From dd8cd97d4d99c7d714c6b971772c41a448fc0a0e Mon Sep 17 00:00:00 2001
From: "Node.js GitHub Bot" <github-bot@iojs.org>
Date: Tue, 13 Jun 2023 01:55:36 +0100
Subject: [PATCH] crypto: update root certificates to NSS 3.90

This is the certdata.txt[0] from NSS 3.90, released on 2023-04-06.

This is the version of NSS that shipped in Firefox 113 on
2023-05-09.

Certificates added:
- BJCA Global Root CA1
- BJCA Global Root CA2

[0] https://hg.mozilla.org/projects/nss/raw-file/NSS_3_90_RTM/lib/ckfw/builtins/certdata.txt

PR-URL: https://github.com/nodejs/node/pull/48416
Reviewed-By: Luigi Pinca <luigipinca@gmail.com>
Reviewed-By: Mohammed Keyvanzadeh <mohammadkeyvanzade94@gmail.com>
Reviewed-By: Marco Ippolito <marcoippolito54@gmail.com>
---
 src/node_root_certs.h |  45 +++++++
 tools/certdata.txt    | 283 ++++++++++++++++++++++++++++++++++++++++++
 2 files changed, 328 insertions(+)

diff --git a/src/node_root_certs.h b/src/node_root_certs.h
index 010a4d1616f2f5..f2608086aa9f1c 100644
--- a/src/node_root_certs.h
+++ b/src/node_root_certs.h
@@ -3363,4 +3363,49 @@
 "9sRGKEkz0FhDKmMpzE2xtHqiuQ04pV1IKv3LsnNdo4gIxwwCMQDAqy0Obe0YottT6SXbVQjg\n"
 "UMzfRGEWgqtJsLKB7HOHeLRMsmIbEvoWTSVLY70eN9k=\n"
 "-----END CERTIFICATE-----",
+
+/* BJCA Global Root CA1 */
+"-----BEGIN CERTIFICATE-----\n"
+"MIIFdDCCA1ygAwIBAgIQVW9l47TZkGobCdFsPsBsIDANBgkqhkiG9w0BAQsFADBUMQswCQYD\n"
+"VQQGEwJDTjEmMCQGA1UECgwdQkVJSklORyBDRVJUSUZJQ0FURSBBVVRIT1JJVFkxHTAbBgNV\n"
+"BAMMFEJKQ0EgR2xvYmFsIFJvb3QgQ0ExMB4XDTE5MTIxOTAzMTYxN1oXDTQ0MTIxMjAzMTYx\n"
+"N1owVDELMAkGA1UEBhMCQ04xJjAkBgNVBAoMHUJFSUpJTkcgQ0VSVElGSUNBVEUgQVVUSE9S\n"
+"SVRZMR0wGwYDVQQDDBRCSkNBIEdsb2JhbCBSb290IENBMTCCAiIwDQYJKoZIhvcNAQEBBQAD\n"
+"ggIPADCCAgoCggIBAPFmCL3ZxRVhy4QEQaVpN3cdwbB7+sN3SJATcmTRuHyQNZ0YeYjjlwE8\n"
+"R4HyDqKYDZ4/N+AZspDyRhySsTphzvq3Rp4Dhtczbu33RYx2N95ulpH3134rhxfVizXuhJFy\n"
+"V9xgw8O558dnJCNPYwpj9mZ9S1WnP3hkSWkSl+BMDdMJoDIwOvqfwPKcxRIqLhy1BDPapDgR\n"
+"at7GGPZHOiJBhyL8xIkoVNiMpTAK+BcWyqw3/XmnkRd4OJmtWO2y3syJfQOcs4ll5+M7sSKG\n"
+"jwZteAf9kRJ/sGsciQ35uMt0WwfCyPQ10WRjeulumijWML3mG90Vr4TqnMfK9Q7q8l0ph49p\n"
+"czm+LiRvRSGsxdRpJQaDrXpIhRMsDQa4bHlW/KNnMoH1V6XKV0Jp6VwkYe/iMBhORJhVb3rC\n"
+"k9gZtt58R4oRTklH2yiUAguUSiz5EtBP6DF+bHq/pj+bOT0CFqMYs2esWz8sgytnOYFcuX6U\n"
+"1WTdno9uruh8W7TXakdI136z1C2OVnZOz2nxbkRs1CTqjSShGL+9V/6pmTW12xB3uD1IutbB\n"
+"5/EjPtffhZ0nPNRAvQoMvfXnjSXWgXSHRtQpdaJCbPdzied9v3pKH9MiyRVVz99vfFXQpIsH\n"
+"ETdfg6YmV6YBW37+WGgHqel62bno/1Afq8K0wM7o6v0PvY1NuLxxAgMBAAGjQjBAMB0GA1Ud\n"
+"DgQWBBTF7+3M2I0hxkjk49cULqcWk+WYATAPBgNVHRMBAf8EBTADAQH/MA4GA1UdDwEB/wQE\n"
+"AwIBBjANBgkqhkiG9w0BAQsFAAOCAgEAUoKsITQfI/Ki2Pm4rzc2IInRNwPWaZ+4YRC6ojGY\n"
+"WUfo0Q0lHhVBDOAqVdVXUsv45Mdpox1NcQJeXyFFYEhcCY5JEMEE3KliawLwQ8hOnThJdMky\n"
+"cFRtwUf8jrQ2ntScvd0g1lPJGKm1Vrl2i5VnZu69mP6u775u+2D2/VnGKhs/I0qUJDAnyIm8\n"
+"60Qkmss9vk/Ves6OF8tiwdneHg56/0OGNFK8YT88X7vZdrRTvJez/opMEi4r89fO4aL/3Xtw\n"
+"+zuhTaRjAv04l5U/BXCga99igUOLtFkNSoxUnMW7gZ/NfaXvCyUeOiDbHPwfmGcCCtRzRBPb\n"
+"UYQaVQNW4AB+dAb/OMRyHdOoP2gxXdMJxy6MW2Pg6Nwe0uxhHvLe5e/2mXZgLR6UcnHGCyoy\n"
+"x5JO1UbXHfmpGQrI+pXObSOYqgs4rZpWDW+N8TEAiMEXnM0ZNjX+VVOg4DwzX5Ze4jLp3zO7\n"
+"Bkqp2IRzznfSxqxx4VyjHQy7Ct9f4qNx2No3WqB4K/TUfet27fJhcKVlmtOJNBir+3I+17Q9\n"
+"eVzYH6Eze9mCUAyTF6ps3MKCuwJXNq+YJyo5UOGwifUll35HaBC07HPKs5fRJNz2YqAo07Wj\n"
+"uGS3iGJCz51TzZm+ZGiPTx4SSPfSKcOYKMryMguTjClPPGAyzQWWYezyr/6zcCwupvI=\n"
+"-----END CERTIFICATE-----",
+
+/* BJCA Global Root CA2 */
+"-----BEGIN CERTIFICATE-----\n"
+"MIICJTCCAaugAwIBAgIQLBcIfWQqwP6FGFkGz7RK6zAKBggqhkjOPQQDAzBUMQswCQYDVQQG\n"
+"EwJDTjEmMCQGA1UECgwdQkVJSklORyBDRVJUSUZJQ0FURSBBVVRIT1JJVFkxHTAbBgNVBAMM\n"
+"FEJKQ0EgR2xvYmFsIFJvb3QgQ0EyMB4XDTE5MTIxOTAzMTgyMVoXDTQ0MTIxMjAzMTgyMVow\n"
+"VDELMAkGA1UEBhMCQ04xJjAkBgNVBAoMHUJFSUpJTkcgQ0VSVElGSUNBVEUgQVVUSE9SSVRZ\n"
+"MR0wGwYDVQQDDBRCSkNBIEdsb2JhbCBSb290IENBMjB2MBAGByqGSM49AgEGBSuBBAAiA2IA\n"
+"BJ3LgJGNU2e1uVCxA/jlSR9BIgmwUVJY1is0j8USRhTFiy8shP8sbqjV8QnjAyEUxEM9fMEs\n"
+"xEtqSs3ph+B99iK++kpRuDCK/eHeGBIK9ke35xe/J4rUQUyWPGCWwf0VHKNCMEAwHQYDVR0O\n"
+"BBYEFNJKsVF/BvDRgh9Obl+rg/xI1LCRMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQD\n"
+"AgEGMAoGCCqGSM49BAMDA2gAMGUCMBq8W9f+qdJUDkpd0m2xQNz0Q9XSSpkZElaA94M04TVO\n"
+"SG0ED1cxMDAtsaqdAzjbBgIxAMvMh1PLet8gUXOQwKhbYdDFUDn9hf7B43j4ptZLvZuHjw/l\n"
+"1lOWqzzIQNph91Oj9w==\n"
+"-----END CERTIFICATE-----",
 #endif  // defined(NODE_WANT_INTERNALS) && NODE_WANT_INTERNALS
diff --git a/tools/certdata.txt b/tools/certdata.txt
index c1c5b7b2dda2b6..f604b265e2df58 100644
--- a/tools/certdata.txt
+++ b/tools/certdata.txt
@@ -24233,3 +24233,286 @@ CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_TRUSTED_DELEGATOR
 CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_TRUSTED_DELEGATOR
 CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_MUST_VERIFY_TRUST
 CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE
+
+#
+# Certificate "BJCA Global Root CA1"
+#
+# Issuer: CN=BJCA Global Root CA1,O=BEIJING CERTIFICATE AUTHORITY,C=CN
+# Serial Number:55:6f:65:e3:b4:d9:90:6a:1b:09:d1:6c:3e:c0:6c:20
+# Subject: CN=BJCA Global Root CA1,O=BEIJING CERTIFICATE AUTHORITY,C=CN
+# Not Valid Before: Thu Dec 19 03:16:17 2019
+# Not Valid After : Mon Dec 12 03:16:17 2044
+# Fingerprint (SHA-256): F3:89:6F:88:FE:7C:0A:88:27:66:A7:FA:6A:D2:74:9F:B5:7A:7F:3E:98:FB:76:9C:1F:A7:B0:9C:2C:44:D5:AE
+# Fingerprint (SHA1): D5:EC:8D:7B:4C:BA:79:F4:E7:E8:CB:9D:6B:AE:77:83:10:03:21:6A
+CKA_CLASS CK_OBJECT_CLASS CKO_CERTIFICATE
+CKA_TOKEN CK_BBOOL CK_TRUE
+CKA_PRIVATE CK_BBOOL CK_FALSE
+CKA_MODIFIABLE CK_BBOOL CK_FALSE
+CKA_LABEL UTF8 "BJCA Global Root CA1"
+CKA_CERTIFICATE_TYPE CK_CERTIFICATE_TYPE CKC_X_509
+CKA_SUBJECT MULTILINE_OCTAL
+\060\124\061\013\060\011\006\003\125\004\006\023\002\103\116\061
+\046\060\044\006\003\125\004\012\014\035\102\105\111\112\111\116
+\107\040\103\105\122\124\111\106\111\103\101\124\105\040\101\125
+\124\110\117\122\111\124\131\061\035\060\033\006\003\125\004\003
+\014\024\102\112\103\101\040\107\154\157\142\141\154\040\122\157
+\157\164\040\103\101\061
+END
+CKA_ID UTF8 "0"
+CKA_ISSUER MULTILINE_OCTAL
+\060\124\061\013\060\011\006\003\125\004\006\023\002\103\116\061
+\046\060\044\006\003\125\004\012\014\035\102\105\111\112\111\116
+\107\040\103\105\122\124\111\106\111\103\101\124\105\040\101\125
+\124\110\117\122\111\124\131\061\035\060\033\006\003\125\004\003
+\014\024\102\112\103\101\040\107\154\157\142\141\154\040\122\157
+\157\164\040\103\101\061
+END
+CKA_SERIAL_NUMBER MULTILINE_OCTAL
+\002\020\125\157\145\343\264\331\220\152\033\011\321\154\076\300
+\154\040
+END
+CKA_VALUE MULTILINE_OCTAL
+\060\202\005\164\060\202\003\134\240\003\002\001\002\002\020\125
+\157\145\343\264\331\220\152\033\011\321\154\076\300\154\040\060
+\015\006\011\052\206\110\206\367\015\001\001\013\005\000\060\124
+\061\013\060\011\006\003\125\004\006\023\002\103\116\061\046\060
+\044\006\003\125\004\012\014\035\102\105\111\112\111\116\107\040
+\103\105\122\124\111\106\111\103\101\124\105\040\101\125\124\110
+\117\122\111\124\131\061\035\060\033\006\003\125\004\003\014\024
+\102\112\103\101\040\107\154\157\142\141\154\040\122\157\157\164
+\040\103\101\061\060\036\027\015\061\071\061\062\061\071\060\063
+\061\066\061\067\132\027\015\064\064\061\062\061\062\060\063\061
+\066\061\067\132\060\124\061\013\060\011\006\003\125\004\006\023
+\002\103\116\061\046\060\044\006\003\125\004\012\014\035\102\105
+\111\112\111\116\107\040\103\105\122\124\111\106\111\103\101\124
+\105\040\101\125\124\110\117\122\111\124\131\061\035\060\033\006
+\003\125\004\003\014\024\102\112\103\101\040\107\154\157\142\141
+\154\040\122\157\157\164\040\103\101\061\060\202\002\042\060\015
+\006\011\052\206\110\206\367\015\001\001\001\005\000\003\202\002
+\017\000\060\202\002\012\002\202\002\001\000\361\146\010\275\331
+\305\025\141\313\204\004\101\245\151\067\167\035\301\260\173\372
+\303\167\110\220\023\162\144\321\270\174\220\065\235\030\171\210
+\343\227\001\074\107\201\362\016\242\230\015\236\077\067\340\031
+\262\220\362\106\034\222\261\072\141\316\372\267\106\236\003\206
+\327\063\156\355\367\105\214\166\067\336\156\226\221\367\327\176
+\053\207\027\325\213\065\356\204\221\162\127\334\140\303\303\271
+\347\307\147\044\043\117\143\012\143\366\146\175\113\125\247\077
+\170\144\111\151\022\227\340\114\015\323\011\240\062\060\072\372
+\237\300\362\234\305\022\052\056\034\265\004\063\332\244\070\021
+\152\336\306\030\366\107\072\042\101\207\042\374\304\211\050\124
+\330\214\245\060\012\370\027\026\312\254\067\375\171\247\221\027
+\170\070\231\255\130\355\262\336\314\211\175\003\234\263\211\145
+\347\343\073\261\042\206\217\006\155\170\007\375\221\022\177\260
+\153\034\211\015\371\270\313\164\133\007\302\310\364\065\321\144
+\143\172\351\156\232\050\326\060\275\346\033\335\025\257\204\352
+\234\307\312\365\016\352\362\135\051\207\217\151\163\071\276\056
+\044\157\105\041\254\305\324\151\045\006\203\255\172\110\205\023
+\054\015\006\270\154\171\126\374\243\147\062\201\365\127\245\312
+\127\102\151\351\134\044\141\357\342\060\030\116\104\230\125\157
+\172\302\223\330\031\266\336\174\107\212\021\116\111\107\333\050
+\224\002\013\224\112\054\371\022\320\117\350\061\176\154\172\277
+\246\077\233\071\075\002\026\243\030\263\147\254\133\077\054\203
+\053\147\071\201\134\271\176\224\325\144\335\236\217\156\256\350
+\174\133\264\327\152\107\110\327\176\263\324\055\216\126\166\116
+\317\151\361\156\104\154\324\044\352\215\044\241\030\277\275\127
+\376\251\231\065\265\333\020\167\270\075\110\272\326\301\347\361
+\043\076\327\337\205\235\047\074\324\100\275\012\014\275\365\347
+\215\045\326\201\164\207\106\324\051\165\242\102\154\367\163\211
+\347\175\277\172\112\037\323\042\311\025\125\317\337\157\174\125
+\320\244\213\007\021\067\137\203\246\046\127\246\001\133\176\376
+\130\150\007\251\351\172\331\271\350\377\120\037\253\302\264\300
+\316\350\352\375\017\275\215\115\270\274\161\002\003\001\000\001
+\243\102\060\100\060\035\006\003\125\035\016\004\026\004\024\305
+\357\355\314\330\215\041\306\110\344\343\327\024\056\247\026\223
+\345\230\001\060\017\006\003\125\035\023\001\001\377\004\005\060
+\003\001\001\377\060\016\006\003\125\035\017\001\001\377\004\004
+\003\002\001\006\060\015\006\011\052\206\110\206\367\015\001\001
+\013\005\000\003\202\002\001\000\122\202\254\041\064\037\043\362
+\242\330\371\270\257\067\066\040\211\321\067\003\326\151\237\270
+\141\020\272\242\061\230\131\107\350\321\015\045\036\025\101\014
+\340\052\125\325\127\122\313\370\344\307\151\243\035\115\161\002
+\136\137\041\105\140\110\134\011\216\111\020\301\004\334\251\142
+\153\002\360\103\310\116\235\070\111\164\311\062\160\124\155\301
+\107\374\216\264\066\236\324\234\275\335\040\326\123\311\030\251
+\265\126\271\166\213\225\147\146\356\275\230\376\256\357\276\156
+\373\140\366\375\131\306\052\033\077\043\112\224\044\060\047\310
+\211\274\353\104\044\232\313\075\276\117\325\172\316\216\027\313
+\142\301\331\336\036\016\172\377\103\206\064\122\274\141\077\074
+\137\273\331\166\264\123\274\227\263\376\212\114\022\056\053\363
+\327\316\341\242\377\335\173\160\373\073\241\115\244\143\002\375
+\070\227\225\077\005\160\240\153\337\142\201\103\213\264\131\015
+\112\214\124\234\305\273\201\237\315\175\245\357\013\045\036\072
+\040\333\034\374\037\230\147\002\012\324\163\104\023\333\121\204
+\032\125\003\126\340\000\176\164\006\377\070\304\162\035\323\250
+\077\150\061\135\323\011\307\056\214\133\143\340\350\334\036\322
+\354\141\036\362\336\345\357\366\231\166\140\055\036\224\162\161
+\306\013\052\062\307\222\116\325\106\327\035\371\251\031\012\310
+\372\225\316\155\043\230\252\013\070\255\232\126\015\157\215\361
+\061\000\210\301\027\234\315\031\066\065\376\125\123\240\340\074
+\063\137\226\136\342\062\351\337\063\273\006\112\251\330\204\163
+\316\167\322\306\254\161\341\134\243\035\014\273\012\337\137\342
+\243\161\330\332\067\132\240\170\053\364\324\175\353\166\355\362
+\141\160\245\145\232\323\211\064\030\253\373\162\076\327\264\075
+\171\134\330\037\241\063\173\331\202\120\014\223\027\252\154\334
+\302\202\273\002\127\066\257\230\047\052\071\120\341\260\211\365
+\045\227\176\107\150\020\264\354\163\312\263\227\321\044\334\366
+\142\240\050\323\265\243\270\144\267\210\142\102\317\235\123\315
+\231\276\144\150\217\117\036\022\110\367\322\051\303\230\050\312
+\362\062\013\223\214\051\117\074\140\062\315\005\226\141\354\362
+\257\376\263\160\054\056\246\362
+END
+CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE
+CKA_NSS_SERVER_DISTRUST_AFTER CK_BBOOL CK_FALSE
+CKA_NSS_EMAIL_DISTRUST_AFTER CK_BBOOL CK_FALSE
+
+# Trust for "BJCA Global Root CA1"
+# Issuer: CN=BJCA Global Root CA1,O=BEIJING CERTIFICATE AUTHORITY,C=CN
+# Serial Number:55:6f:65:e3:b4:d9:90:6a:1b:09:d1:6c:3e:c0:6c:20
+# Subject: CN=BJCA Global Root CA1,O=BEIJING CERTIFICATE AUTHORITY,C=CN
+# Not Valid Before: Thu Dec 19 03:16:17 2019
+# Not Valid After : Mon Dec 12 03:16:17 2044
+# Fingerprint (SHA-256): F3:89:6F:88:FE:7C:0A:88:27:66:A7:FA:6A:D2:74:9F:B5:7A:7F:3E:98:FB:76:9C:1F:A7:B0:9C:2C:44:D5:AE
+# Fingerprint (SHA1): D5:EC:8D:7B:4C:BA:79:F4:E7:E8:CB:9D:6B:AE:77:83:10:03:21:6A
+CKA_CLASS CK_OBJECT_CLASS CKO_NSS_TRUST
+CKA_TOKEN CK_BBOOL CK_TRUE
+CKA_PRIVATE CK_BBOOL CK_FALSE
+CKA_MODIFIABLE CK_BBOOL CK_FALSE
+CKA_LABEL UTF8 "BJCA Global Root CA1"
+CKA_CERT_SHA1_HASH MULTILINE_OCTAL
+\325\354\215\173\114\272\171\364\347\350\313\235\153\256\167\203
+\020\003\041\152
+END
+CKA_CERT_MD5_HASH MULTILINE_OCTAL
+\102\062\231\166\103\063\066\044\065\007\202\233\050\371\320\220
+END
+CKA_ISSUER MULTILINE_OCTAL
+\060\124\061\013\060\011\006\003\125\004\006\023\002\103\116\061
+\046\060\044\006\003\125\004\012\014\035\102\105\111\112\111\116
+\107\040\103\105\122\124\111\106\111\103\101\124\105\040\101\125
+\124\110\117\122\111\124\131\061\035\060\033\006\003\125\004\003
+\014\024\102\112\103\101\040\107\154\157\142\141\154\040\122\157
+\157\164\040\103\101\061
+END
+CKA_SERIAL_NUMBER MULTILINE_OCTAL
+\002\020\125\157\145\343\264\331\220\152\033\011\321\154\076\300
+\154\040
+END
+CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_TRUSTED_DELEGATOR
+CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_TRUSTED_DELEGATOR
+CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_MUST_VERIFY_TRUST
+CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE
+
+#
+# Certificate "BJCA Global Root CA2"
+#
+# Issuer: CN=BJCA Global Root CA2,O=BEIJING CERTIFICATE AUTHORITY,C=CN
+# Serial Number:2c:17:08:7d:64:2a:c0:fe:85:18:59:06:cf:b4:4a:eb
+# Subject: CN=BJCA Global Root CA2,O=BEIJING CERTIFICATE AUTHORITY,C=CN
+# Not Valid Before: Thu Dec 19 03:18:21 2019
+# Not Valid After : Mon Dec 12 03:18:21 2044
+# Fingerprint (SHA-256): 57:4D:F6:93:1E:27:80:39:66:7B:72:0A:FD:C1:60:0F:C2:7E:B6:6D:D3:09:29:79:FB:73:85:64:87:21:28:82
+# Fingerprint (SHA1): F4:27:86:EB:6E:B8:6D:88:31:67:02:FB:BA:66:A4:53:00:AA:7A:A6
+CKA_CLASS CK_OBJECT_CLASS CKO_CERTIFICATE
+CKA_TOKEN CK_BBOOL CK_TRUE
+CKA_PRIVATE CK_BBOOL CK_FALSE
+CKA_MODIFIABLE CK_BBOOL CK_FALSE
+CKA_LABEL UTF8 "BJCA Global Root CA2"
+CKA_CERTIFICATE_TYPE CK_CERTIFICATE_TYPE CKC_X_509
+CKA_SUBJECT MULTILINE_OCTAL
+\060\124\061\013\060\011\006\003\125\004\006\023\002\103\116\061
+\046\060\044\006\003\125\004\012\014\035\102\105\111\112\111\116
+\107\040\103\105\122\124\111\106\111\103\101\124\105\040\101\125
+\124\110\117\122\111\124\131\061\035\060\033\006\003\125\004\003
+\014\024\102\112\103\101\040\107\154\157\142\141\154\040\122\157
+\157\164\040\103\101\062
+END
+CKA_ID UTF8 "0"
+CKA_ISSUER MULTILINE_OCTAL
+\060\124\061\013\060\011\006\003\125\004\006\023\002\103\116\061
+\046\060\044\006\003\125\004\012\014\035\102\105\111\112\111\116
+\107\040\103\105\122\124\111\106\111\103\101\124\105\040\101\125
+\124\110\117\122\111\124\131\061\035\060\033\006\003\125\004\003
+\014\024\102\112\103\101\040\107\154\157\142\141\154\040\122\157
+\157\164\040\103\101\062
+END
+CKA_SERIAL_NUMBER MULTILINE_OCTAL
+\002\020\054\027\010\175\144\052\300\376\205\030\131\006\317\264
+\112\353
+END
+CKA_VALUE MULTILINE_OCTAL
+\060\202\002\045\060\202\001\253\240\003\002\001\002\002\020\054
+\027\010\175\144\052\300\376\205\030\131\006\317\264\112\353\060
+\012\006\010\052\206\110\316\075\004\003\003\060\124\061\013\060
+\011\006\003\125\004\006\023\002\103\116\061\046\060\044\006\003
+\125\004\012\014\035\102\105\111\112\111\116\107\040\103\105\122
+\124\111\106\111\103\101\124\105\040\101\125\124\110\117\122\111
+\124\131\061\035\060\033\006\003\125\004\003\014\024\102\112\103
+\101\040\107\154\157\142\141\154\040\122\157\157\164\040\103\101
+\062\060\036\027\015\061\071\061\062\061\071\060\063\061\070\062
+\061\132\027\015\064\064\061\062\061\062\060\063\061\070\062\061
+\132\060\124\061\013\060\011\006\003\125\004\006\023\002\103\116
+\061\046\060\044\006\003\125\004\012\014\035\102\105\111\112\111
+\116\107\040\103\105\122\124\111\106\111\103\101\124\105\040\101
+\125\124\110\117\122\111\124\131\061\035\060\033\006\003\125\004
+\003\014\024\102\112\103\101\040\107\154\157\142\141\154\040\122
+\157\157\164\040\103\101\062\060\166\060\020\006\007\052\206\110
+\316\075\002\001\006\005\053\201\004\000\042\003\142\000\004\235
+\313\200\221\215\123\147\265\271\120\261\003\370\345\111\037\101
+\042\011\260\121\122\130\326\053\064\217\305\022\106\024\305\213
+\057\054\204\377\054\156\250\325\361\011\343\003\041\024\304\103
+\075\174\301\054\304\113\152\112\315\351\207\340\175\366\042\276
+\372\112\121\270\060\212\375\341\336\030\022\012\366\107\267\347
+\027\277\047\212\324\101\114\226\074\140\226\301\375\025\034\243
+\102\060\100\060\035\006\003\125\035\016\004\026\004\024\322\112
+\261\121\177\006\360\321\202\037\116\156\137\253\203\374\110\324
+\260\221\060\017\006\003\125\035\023\001\001\377\004\005\060\003
+\001\001\377\060\016\006\003\125\035\017\001\001\377\004\004\003
+\002\001\006\060\012\006\010\052\206\110\316\075\004\003\003\003
+\150\000\060\145\002\060\032\274\133\327\376\251\322\124\016\112
+\135\322\155\261\100\334\364\103\325\322\112\231\031\022\126\200
+\367\203\064\341\065\116\110\155\004\017\127\061\060\060\055\261
+\252\235\003\070\333\006\002\061\000\313\314\207\123\313\172\337
+\040\121\163\220\300\250\133\141\320\305\120\071\375\205\376\301
+\343\170\370\246\326\113\275\233\207\217\017\345\326\123\226\253
+\074\310\100\332\141\367\123\243\367
+END
+CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE
+CKA_NSS_SERVER_DISTRUST_AFTER CK_BBOOL CK_FALSE
+CKA_NSS_EMAIL_DISTRUST_AFTER CK_BBOOL CK_FALSE
+
+# Trust for "BJCA Global Root CA2"
+# Issuer: CN=BJCA Global Root CA2,O=BEIJING CERTIFICATE AUTHORITY,C=CN
+# Serial Number:2c:17:08:7d:64:2a:c0:fe:85:18:59:06:cf:b4:4a:eb
+# Subject: CN=BJCA Global Root CA2,O=BEIJING CERTIFICATE AUTHORITY,C=CN
+# Not Valid Before: Thu Dec 19 03:18:21 2019
+# Not Valid After : Mon Dec 12 03:18:21 2044
+# Fingerprint (SHA-256): 57:4D:F6:93:1E:27:80:39:66:7B:72:0A:FD:C1:60:0F:C2:7E:B6:6D:D3:09:29:79:FB:73:85:64:87:21:28:82
+# Fingerprint (SHA1): F4:27:86:EB:6E:B8:6D:88:31:67:02:FB:BA:66:A4:53:00:AA:7A:A6
+CKA_CLASS CK_OBJECT_CLASS CKO_NSS_TRUST
+CKA_TOKEN CK_BBOOL CK_TRUE
+CKA_PRIVATE CK_BBOOL CK_FALSE
+CKA_MODIFIABLE CK_BBOOL CK_FALSE
+CKA_LABEL UTF8 "BJCA Global Root CA2"
+CKA_CERT_SHA1_HASH MULTILINE_OCTAL
+\364\047\206\353\156\270\155\210\061\147\002\373\272\146\244\123
+\000\252\172\246
+END
+CKA_CERT_MD5_HASH MULTILINE_OCTAL
+\136\012\366\107\137\246\024\350\021\001\225\077\115\001\353\074
+END
+CKA_ISSUER MULTILINE_OCTAL
+\060\124\061\013\060\011\006\003\125\004\006\023\002\103\116\061
+\046\060\044\006\003\125\004\012\014\035\102\105\111\112\111\116
+\107\040\103\105\122\124\111\106\111\103\101\124\105\040\101\125
+\124\110\117\122\111\124\131\061\035\060\033\006\003\125\004\003
+\014\024\102\112\103\101\040\107\154\157\142\141\154\040\122\157
+\157\164\040\103\101\062
+END
+CKA_SERIAL_NUMBER MULTILINE_OCTAL
+\002\020\054\027\010\175\144\052\300\376\205\030\131\006\317\264
+\112\353
+END
+CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_TRUSTED_DELEGATOR
+CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_TRUSTED_DELEGATOR
+CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_MUST_VERIFY_TRUST
+CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE