjDZ1IoWx24=",
+      "crlite_enrolled": false,
+      "id": "d9f263f7-4b19-408b-b5f1-4e57e4b0caca",
+      "last_modified": 1629359842386
+    },
+    {
+      "schema": 1628280245282,
+      "derHash": "ttVvPdJqyETlfIv+kFT1cGE1CpCJS5nNmBHppUX8hMU=",
+      "subject": "CN=SwissSign RSA SMIME Root CA 2021 - 1,O=SwissSign AG,C=CH",
+      "subjectDN": "MFMxCzAJBgNVBAYTAkNIMRUwEwYDVQQKEwxTd2lzc1NpZ24gQUcxLTArBgNVBAMTJFN3aXNzU2lnbiBSU0EgU01JTUUgUm9vdCBDQSAyMDIxIC0gMQ==",
+      "whitelist": false,
+      "attachment": {
+        "hash": "7644498aff67a69e26a420c7e76e4649ead3a8bb2f20c592db5c9cd2b4412601",
+        "size": 1991,
+        "filename": "HKpRHDLoh8f2rEFEWyjA0ZeopKTbs4zV87Xess-HD4U=.pem",
+        "location": "security-state-staging/intermediates/8d9a379a-9292-40d4-8a5b-7b64817c1ee3.pem",
+        "mimetype": "application/x-pem-file"
+      },
+      "pubKeyHash": "HKpRHDLoh8f2rEFEWyjA0ZeopKTbs4zV87Xess+HD4U=",
+      "crlite_enrolled": false,
+      "id": "91370cd3-434d-4277-8198-b6b86b912e7b",
+      "last_modified": 1629359842373
+    },
+    {
+      "schema": 1628280247018,
+      "derHash": "s2ef3dxkSFi5fbtn3neN1WxuXVOpa3DoWrUJ0JhoGG0=",
+      "subject": "CN=SwissSign RSA TLS OV ICA 2021 - 1,O=SwissSign AG,C=CH",
+      "subjectDN": "MFAxCzAJBgNVBAYTAkNIMRUwEwYDVQQKEwxTd2lzc1NpZ24gQUcxKjAoBgNVBAMTIVN3aXNzU2lnbiBSU0EgVExTIE9WIElDQSAyMDIxIC0gMQ==",
+      "whitelist": false,
+      "attachment": {
+        "hash": "5099e02991e2988acc1fb3e634306f0281eec0bcfb43b34279f9f9c5f89b3ac7",
+        "size": 2605,
+        "filename": "I0jJpdj7EtBTwYf-1gPJDZDyw1ViWFSUbUg4x-wTlgE=.pem",
+        "location": "security-state-staging/intermediates/e9a572f5-d8f1-44ad-b512-a322e5248d23.pem",
+        "mimetype": "application/x-pem-file"
+      },
+      "pubKeyHash": "I0jJpdj7EtBTwYf+1gPJDZDyw1ViWFSUbUg4x+wTlgE=",
+      "crlite_enrolled": false,
+      "id": "43356214-1dcf-4ca8-9fcb-b9437b7f5957",
+      "last_modified": 1629359842360
+    },
+    {
+      "schema": 1628283001801,
+      "derHash": "DlXQmFSCu7fEkOuhR8WgIaLCogidOor1fQHt1UDKWkU=",
+      "subject": "CN=SwissSign RSA TLS DV ICA 2021 - 1,O=SwissSign AG,C=CH",
+      "subjectDN": "MFAxCzAJBgNVBAYTAkNIMRUwEwYDVQQKEwxTd2lzc1NpZ24gQUcxKjAoBgNVBAMTIVN3aXNzU2lnbiBSU0EgVExTIERWIElDQSAyMDIxIC0gMQ==",
+      "whitelist": false,
+      "attachment": {
+        "hash": "3ae7fc2f0d23bef14972e3154b5eea231f26a4fdaf80e3344c6d4b6e18e8d9db",
+        "size": 2605,
+        "filename": "Ss2dQDgixRL9ORRngPe7uCywHw5_E9Qk2Wziz9rLT1s=.pem",
+        "location": "security-state-staging/intermediates/72fb7079-61fe-49cc-b481-6dde06dc7fd2.pem",
+        "mimetype": "application/x-pem-file"
+      },
+      "pubKeyHash": "Ss2dQDgixRL9ORRngPe7uCywHw5/E9Qk2Wziz9rLT1s=",
+      "crlite_enrolled": false,
+      "id": "bdfc479c-421f-4cff-a76f-1cde19032bc6",
+      "last_modified": 1629359842347
+    },
+    {
+      "schema": 1628283003482,
+      "derHash": "s2ef3dxkSFi5fbtn3neN1WxuXVOpa3DoWrUJ0JhoGG0=",
+      "subject": "CN=SwissSign RSA TLS OV ICA 2021 - 1,O=SwissSign AG,C=CH",
+      "subjectDN": "MFAxCzAJBgNVBAYTAkNIMRUwEwYDVQQKEwxTd2lzc1NpZ24gQUcxKjAoBgNVBAMTIVN3aXNzU2lnbiBSU0EgVExTIE9WIElDQSAyMDIxIC0gMQ==",
+      "whitelist": false,
+      "attachment": {
+        "hash": "5099e02991e2988acc1fb3e634306f0281eec0bcfb43b34279f9f9c5f89b3ac7",
+        "size": 2605,
+        "filename": "I0jJpdj7EtBTwYf-1gPJDZDyw1ViWFSUbUg4x-wTlgE=.pem",
+        "location": "security-state-staging/intermediates/3760ac40-11f9-41ae-8505-bd29362b0c74.pem",
+        "mimetype": "application/x-pem-file"
+      },
+      "pubKeyHash": "I0jJpdj7EtBTwYf+1gPJDZDyw1ViWFSUbUg4x+wTlgE=",
+      "crlite_enrolled": false,
+      "id": "c6585b3f-f4d6-4b0f-b51c-4888046b0538",
+      "last_modified": 1629359842334
+    },
+    {
+      "schema": 1628283005098,
+      "derHash": "OcsZn0HGqCqtg8KBASdZbQLMTsdm0N/jGwHVDRd0dJ8=",
+      "subject": "CN=SwissSign RSA TLS EV ICA 2021 - 1,O=SwissSign AG,C=CH",
+      "subjectDN": "MFAxCzAJBgNVBAYTAkNIMRUwEwYDVQQKEwxTd2lzc1NpZ24gQUcxKjAoBgNVBAMTIVN3aXNzU2lnbiBSU0EgVExTIEVWIElDQSAyMDIxIC0gMQ==",
+      "whitelist": false,
+      "attachment": {
+        "hash": "762606517f59b459f2621c2fc75b3dbaa0b1b65d43e690165ec66b602a2a333c",
+        "size": 2605,
+        "filename": "vhTi8lZlOLaSt18G-qUx2M9Th5OcyP5bSIpb1W75B-4=.pem",
+        "location": "security-state-staging/intermediates/c8acb265-5b4d-45a5-a914-5417af7b2bb9.pem",
+        "mimetype": "application/x-pem-file"
+      },
+      "pubKeyHash": "vhTi8lZlOLaSt18G+qUx2M9Th5OcyP5bSIpb1W75B+4=",
+      "crlite_enrolled": false,
+      "id": "df23d21b-5e71-4177-b00c-49744f34aa11",
+      "last_modified": 1629359842321
+    },
+    {
+      "schema": 1628283006719,
+      "derHash": "frj2Ma0chAjpcWrpILzWd5c7BZ6ZCu0B3aXhxZcLQCw=",
+      "subject": "CN=SwissSign RSA TLS Root CA 2021 - 1,O=SwissSign AG,C=CH",
+      "subjectDN": "MFExCzAJBgNVBAYTAkNIMRUwEwYDVQQKEwxTd2lzc1NpZ24gQUcxKzApBgNVBAMTIlN3aXNzU2lnbiBSU0EgVExTIFJvb3QgQ0EgMjAyMSAtIDE=",
+      "whitelist": false,
+      "attachment": {
+        "hash": "58bbfd7b0e504fb6397ee10ee6822ccf19f8e05c9937946aa0d7aa6fb11aa944",
+        "size": 1987,
+        "filename": "nUaOHm7QsD6Xagrjxl1hPu2HFDpXiamEvjDZ1IoWx24=.pem",
+        "location": "security-state-staging/intermediates/d67eff16-2e89-4196-b7a0-99cb92102494.pem",
+        "mimetype": "application/x-pem-file"
+      },
+      "pubKeyHash": "nUaOHm7QsD6Xagrjxl1hPu2HFDpXiamEvjDZ1IoWx24=",
+      "crlite_enrolled": false,
+      "id": "e1aa9474-6b16-4eeb-b21f-23184014ee46",
+      "last_modified": 1629359842308
+    },
+    {
+      "schema": 1628283008314,
+      "derHash": "ttVvPdJqyETlfIv+kFT1cGE1CpCJS5nNmBHppUX8hMU=",
+      "subject": "CN=SwissSign RSA SMIME Root CA 2021 - 1,O=SwissSign AG,C=CH",
+      "subjectDN": "MFMxCzAJBgNVBAYTAkNIMRUwEwYDVQQKEwxTd2lzc1NpZ24gQUcxLTArBgNVBAMTJFN3aXNzU2lnbiBSU0EgU01JTUUgUm9vdCBDQSAyMDIxIC0gMQ==",
+      "whitelist": false,
+      "attachment": {
+        "hash": "7644498aff67a69e26a420c7e76e4649ead3a8bb2f20c592db5c9cd2b4412601",
+        "size": 1991,
+        "filename": "HKpRHDLoh8f2rEFEWyjA0ZeopKTbs4zV87Xess-HD4U=.pem",
+        "location": "security-state-staging/intermediates/ccffe55b-9cab-4a31-b484-eb65463b91ef.pem",
+        "mimetype": "application/x-pem-file"
+      },
+      "pubKeyHash": "HKpRHDLoh8f2rEFEWyjA0ZeopKTbs4zV87Xess+HD4U=",
+      "crlite_enrolled": false,
+      "id": "c4fbd141-3e93-4624-971e-b072d720d9d7",
+      "last_modified": 1629359842295
+    },
+    {
+      "schema": 1629359431124,
+      "derHash": "mI1rLYe69DghxNMEvisOjzJdwXt6Ig6TT1xbe63/jhw=",
+      "subject": "CN=TK Elevator Atlas R6 DV CA 2021,O=TK Elevator GmbH,C=DE",
+      "subjectDN": "MFIxCzAJBgNVBAYTAkRFMRkwFwYDVQQKExBUSyBFbGV2YXRvciBHbWJIMSgwJgYDVQQDEx9USyBFbGV2YXRvciBBdGxhcyBSNiBEViBDQSAyMDIx",
+      "whitelist": false,
+      "attachment": {
+        "hash": "312c7287eef71d4f7d30e54c499b166794efcc40b1af781c5b8665f5014a6849",
+        "size": 2398,
+        "filename": "mTRp9SMkTGsZMOg5Zj2QnO66SKHcsi9q-xqfABlYAYY=.pem",
+        "location": "security-state-staging/intermediates/1dd04da2-87fd-4a93-b982-c48b5e43dd25.pem",
+        "mimetype": "application/x-pem-file"
+      },
+      "pubKeyHash": "mTRp9SMkTGsZMOg5Zj2QnO66SKHcsi9q+xqfABlYAYY=",
+      "crlite_enrolled": false,
+      "id": "4b849760-6c7e-4a45-a66a-3543765ad16e",
+      "last_modified": 1629359842283
+    },
+    {
+      "schema": 1628797808235,
+      "derHash": "pmUAegXv4YidZqQN7svGwaJx6RkAaBH9uNvX4GdSEtE=",
+      "subject": "CN=Siemens Issuing CA Internet Server 2020,O=Siemens,C=DE",
+      "subjectDN": "MFExMDAuBgNVBAMMJ1NpZW1lbnMgSXNzdWluZyBDQSBJbnRlcm5ldCBTZXJ2ZXIgMjAyMDEQMA4GA1UECgwHU2llbWVuczELMAkGA1UEBhMCREU=",
+      "whitelist": false,
+      "attachment": {
+        "hash": "5ab8cb8a5146787aeb9025fd757a28e47c16893e2603c336459385a83349e955",
+        "size": 1719,
+        "filename": "uOU9UZhtVd_opiG5DbxESujdJ9UY8BLJblR-MMq9FbY=.pem",
+        "location": "security-state-staging/intermediates/35dbe988-7f8a-48f2-b67b-e95d314fa047.pem",
+        "mimetype": "application/x-pem-file"
+      },
+      "pubKeyHash": "uOU9UZhtVd/opiG5DbxESujdJ9UY8BLJblR+MMq9FbY=",
+      "crlite_enrolled": false,
+      "id": "4e715493-0fb6-4d65-b11d-e75ae54c02e0",
+      "last_modified": 1629359842258
+    },
+    {
+      "schema": 1628819593276,
+      "derHash": "pmUAegXv4YidZqQN7svGwaJx6RkAaBH9uNvX4GdSEtE=",
+      "subject": "CN=Siemens Issuing CA Internet Server 2020,O=Siemens,C=DE",
+      "subjectDN": "MFExMDAuBgNVBAMMJ1NpZW1lbnMgSXNzdWluZyBDQSBJbnRlcm5ldCBTZXJ2ZXIgMjAyMDEQMA4GA1UECgwHU2llbWVuczELMAkGA1UEBhMCREU=",
+      "whitelist": false,
+      "attachment": {
+        "hash": "5ab8cb8a5146787aeb9025fd757a28e47c16893e2603c336459385a83349e955",
+        "size": 1719,
+        "filename": "uOU9UZhtVd_opiG5DbxESujdJ9UY8BLJblR-MMq9FbY=.pem",
+        "location": "security-state-staging/intermediates/e9295752-30ef-4d70-8969-fd3831ca87ea.pem",
+        "mimetype": "application/x-pem-file"
+      },
+      "pubKeyHash": "uOU9UZhtVd/opiG5DbxESujdJ9UY8BLJblR+MMq9FbY=",
+      "crlite_enrolled": false,
+      "id": "0a08acd0-7a3a-448c-97ca-8b13d65bb4c7",
+      "last_modified": 1629359842237
+    },
+    {
+      "schema": 1628689869279,
+      "derHash": "HdCVRJ/7PP8UsiJNWWuD/ULytHaDVTx5fREVDJGGkb0=",
+      "subject": "CN=GlobalSign Atlas R3 DV TLS CA H2 2021,O=GlobalSign nv-sa,C=BE",
+      "subjectDN": "MFgxCzAJBgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMS4wLAYDVQQDEyVHbG9iYWxTaWduIEF0bGFzIFIzIERWIFRMUyBDQSBIMiAyMDIx",
+      "whitelist": false,
+      "attachment": {
+        "hash": "e06bf97fe011b418ca619844016454cc4529a0fe9de1bf1ec3daa57af5a3a724",
+        "size": 1715,
+        "filename": "P_B6nUOG4cUlLNI8o81n2MESbUnYMzT49Flc6X5W1bk=.pem",
+        "location": "security-state-staging/intermediates/f804d5ba-d989-47f7-8217-4f41b5fb5978.pem",
+        "mimetype": "application/x-pem-file"
+      },
+      "pubKeyHash": "P/B6nUOG4cUlLNI8o81n2MESbUnYMzT49Flc6X5W1bk=",
+      "crlite_enrolled": true,
+      "id": "308fb64b-a058-4676-aa68-e8e33b332c2f",
+      "last_modified": 1629359842217
+    },
+    {
+      "schema": 1628733014053,
+      "derHash": "HsCvw+2fK63KBo4MLYH5xi75dSIxYxe3iGYrPtrTgHU=",
+      "subject": "CN=CRYPTAS EV Issuing CA,O=CRYPTAS it-Security GmbH,C=AT",
+      "subjectDN": "MFAxCzAJBgNVBAYTAkFUMSEwHwYDVQQKExhDUllQVEFTIGl0LVNlY3VyaXR5IEdtYkgxHjAcBgNVBAMTFUNSWVBUQVMgRVYgSXNzdWluZyBDQQ==",
+      "whitelist": false,
+      "attachment": {
+        "hash": "2457cbcf379f5f195fb7ba4cfda565f717ef9156b63623457e3301d515f0a255",
+        "size": 1735,
+        "filename": "Hfy6dQZGrjdPYWGB1jtGCNqt0xhK43ly0PpF6FLmg3A=.pem",
+        "location": "security-state-staging/intermediates/bc8ea5bd-51a8-4d5a-843d-4e5dc8487e16.pem",
+        "mimetype": "application/x-pem-file"
+      },
+      "pubKeyHash": "Hfy6dQZGrjdPYWGB1jtGCNqt0xhK43ly0PpF6FLmg3A=",
+      "crlite_enrolled": true,
+      "id": "35a5d389-1b24-494b-b20f-25ff30eee6b3",
+      "last_modified": 1629359842197
+    },
+    {
+      "schema": 1628797804852,
+      "derHash": "+uzdBdny5f6EmN5WzfiVwKaXCU4Xc97eX84gAbTHsVI=",
+      "subject": "CN=CRYPTAS OV Issuing CA,O=CRYPTAS it-Security GmbH,C=AT",
+      "subjectDN": "MFAxCzAJBgNVBAYTAkFUMSEwHwYDVQQKExhDUllQVEFTIGl0LVNlY3VyaXR5IEdtYkgxHjAcBgNVBAMTFUNSWVBUQVMgT1YgSXNzdWluZyBDQQ==",
+      "whitelist": false,
+      "attachment": {
+        "hash": "f56a51e5163cf8ad0112976fedb21ae8b4b37916e6ce6589da1af5850254ff9f",
+        "size": 1739,
+        "filename": "U8nQD9wXAUszOzpIA4B47LOCJYIzJLUU65_asRztVds=.pem",
+        "location": "security-state-staging/intermediates/ea32cf1d-0468-4c6e-8a78-d5381be82033.pem",
+        "mimetype": "application/x-pem-file"
+      },
+      "pubKeyHash": "U8nQD9wXAUszOzpIA4B47LOCJYIzJLUU65/asRztVds=",
+      "crlite_enrolled": true,
+      "id": "57899723-0793-43ef-ad24-f5da978584e9",
+      "last_modified": 1629359842177
+    },
+    {
+      "schema": 1627912922108,
+      "derHash": "P7oKpJ+94cgUyoMIeO0Dx9JDI/Y0g+Ut7o/0LBU8I08=",
+      "subject": "CN=GlobeSSL EV Certification Authority 2,OU=Controlled by COMODO exclusively for Globe Hosting\\, Inc.,O=Globe Hosting\\, Inc.,L=Wilmington,ST=DE,C=US",
+      "subjectDN": "MIHAMQswCQYDVQQGEwJVUzELMAkGA1UECBMCREUxEzARBgNVBAcTCldpbG1pbmd0b24xHDAaBgNVBAoTE0dsb2JlIEhvc3RpbmcsIEluYy4xQTA/BgNVBAsTOENvbnRyb2xsZWQgYnkgQ09NT0RPIGV4Y2x1c2l2ZWx5IGZvciBHbG9iZSBIb3N0aW5nLCBJbmMuMS4wLAYDVQQDEyVHbG9iZVNTTCBFViBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eSAy",
+      "whitelist": false,
+      "attachment": {
+        "hash": "8081c701056c43713db349d2808d99c5a352629faf0a60a54c7e2008170fc91c",
+        "size": 2276,
+        "filename": "iQ6SmjjdklCphf7sBBL9m4lWWf44bngHmvy7B8dl6XQ=.pem",
+        "location": "security-state-staging/intermediates/a35dab3a-08bf-43e8-b264-b1f7fa410a12.pem",
+        "mimetype": "application/x-pem-file"
+      },
+      "pubKeyHash": "iQ6SmjjdklCphf7sBBL9m4lWWf44bngHmvy7B8dl6XQ=",
+      "crlite_enrolled": true,
+      "id": "4fc9e088-612e-4c87-9986-7ef73542a266",
+      "last_modified": 1629359842156
+    },
    {
      "schema": 1627740208946,
      "derHash": "wt/7PBuwbeTBCSblF/82b5OJLV4C3G95CAJ121f9b8g=",
@ -1116,24 +1458,6 @@
      "id": "d2f0253e-ee56-47f2-a515-fe3092303409",
      "last_modified": 1624913854978
    },
-    {
-      "schema": 1624913401837,
-      "derHash": "P7oKpJ+94cgUyoMIeO0Dx9JDI/Y0g+Ut7o/0LBU8I08=",
-      "subject": "CN=GlobeSSL EV Certification Authority 2,OU=Controlled by COMODO exclusively for Globe Hosting\\, Inc.,O=Globe Hosting\\, Inc.,L=Wilmington,ST=DE,C=US",
-      "subjectDN": "MIHAMQswCQYDVQQGEwJVUzELMAkGA1UECBMCREUxEzARBgNVBAcTCldpbG1pbmd0b24xHDAaBgNVBAoTE0dsb2JlIEhvc3RpbmcsIEluYy4xQTA/BgNVBAsTOENvbnRyb2xsZWQgYnkgQ09NT0RPIGV4Y2x1c2l2ZWx5IGZvciBHbG9iZSBIb3N0aW5nLCBJbmMuMS4wLAYDVQQDEyVHbG9iZVNTTCBFViBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eSAy",
-      "whitelist": false,
-      "attachment": {
-        "hash": "8081c701056c43713db349d2808d99c5a352629faf0a60a54c7e2008170fc91c",
-        "size": 2276,
-        "filename": "iQ6SmjjdklCphf7sBBL9m4lWWf44bngHmvy7B8dl6XQ=.pem",
-        "location": "security-state-staging/intermediates/a35dab3a-08bf-43e8-b264-b1f7fa410a12.pem",
-        "mimetype": "application/x-pem-file"
-      },
-      "pubKeyHash": "iQ6SmjjdklCphf7sBBL9m4lWWf44bngHmvy7B8dl6XQ=",
-      "crlite_enrolled": false,
-      "id": "4fc9e088-612e-4c87-9986-7ef73542a266",
-      "last_modified": 1624913854957
-    },
    {
      "schema": 1624676240345,
      "derHash": "J3z0tl9TD8wHKF74nYMRiEiEAE5PLH2+fKAG6WU2zWI=",
@ -1278,42 +1602,6 @@
      "id": "7970fe87-7873-4399-851d-eef65ed7130b",
      "last_modified": 1624525052236
    },
-    {
-      "schema": 1624481397906,
-      "derHash": "+uzdBdny5f6EmN5WzfiVwKaXCU4Xc97eX84gAbTHsVI=",
-      "subject": "CN=CRYPTAS OV Issuing CA,O=CRYPTAS it-Security GmbH,C=AT",
-      "subjectDN": "MFAxCzAJBgNVBAYTAkFUMSEwHwYDVQQKExhDUllQVEFTIGl0LVNlY3VyaXR5IEdtYkgxHjAcBgNVBAMTFUNSWVBUQVMgT1YgSXNzdWluZyBDQQ==",
-      "whitelist": false,
-      "attachment": {
-        "hash": "f56a51e5163cf8ad0112976fedb21ae8b4b37916e6ce6589da1af5850254ff9f",
-        "size": 1739,
-        "filename": "U8nQD9wXAUszOzpIA4B47LOCJYIzJLUU65_asRztVds=.pem",
-        "location": "security-state-staging/intermediates/ea32cf1d-0468-4c6e-8a78-d5381be82033.pem",
-        "mimetype": "application/x-pem-file"
-      },
-      "pubKeyHash": "U8nQD9wXAUszOzpIA4B47LOCJYIzJLUU65/asRztVds=",
-      "crlite_enrolled": false,
-      "id": "57899723-0793-43ef-ad24-f5da978584e9",
-      "last_modified": 1624525052223
-    },
-    {
-      "schema": 1624481399654,
-      "derHash": "HsCvw+2fK63KBo4MLYH5xi75dSIxYxe3iGYrPtrTgHU=",
-      "subject": "CN=CRYPTAS EV Issuing CA,O=CRYPTAS it-Security GmbH,C=AT",
-      "subjectDN": "MFAxCzAJBgNVBAYTAkFUMSEwHwYDVQQKExhDUllQVEFTIGl0LVNlY3VyaXR5IEdtYkgxHjAcBgNVBAMTFUNSWVBUQVMgRVYgSXNzdWluZyBDQQ==",
-      "whitelist": false,
-      "attachment": {
-        "hash": "2457cbcf379f5f195fb7ba4cfda565f717ef9156b63623457e3301d515f0a255",
-        "size": 1735,
-        "filename": "Hfy6dQZGrjdPYWGB1jtGCNqt0xhK43ly0PpF6FLmg3A=.pem",
-        "location": "security-state-staging/intermediates/bc8ea5bd-51a8-4d5a-843d-4e5dc8487e16.pem",
-        "mimetype": "application/x-pem-file"
-      },
-      "pubKeyHash": "Hfy6dQZGrjdPYWGB1jtGCNqt0xhK43ly0PpF6FLmg3A=",
-      "crlite_enrolled": false,
-      "id": "35a5d389-1b24-494b-b20f-25ff30eee6b3",
-      "last_modified": 1624525052209
-    },
    {
      "schema": 1624481400864,
      "derHash": "WaNFbnUOMl/LE1ncKegoGJtJgsEZxk+s/WcocRswUy8=",
@ -1458,24 +1746,6 @@
      "id": "a7237377-ea8a-421a-9e89-eb5e456457e7",
      "last_modified": 1623920278085
    },
-    {
-      "schema": 1623916927671,
-      "derHash": "HdCVRJ/7PP8UsiJNWWuD/ULytHaDVTx5fREVDJGGkb0=",
-      "subject": "CN=GlobalSign Atlas R3 DV TLS CA H2 2021,O=GlobalSign nv-sa,C=BE",
-      "subjectDN": "MFgxCzAJBgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMS4wLAYDVQQDEyVHbG9iYWxTaWduIEF0bGFzIFIzIERWIFRMUyBDQSBIMiAyMDIx",
-      "whitelist": false,
-      "attachment": {
-        "hash": "e06bf97fe011b418ca619844016454cc4529a0fe9de1bf1ec3daa57af5a3a724",
-        "size": 1715,
-        "filename": "P_B6nUOG4cUlLNI8o81n2MESbUnYMzT49Flc6X5W1bk=.pem",
-        "location": "security-state-staging/intermediates/f804d5ba-d989-47f7-8217-4f41b5fb5978.pem",
-        "mimetype": "application/x-pem-file"
-      },
-      "pubKeyHash": "P/B6nUOG4cUlLNI8o81n2MESbUnYMzT49Flc6X5W1bk=",
-      "crlite_enrolled": false,
-      "id": "308fb64b-a058-4676-aa68-e8e33b332c2f",
-      "last_modified": 1623920278074
-    },
    {
      "schema": 1623916929422,
      "derHash": "slTzzerx0pq1PLQ56A+5lvHpCig+m1CFuHSdGOT1mHs=",
@ -12600,24 +12870,6 @@
      "id": "58c4fe43-8482-4fd9-a504-3f27e47b56b9",
      "last_modified": 1601517447564
    },
-    {
-      "schema": 1601376650517,
-      "derHash": "pmUAegXv4YidZqQN7svGwaJx6RkAaBH9uNvX4GdSEtE=",
-      "subject": "CN=Siemens Issuing CA Internet Server 2020,O=Siemens,C=DE",
-      "subjectDN": "MFExMDAuBgNVBAMMJ1NpZW1lbnMgSXNzdWluZyBDQSBJbnRlcm5ldCBTZXJ2ZXIgMjAyMDEQMA4GA1UECgwHU2llbWVuczELMAkGA1UEBhMCREU=",
-      "whitelist": false,
-      "attachment": {
-        "hash": "5ab8cb8a5146787aeb9025fd757a28e47c16893e2603c336459385a83349e955",
-        "size": 1719,
-        "filename": "uOU9UZhtVd_opiG5DbxESujdJ9UY8BLJblR-MMq9FbY=.pem",
-        "location": "security-state-staging/intermediates/e9295752-30ef-4d70-8969-fd3831ca87ea.pem",
-        "mimetype": "application/x-pem-file"
-      },
-      "pubKeyHash": "uOU9UZhtVd/opiG5DbxESujdJ9UY8BLJblR+MMq9FbY=",
-      "crlite_enrolled": true,
-      "id": "0a08acd0-7a3a-448c-97ca-8b13d65bb4c7",
-      "last_modified": 1601517447540
-    },
    {
      "schema": 1601376654768,
      "derHash": "QtyCf0b7XoXf+uR9PGkPUB7OJdV11ZelDY+Hj6Qq/Oo=",
@ -15894,24 +16146,6 @@
      "id": "492ac880-b573-41d2-9d22-5faff82d960e",
      "last_modified": 1601517444952
    },
-    {
-      "schema": 1601372962115,
-      "derHash": "pmUAegXv4YidZqQN7svGwaJx6RkAaBH9uNvX4GdSEtE=",
-      "subject": "CN=Siemens Issuing CA Internet Server 2020,O=Siemens,C=DE",
-      "subjectDN": "MFExMDAuBgNVBAMMJ1NpZW1lbnMgSXNzdWluZyBDQSBJbnRlcm5ldCBTZXJ2ZXIgMjAyMDEQMA4GA1UECgwHU2llbWVuczELMAkGA1UEBhMCREU=",
-      "whitelist": false,
-      "attachment": {
-        "hash": "5ab8cb8a5146787aeb9025fd757a28e47c16893e2603c336459385a83349e955",
-        "size": 1719,
-        "filename": "uOU9UZhtVd_opiG5DbxESujdJ9UY8BLJblR-MMq9FbY=.pem",
-        "location": "security-state-staging/intermediates/35dbe988-7f8a-48f2-b67b-e95d314fa047.pem",
-        "mimetype": "application/x-pem-file"
-      },
-      "pubKeyHash": "uOU9UZhtVd/opiG5DbxESujdJ9UY8BLJblR+MMq9FbY=",
-      "crlite_enrolled": true,
-      "id": "4e715493-0fb6-4d65-b11d-e75ae54c02e0",
-      "last_modified": 1601517444941
-    },
    {
      "schema": 1601372963495,
      "derHash": "MoZpFBLzDs5cBl/WL0OSpHYtHneBUzg1nfOQKZ+9Ye8=",