# This file is under puppet control
# All CAs are trusted, see /etc/ssl/ca-global/README

# blacklist SPI's old CA
!spi-inc.org/spi-cacert-2008.crt

# blacklist StartCom/WoSign
# https://wiki.mozilla.org/CA:WoSign_Issues
!mozilla/StartCom_Certification_Authority_2.crt
!mozilla/StartCom_Certification_Authority_G2.crt
!mozilla/StartCom_Certification_Authority.crt
!mozilla/WoSign_China.crt
!mozilla/WoSign.crt
!mozilla/CA_WoSign_ECC_Root.crt
!mozilla/Certification_Authority_of_WoSign_G2.crt