On 2016/12/14 13:19, Steven McDonald wrote: > It looks like revision 1.10 of cert.pem (which was intended only to > sort the contents of the file) accidentally removed the GlobalSign R2 > CA -- probably because it has the same CN as the R3 CA. The CN is used > as a hash key in the script used for sorting > (https://spacehopper.org/format-pem.20160201). > > This diff adds it back (though you may want to fetch it from CVS > history rather than trusting this mail). I've verified that this is the > only case of a duplicate CN in revision 1.9, so no others should be > missing.
I will go over the whole file; I know of at least one root that wasn't listed before that we should add, and now that verification has been fixed there are a number to be removed too.
