Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 13 Apr 2021 22:00:24 GMT
From:      Kyle Evans <kevans@FreeBSD.org>
To:        src-committers@FreeBSD.org, dev-commits-src-all@FreeBSD.org, dev-commits-src-main@FreeBSD.org
Subject:   git: 3016c5c2bf68 - main - caroot: reroll the remaining certs
Message-ID:  <202104132200.13DM0Osm021856@gitrepo.freebsd.org>

next in thread | raw e-mail | index | archive | help
The branch main has been updated by kevans:

URL: https://cgit.FreeBSD.org/src/commit/?id=3016c5c2bf68d8c6ebf303939f20092478e7a4ca

commit 3016c5c2bf68d8c6ebf303939f20092478e7a4ca
Author:     Kyle Evans <kevans@FreeBSD.org>
AuthorDate: 2021-04-13 21:51:47 +0000
Commit:     Kyle Evans <kevans@FreeBSD.org>
CommitDate: 2021-04-13 21:59:34 +0000

    caroot: reroll the remaining certs
    
    This adds a specific note that these are explicitly trusted for
    server auth.
    
    MFC after:      3 days
---
 secure/caroot/trusted/ACCVRAIZ1.pem                                     | 2 ++
 secure/caroot/trusted/AC_RAIZ_FNMT-RCM.pem                              | 2 ++
 secure/caroot/trusted/AC_RAIZ_FNMT-RCM_SERVIDORES_SEGUROS.pem           | 2 ++
 secure/caroot/trusted/Actalis_Authentication_Root_CA.pem                | 2 ++
 secure/caroot/trusted/AffirmTrust_Commercial.pem                        | 2 ++
 secure/caroot/trusted/AffirmTrust_Networking.pem                        | 2 ++
 secure/caroot/trusted/AffirmTrust_Premium.pem                           | 2 ++
 secure/caroot/trusted/AffirmTrust_Premium_ECC.pem                       | 2 ++
 secure/caroot/trusted/Amazon_Root_CA_1.pem                              | 2 ++
 secure/caroot/trusted/Amazon_Root_CA_2.pem                              | 2 ++
 secure/caroot/trusted/Amazon_Root_CA_3.pem                              | 2 ++
 secure/caroot/trusted/Amazon_Root_CA_4.pem                              | 2 ++
 secure/caroot/trusted/Atos_TrustedRoot_2011.pem                         | 2 ++
 .../Autoridad_de_Certificacion_Firmaprofesional_CIF_A62634068.pem       | 2 ++
 secure/caroot/trusted/Baltimore_CyberTrust_Root.pem                     | 2 ++
 secure/caroot/trusted/Buypass_Class_2_Root_CA.pem                       | 2 ++
 secure/caroot/trusted/Buypass_Class_3_Root_CA.pem                       | 2 ++
 secure/caroot/trusted/CA_Disig_Root_R2.pem                              | 2 ++
 secure/caroot/trusted/CFCA_EV_ROOT.pem                                  | 2 ++
 secure/caroot/trusted/COMODO_Certification_Authority.pem                | 2 ++
 secure/caroot/trusted/COMODO_ECC_Certification_Authority.pem            | 2 ++
 secure/caroot/trusted/COMODO_RSA_Certification_Authority.pem            | 2 ++
 secure/caroot/trusted/Certigna.pem                                      | 2 ++
 secure/caroot/trusted/Certigna_Root_CA.pem                              | 2 ++
 secure/caroot/trusted/Certum_Trusted_Network_CA.pem                     | 2 ++
 secure/caroot/trusted/Certum_Trusted_Network_CA_2.pem                   | 2 ++
 secure/caroot/trusted/Comodo_AAA_Services_root.pem                      | 2 ++
 secure/caroot/trusted/Cybertrust_Global_Root.pem                        | 2 ++
 secure/caroot/trusted/D-TRUST_Root_Class_3_CA_2_2009.pem                | 2 ++
 secure/caroot/trusted/D-TRUST_Root_Class_3_CA_2_EV_2009.pem             | 2 ++
 secure/caroot/trusted/DST_Root_CA_X3.pem                                | 2 ++
 secure/caroot/trusted/DigiCert_Assured_ID_Root_CA.pem                   | 2 ++
 secure/caroot/trusted/DigiCert_Assured_ID_Root_G2.pem                   | 2 ++
 secure/caroot/trusted/DigiCert_Assured_ID_Root_G3.pem                   | 2 ++
 secure/caroot/trusted/DigiCert_Global_Root_CA.pem                       | 2 ++
 secure/caroot/trusted/DigiCert_Global_Root_G2.pem                       | 2 ++
 secure/caroot/trusted/DigiCert_Global_Root_G3.pem                       | 2 ++
 secure/caroot/trusted/DigiCert_High_Assurance_EV_Root_CA.pem            | 2 ++
 secure/caroot/trusted/DigiCert_Trusted_Root_G4.pem                      | 2 ++
 secure/caroot/trusted/E-Tugra_Certification_Authority.pem               | 2 ++
 secure/caroot/trusted/Entrust_Root_Certification_Authority.pem          | 2 ++
 secure/caroot/trusted/Entrust_Root_Certification_Authority_-_EC1.pem    | 2 ++
 secure/caroot/trusted/Entrust_Root_Certification_Authority_-_G2.pem     | 2 ++
 secure/caroot/trusted/Entrust_Root_Certification_Authority_-_G4.pem     | 2 ++
 secure/caroot/trusted/Entrust_net_Premium_2048_Secure_Server_CA.pem     | 2 ++
 secure/caroot/trusted/GDCA_TrustAUTH_R5_ROOT.pem                        | 2 ++
 secure/caroot/trusted/GTS_Root_R1.pem                                   | 2 ++
 secure/caroot/trusted/GTS_Root_R2.pem                                   | 2 ++
 secure/caroot/trusted/GTS_Root_R3.pem                                   | 2 ++
 secure/caroot/trusted/GTS_Root_R4.pem                                   | 2 ++
 secure/caroot/trusted/GlobalSign_ECC_Root_CA_-_R4.pem                   | 2 ++
 secure/caroot/trusted/GlobalSign_ECC_Root_CA_-_R5.pem                   | 2 ++
 secure/caroot/trusted/GlobalSign_Root_CA.pem                            | 2 ++
 secure/caroot/trusted/GlobalSign_Root_CA_-_R2.pem                       | 2 ++
 secure/caroot/trusted/GlobalSign_Root_CA_-_R3.pem                       | 2 ++
 secure/caroot/trusted/GlobalSign_Root_CA_-_R6.pem                       | 2 ++
 secure/caroot/trusted/GlobalSign_Root_E46.pem                           | 2 ++
 secure/caroot/trusted/GlobalSign_Root_R46.pem                           | 2 ++
 secure/caroot/trusted/Go_Daddy_Class_2_CA.pem                           | 2 ++
 secure/caroot/trusted/Go_Daddy_Root_Certificate_Authority_-_G2.pem      | 2 ++
 .../Hellenic_Academic_and_Research_Institutions_ECC_RootCA_2015.pem     | 2 ++
 .../trusted/Hellenic_Academic_and_Research_Institutions_RootCA_2011.pem | 2 ++
 .../trusted/Hellenic_Academic_and_Research_Institutions_RootCA_2015.pem | 2 ++
 secure/caroot/trusted/Hongkong_Post_Root_CA_1.pem                       | 2 ++
 secure/caroot/trusted/Hongkong_Post_Root_CA_3.pem                       | 2 ++
 secure/caroot/trusted/ISRG_Root_X1.pem                                  | 2 ++
 secure/caroot/trusted/IdenTrust_Commercial_Root_CA_1.pem                | 2 ++
 secure/caroot/trusted/IdenTrust_Public_Sector_Root_CA_1.pem             | 2 ++
 secure/caroot/trusted/Izenpe_com.pem                                    | 2 ++
 secure/caroot/trusted/Microsec_e-Szigno_Root_CA_2009.pem                | 2 ++
 secure/caroot/trusted/Microsoft_ECC_Root_Certificate_Authority_2017.pem | 2 ++
 secure/caroot/trusted/Microsoft_RSA_Root_Certificate_Authority_2017.pem | 2 ++
 secure/caroot/trusted/NAVER_Global_Root_Certification_Authority.pem     | 2 ++
 secure/caroot/trusted/NetLock_Arany__Class_Gold__F__tan__s__tv__ny.pem  | 2 ++
 secure/caroot/trusted/Network_Solutions_Certificate_Authority.pem       | 2 ++
 secure/caroot/trusted/OISTE_WISeKey_Global_Root_GB_CA.pem               | 2 ++
 secure/caroot/trusted/OISTE_WISeKey_Global_Root_GC_CA.pem               | 2 ++
 secure/caroot/trusted/QuoVadis_Root_CA.pem                              | 2 ++
 secure/caroot/trusted/QuoVadis_Root_CA_1_G3.pem                         | 2 ++
 secure/caroot/trusted/QuoVadis_Root_CA_2.pem                            | 2 ++
 secure/caroot/trusted/QuoVadis_Root_CA_2_G3.pem                         | 2 ++
 secure/caroot/trusted/QuoVadis_Root_CA_3.pem                            | 2 ++
 secure/caroot/trusted/QuoVadis_Root_CA_3_G3.pem                         | 2 ++
 secure/caroot/trusted/SSL_com_EV_Root_Certification_Authority_ECC.pem   | 2 ++
 .../caroot/trusted/SSL_com_EV_Root_Certification_Authority_RSA_R2.pem   | 2 ++
 secure/caroot/trusted/SSL_com_Root_Certification_Authority_ECC.pem      | 2 ++
 secure/caroot/trusted/SSL_com_Root_Certification_Authority_RSA.pem      | 2 ++
 secure/caroot/trusted/SZAFIR_ROOT_CA2.pem                               | 2 ++
 secure/caroot/trusted/SecureSign_RootCA11.pem                           | 2 ++
 secure/caroot/trusted/SecureTrust_CA.pem                                | 2 ++
 secure/caroot/trusted/Secure_Global_CA.pem                              | 2 ++
 secure/caroot/trusted/Security_Communication_RootCA2.pem                | 2 ++
 secure/caroot/trusted/Security_Communication_Root_CA.pem                | 2 ++
 secure/caroot/trusted/Sonera_Class_2_Root_CA.pem                        | 2 ++
 secure/caroot/trusted/Staat_der_Nederlanden_EV_Root_CA.pem              | 2 ++
 secure/caroot/trusted/Starfield_Class_2_CA.pem                          | 2 ++
 secure/caroot/trusted/Starfield_Root_Certificate_Authority_-_G2.pem     | 2 ++
 .../trusted/Starfield_Services_Root_Certificate_Authority_-_G2.pem      | 2 ++
 secure/caroot/trusted/SwissSign_Gold_CA_-_G2.pem                        | 2 ++
 secure/caroot/trusted/SwissSign_Silver_CA_-_G2.pem                      | 2 ++
 secure/caroot/trusted/T-TeleSec_GlobalRoot_Class_2.pem                  | 2 ++
 secure/caroot/trusted/T-TeleSec_GlobalRoot_Class_3.pem                  | 2 ++
 secure/caroot/trusted/TUBITAK_Kamu_SM_SSL_Kok_Sertifikasi_-_Surum_1.pem | 2 ++
 secure/caroot/trusted/TWCA_Global_Root_CA.pem                           | 2 ++
 secure/caroot/trusted/TWCA_Root_Certification_Authority.pem             | 2 ++
 secure/caroot/trusted/TeliaSonera_Root_CA_v1.pem                        | 2 ++
 secure/caroot/trusted/TrustCor_ECA-1.pem                                | 2 ++
 secure/caroot/trusted/TrustCor_RootCert_CA-1.pem                        | 2 ++
 secure/caroot/trusted/TrustCor_RootCert_CA-2.pem                        | 2 ++
 secure/caroot/trusted/Trustwave_Global_Certification_Authority.pem      | 2 ++
 .../trusted/Trustwave_Global_ECC_P256_Certification_Authority.pem       | 2 ++
 .../trusted/Trustwave_Global_ECC_P384_Certification_Authority.pem       | 2 ++
 secure/caroot/trusted/UCA_Extended_Validation_Root.pem                  | 2 ++
 secure/caroot/trusted/UCA_Global_G2_Root.pem                            | 2 ++
 secure/caroot/trusted/USERTrust_ECC_Certification_Authority.pem         | 2 ++
 secure/caroot/trusted/USERTrust_RSA_Certification_Authority.pem         | 2 ++
 secure/caroot/trusted/XRamp_Global_CA_Root.pem                          | 2 ++
 secure/caroot/trusted/certSIGN_ROOT_CA.pem                              | 2 ++
 secure/caroot/trusted/certSIGN_Root_CA_G2.pem                           | 2 ++
 secure/caroot/trusted/e-Szigno_Root_CA_2017.pem                         | 2 ++
 secure/caroot/trusted/ePKI_Root_Certification_Authority.pem             | 2 ++
 secure/caroot/trusted/emSign_ECC_Root_CA_-_C3.pem                       | 2 ++
 secure/caroot/trusted/emSign_ECC_Root_CA_-_G3.pem                       | 2 ++
 secure/caroot/trusted/emSign_Root_CA_-_C1.pem                           | 2 ++
 secure/caroot/trusted/emSign_Root_CA_-_G1.pem                           | 2 ++
 125 files changed, 250 insertions(+)

diff --git a/secure/caroot/trusted/ACCVRAIZ1.pem b/secure/caroot/trusted/ACCVRAIZ1.pem
index 0c7c7c41b57d..1c96e53b8f17 100644
--- a/secure/caroot/trusted/ACCVRAIZ1.pem
+++ b/secure/caroot/trusted/ACCVRAIZ1.pem
@@ -5,6 +5,8 @@
 ##  Authority (CA). It was automatically extracted from Mozilla's
 ##  root CA list (the file `certdata.txt' in security/nss).
 ##
+##  It contains a certificate trusted for server authentication.
+##
 ##  Extracted from nss
 ##  with $FreeBSD$
 ##
diff --git a/secure/caroot/trusted/AC_RAIZ_FNMT-RCM.pem b/secure/caroot/trusted/AC_RAIZ_FNMT-RCM.pem
index 579f50d8d730..6a64be5ce138 100644
--- a/secure/caroot/trusted/AC_RAIZ_FNMT-RCM.pem
+++ b/secure/caroot/trusted/AC_RAIZ_FNMT-RCM.pem
@@ -5,6 +5,8 @@
 ##  Authority (CA). It was automatically extracted from Mozilla's
 ##  root CA list (the file `certdata.txt' in security/nss).
 ##
+##  It contains a certificate trusted for server authentication.
+##
 ##  Extracted from nss
 ##  with $FreeBSD$
 ##
diff --git a/secure/caroot/trusted/AC_RAIZ_FNMT-RCM_SERVIDORES_SEGUROS.pem b/secure/caroot/trusted/AC_RAIZ_FNMT-RCM_SERVIDORES_SEGUROS.pem
index 21d2c4f13bc6..71ee49574e84 100644
--- a/secure/caroot/trusted/AC_RAIZ_FNMT-RCM_SERVIDORES_SEGUROS.pem
+++ b/secure/caroot/trusted/AC_RAIZ_FNMT-RCM_SERVIDORES_SEGUROS.pem
@@ -5,6 +5,8 @@
 ##  Authority (CA). It was automatically extracted from Mozilla's
 ##  root CA list (the file `certdata.txt' in security/nss).
 ##
+##  It contains a certificate trusted for server authentication.
+##
 ##  Extracted from nss
 ##  with $FreeBSD$
 ##
diff --git a/secure/caroot/trusted/Actalis_Authentication_Root_CA.pem b/secure/caroot/trusted/Actalis_Authentication_Root_CA.pem
index 7248545350e2..7c971e1229a2 100644
--- a/secure/caroot/trusted/Actalis_Authentication_Root_CA.pem
+++ b/secure/caroot/trusted/Actalis_Authentication_Root_CA.pem
@@ -5,6 +5,8 @@
 ##  Authority (CA). It was automatically extracted from Mozilla's
 ##  root CA list (the file `certdata.txt' in security/nss).
 ##
+##  It contains a certificate trusted for server authentication.
+##
 ##  Extracted from nss
 ##  with $FreeBSD$
 ##
diff --git a/secure/caroot/trusted/AffirmTrust_Commercial.pem b/secure/caroot/trusted/AffirmTrust_Commercial.pem
index 1d85c32853c8..282d1a5dcf6f 100644
--- a/secure/caroot/trusted/AffirmTrust_Commercial.pem
+++ b/secure/caroot/trusted/AffirmTrust_Commercial.pem
@@ -5,6 +5,8 @@
 ##  Authority (CA). It was automatically extracted from Mozilla's
 ##  root CA list (the file `certdata.txt' in security/nss).
 ##
+##  It contains a certificate trusted for server authentication.
+##
 ##  Extracted from nss
 ##  with $FreeBSD$
 ##
diff --git a/secure/caroot/trusted/AffirmTrust_Networking.pem b/secure/caroot/trusted/AffirmTrust_Networking.pem
index 222bde26c934..830cf3f0c3c2 100644
--- a/secure/caroot/trusted/AffirmTrust_Networking.pem
+++ b/secure/caroot/trusted/AffirmTrust_Networking.pem
@@ -5,6 +5,8 @@
 ##  Authority (CA). It was automatically extracted from Mozilla's
 ##  root CA list (the file `certdata.txt' in security/nss).
 ##
+##  It contains a certificate trusted for server authentication.
+##
 ##  Extracted from nss
 ##  with $FreeBSD$
 ##
diff --git a/secure/caroot/trusted/AffirmTrust_Premium.pem b/secure/caroot/trusted/AffirmTrust_Premium.pem
index dc1447429465..725747aafdaf 100644
--- a/secure/caroot/trusted/AffirmTrust_Premium.pem
+++ b/secure/caroot/trusted/AffirmTrust_Premium.pem
@@ -5,6 +5,8 @@
 ##  Authority (CA). It was automatically extracted from Mozilla's
 ##  root CA list (the file `certdata.txt' in security/nss).
 ##
+##  It contains a certificate trusted for server authentication.
+##
 ##  Extracted from nss
 ##  with $FreeBSD$
 ##
diff --git a/secure/caroot/trusted/AffirmTrust_Premium_ECC.pem b/secure/caroot/trusted/AffirmTrust_Premium_ECC.pem
index a6f01409a2ef..6fe75939863e 100644
--- a/secure/caroot/trusted/AffirmTrust_Premium_ECC.pem
+++ b/secure/caroot/trusted/AffirmTrust_Premium_ECC.pem
@@ -5,6 +5,8 @@
 ##  Authority (CA). It was automatically extracted from Mozilla's
 ##  root CA list (the file `certdata.txt' in security/nss).
 ##
+##  It contains a certificate trusted for server authentication.
+##
 ##  Extracted from nss
 ##  with $FreeBSD$
 ##
diff --git a/secure/caroot/trusted/Amazon_Root_CA_1.pem b/secure/caroot/trusted/Amazon_Root_CA_1.pem
index 6bf1acafd4c7..2aca2eee3e9b 100644
--- a/secure/caroot/trusted/Amazon_Root_CA_1.pem
+++ b/secure/caroot/trusted/Amazon_Root_CA_1.pem
@@ -5,6 +5,8 @@
 ##  Authority (CA). It was automatically extracted from Mozilla's
 ##  root CA list (the file `certdata.txt' in security/nss).
 ##
+##  It contains a certificate trusted for server authentication.
+##
 ##  Extracted from nss
 ##  with $FreeBSD$
 ##
diff --git a/secure/caroot/trusted/Amazon_Root_CA_2.pem b/secure/caroot/trusted/Amazon_Root_CA_2.pem
index 80a1eb66bee2..95ca81db30bb 100644
--- a/secure/caroot/trusted/Amazon_Root_CA_2.pem
+++ b/secure/caroot/trusted/Amazon_Root_CA_2.pem
@@ -5,6 +5,8 @@
 ##  Authority (CA). It was automatically extracted from Mozilla's
 ##  root CA list (the file `certdata.txt' in security/nss).
 ##
+##  It contains a certificate trusted for server authentication.
+##
 ##  Extracted from nss
 ##  with $FreeBSD$
 ##
diff --git a/secure/caroot/trusted/Amazon_Root_CA_3.pem b/secure/caroot/trusted/Amazon_Root_CA_3.pem
index 6b61b3e18fa0..294f7dc8f0b6 100644
--- a/secure/caroot/trusted/Amazon_Root_CA_3.pem
+++ b/secure/caroot/trusted/Amazon_Root_CA_3.pem
@@ -5,6 +5,8 @@
 ##  Authority (CA). It was automatically extracted from Mozilla's
 ##  root CA list (the file `certdata.txt' in security/nss).
 ##
+##  It contains a certificate trusted for server authentication.
+##
 ##  Extracted from nss
 ##  with $FreeBSD$
 ##
diff --git a/secure/caroot/trusted/Amazon_Root_CA_4.pem b/secure/caroot/trusted/Amazon_Root_CA_4.pem
index df7aa6f1c165..649917b9638a 100644
--- a/secure/caroot/trusted/Amazon_Root_CA_4.pem
+++ b/secure/caroot/trusted/Amazon_Root_CA_4.pem
@@ -5,6 +5,8 @@
 ##  Authority (CA). It was automatically extracted from Mozilla's
 ##  root CA list (the file `certdata.txt' in security/nss).
 ##
+##  It contains a certificate trusted for server authentication.
+##
 ##  Extracted from nss
 ##  with $FreeBSD$
 ##
diff --git a/secure/caroot/trusted/Atos_TrustedRoot_2011.pem b/secure/caroot/trusted/Atos_TrustedRoot_2011.pem
index 21b229561733..7058d3fb6edf 100644
--- a/secure/caroot/trusted/Atos_TrustedRoot_2011.pem
+++ b/secure/caroot/trusted/Atos_TrustedRoot_2011.pem
@@ -5,6 +5,8 @@
 ##  Authority (CA). It was automatically extracted from Mozilla's
 ##  root CA list (the file `certdata.txt' in security/nss).
 ##
+##  It contains a certificate trusted for server authentication.
+##
 ##  Extracted from nss
 ##  with $FreeBSD$
 ##
diff --git a/secure/caroot/trusted/Autoridad_de_Certificacion_Firmaprofesional_CIF_A62634068.pem b/secure/caroot/trusted/Autoridad_de_Certificacion_Firmaprofesional_CIF_A62634068.pem
index 4d2eaa61962f..db4f44195dbd 100644
--- a/secure/caroot/trusted/Autoridad_de_Certificacion_Firmaprofesional_CIF_A62634068.pem
+++ b/secure/caroot/trusted/Autoridad_de_Certificacion_Firmaprofesional_CIF_A62634068.pem
@@ -5,6 +5,8 @@
 ##  Authority (CA). It was automatically extracted from Mozilla's
 ##  root CA list (the file `certdata.txt' in security/nss).
 ##
+##  It contains a certificate trusted for server authentication.
+##
 ##  Extracted from nss
 ##  with $FreeBSD$
 ##
diff --git a/secure/caroot/trusted/Baltimore_CyberTrust_Root.pem b/secure/caroot/trusted/Baltimore_CyberTrust_Root.pem
index 3dc1de849346..0f356d59962f 100644
--- a/secure/caroot/trusted/Baltimore_CyberTrust_Root.pem
+++ b/secure/caroot/trusted/Baltimore_CyberTrust_Root.pem
@@ -5,6 +5,8 @@
 ##  Authority (CA). It was automatically extracted from Mozilla's
 ##  root CA list (the file `certdata.txt' in security/nss).
 ##
+##  It contains a certificate trusted for server authentication.
+##
 ##  Extracted from nss
 ##  with $FreeBSD$
 ##
diff --git a/secure/caroot/trusted/Buypass_Class_2_Root_CA.pem b/secure/caroot/trusted/Buypass_Class_2_Root_CA.pem
index dc2c86edbed1..0168f641fd42 100644
--- a/secure/caroot/trusted/Buypass_Class_2_Root_CA.pem
+++ b/secure/caroot/trusted/Buypass_Class_2_Root_CA.pem
@@ -5,6 +5,8 @@
 ##  Authority (CA). It was automatically extracted from Mozilla's
 ##  root CA list (the file `certdata.txt' in security/nss).
 ##
+##  It contains a certificate trusted for server authentication.
+##
 ##  Extracted from nss
 ##  with $FreeBSD$
 ##
diff --git a/secure/caroot/trusted/Buypass_Class_3_Root_CA.pem b/secure/caroot/trusted/Buypass_Class_3_Root_CA.pem
index fda39f8731d1..7ae24799e638 100644
--- a/secure/caroot/trusted/Buypass_Class_3_Root_CA.pem
+++ b/secure/caroot/trusted/Buypass_Class_3_Root_CA.pem
@@ -5,6 +5,8 @@
 ##  Authority (CA). It was automatically extracted from Mozilla's
 ##  root CA list (the file `certdata.txt' in security/nss).
 ##
+##  It contains a certificate trusted for server authentication.
+##
 ##  Extracted from nss
 ##  with $FreeBSD$
 ##
diff --git a/secure/caroot/trusted/CA_Disig_Root_R2.pem b/secure/caroot/trusted/CA_Disig_Root_R2.pem
index 0ecc9d1ee08d..0dda6d97e2aa 100644
--- a/secure/caroot/trusted/CA_Disig_Root_R2.pem
+++ b/secure/caroot/trusted/CA_Disig_Root_R2.pem
@@ -5,6 +5,8 @@
 ##  Authority (CA). It was automatically extracted from Mozilla's
 ##  root CA list (the file `certdata.txt' in security/nss).
 ##
+##  It contains a certificate trusted for server authentication.
+##
 ##  Extracted from nss
 ##  with $FreeBSD$
 ##
diff --git a/secure/caroot/trusted/CFCA_EV_ROOT.pem b/secure/caroot/trusted/CFCA_EV_ROOT.pem
index 7eb37baa3bed..722499b9ed42 100644
--- a/secure/caroot/trusted/CFCA_EV_ROOT.pem
+++ b/secure/caroot/trusted/CFCA_EV_ROOT.pem
@@ -5,6 +5,8 @@
 ##  Authority (CA). It was automatically extracted from Mozilla's
 ##  root CA list (the file `certdata.txt' in security/nss).
 ##
+##  It contains a certificate trusted for server authentication.
+##
 ##  Extracted from nss
 ##  with $FreeBSD$
 ##
diff --git a/secure/caroot/trusted/COMODO_Certification_Authority.pem b/secure/caroot/trusted/COMODO_Certification_Authority.pem
index 7aa1237bb8e1..fc3e4b554cc3 100644
--- a/secure/caroot/trusted/COMODO_Certification_Authority.pem
+++ b/secure/caroot/trusted/COMODO_Certification_Authority.pem
@@ -5,6 +5,8 @@
 ##  Authority (CA). It was automatically extracted from Mozilla's
 ##  root CA list (the file `certdata.txt' in security/nss).
 ##
+##  It contains a certificate trusted for server authentication.
+##
 ##  Extracted from nss
 ##  with $FreeBSD$
 ##
diff --git a/secure/caroot/trusted/COMODO_ECC_Certification_Authority.pem b/secure/caroot/trusted/COMODO_ECC_Certification_Authority.pem
index 215581b14fdf..5f839a858d00 100644
--- a/secure/caroot/trusted/COMODO_ECC_Certification_Authority.pem
+++ b/secure/caroot/trusted/COMODO_ECC_Certification_Authority.pem
@@ -5,6 +5,8 @@
 ##  Authority (CA). It was automatically extracted from Mozilla's
 ##  root CA list (the file `certdata.txt' in security/nss).
 ##
+##  It contains a certificate trusted for server authentication.
+##
 ##  Extracted from nss
 ##  with $FreeBSD$
 ##
diff --git a/secure/caroot/trusted/COMODO_RSA_Certification_Authority.pem b/secure/caroot/trusted/COMODO_RSA_Certification_Authority.pem
index 38e275f1365e..7faefe98b8bf 100644
--- a/secure/caroot/trusted/COMODO_RSA_Certification_Authority.pem
+++ b/secure/caroot/trusted/COMODO_RSA_Certification_Authority.pem
@@ -5,6 +5,8 @@
 ##  Authority (CA). It was automatically extracted from Mozilla's
 ##  root CA list (the file `certdata.txt' in security/nss).
 ##
+##  It contains a certificate trusted for server authentication.
+##
 ##  Extracted from nss
 ##  with $FreeBSD$
 ##
diff --git a/secure/caroot/trusted/Certigna.pem b/secure/caroot/trusted/Certigna.pem
index bbcd413be511..e9104ef6c3da 100644
--- a/secure/caroot/trusted/Certigna.pem
+++ b/secure/caroot/trusted/Certigna.pem
@@ -5,6 +5,8 @@
 ##  Authority (CA). It was automatically extracted from Mozilla's
 ##  root CA list (the file `certdata.txt' in security/nss).
 ##
+##  It contains a certificate trusted for server authentication.
+##
 ##  Extracted from nss
 ##  with $FreeBSD$
 ##
diff --git a/secure/caroot/trusted/Certigna_Root_CA.pem b/secure/caroot/trusted/Certigna_Root_CA.pem
index c1a0286ab2a0..a0a7248b51ea 100644
--- a/secure/caroot/trusted/Certigna_Root_CA.pem
+++ b/secure/caroot/trusted/Certigna_Root_CA.pem
@@ -5,6 +5,8 @@
 ##  Authority (CA). It was automatically extracted from Mozilla's
 ##  root CA list (the file `certdata.txt' in security/nss).
 ##
+##  It contains a certificate trusted for server authentication.
+##
 ##  Extracted from nss
 ##  with $FreeBSD$
 ##
diff --git a/secure/caroot/trusted/Certum_Trusted_Network_CA.pem b/secure/caroot/trusted/Certum_Trusted_Network_CA.pem
index a321445a502c..5f92008a47ab 100644
--- a/secure/caroot/trusted/Certum_Trusted_Network_CA.pem
+++ b/secure/caroot/trusted/Certum_Trusted_Network_CA.pem
@@ -5,6 +5,8 @@
 ##  Authority (CA). It was automatically extracted from Mozilla's
 ##  root CA list (the file `certdata.txt' in security/nss).
 ##
+##  It contains a certificate trusted for server authentication.
+##
 ##  Extracted from nss
 ##  with $FreeBSD$
 ##
diff --git a/secure/caroot/trusted/Certum_Trusted_Network_CA_2.pem b/secure/caroot/trusted/Certum_Trusted_Network_CA_2.pem
index 62cee7fc2058..8dcc08c17b07 100644
--- a/secure/caroot/trusted/Certum_Trusted_Network_CA_2.pem
+++ b/secure/caroot/trusted/Certum_Trusted_Network_CA_2.pem
@@ -5,6 +5,8 @@
 ##  Authority (CA). It was automatically extracted from Mozilla's
 ##  root CA list (the file `certdata.txt' in security/nss).
 ##
+##  It contains a certificate trusted for server authentication.
+##
 ##  Extracted from nss
 ##  with $FreeBSD$
 ##
diff --git a/secure/caroot/trusted/Comodo_AAA_Services_root.pem b/secure/caroot/trusted/Comodo_AAA_Services_root.pem
index 3ab5ce74bc37..b74de8633a65 100644
--- a/secure/caroot/trusted/Comodo_AAA_Services_root.pem
+++ b/secure/caroot/trusted/Comodo_AAA_Services_root.pem
@@ -5,6 +5,8 @@
 ##  Authority (CA). It was automatically extracted from Mozilla's
 ##  root CA list (the file `certdata.txt' in security/nss).
 ##
+##  It contains a certificate trusted for server authentication.
+##
 ##  Extracted from nss
 ##  with $FreeBSD$
 ##
diff --git a/secure/caroot/trusted/Cybertrust_Global_Root.pem b/secure/caroot/trusted/Cybertrust_Global_Root.pem
index b6261df7f2df..b780a314ccd1 100644
--- a/secure/caroot/trusted/Cybertrust_Global_Root.pem
+++ b/secure/caroot/trusted/Cybertrust_Global_Root.pem
@@ -5,6 +5,8 @@
 ##  Authority (CA). It was automatically extracted from Mozilla's
 ##  root CA list (the file `certdata.txt' in security/nss).
 ##
+##  It contains a certificate trusted for server authentication.
+##
 ##  Extracted from nss
 ##  with $FreeBSD$
 ##
diff --git a/secure/caroot/trusted/D-TRUST_Root_Class_3_CA_2_2009.pem b/secure/caroot/trusted/D-TRUST_Root_Class_3_CA_2_2009.pem
index 37b0f004ef94..5d2077a83e4c 100644
--- a/secure/caroot/trusted/D-TRUST_Root_Class_3_CA_2_2009.pem
+++ b/secure/caroot/trusted/D-TRUST_Root_Class_3_CA_2_2009.pem
@@ -5,6 +5,8 @@
 ##  Authority (CA). It was automatically extracted from Mozilla's
 ##  root CA list (the file `certdata.txt' in security/nss).
 ##
+##  It contains a certificate trusted for server authentication.
+##
 ##  Extracted from nss
 ##  with $FreeBSD$
 ##
diff --git a/secure/caroot/trusted/D-TRUST_Root_Class_3_CA_2_EV_2009.pem b/secure/caroot/trusted/D-TRUST_Root_Class_3_CA_2_EV_2009.pem
index 71d0f7fc323f..d70caff62777 100644
--- a/secure/caroot/trusted/D-TRUST_Root_Class_3_CA_2_EV_2009.pem
+++ b/secure/caroot/trusted/D-TRUST_Root_Class_3_CA_2_EV_2009.pem
@@ -5,6 +5,8 @@
 ##  Authority (CA). It was automatically extracted from Mozilla's
 ##  root CA list (the file `certdata.txt' in security/nss).
 ##
+##  It contains a certificate trusted for server authentication.
+##
 ##  Extracted from nss
 ##  with $FreeBSD$
 ##
diff --git a/secure/caroot/trusted/DST_Root_CA_X3.pem b/secure/caroot/trusted/DST_Root_CA_X3.pem
index aeaa167d590c..8cb0d1c990db 100644
--- a/secure/caroot/trusted/DST_Root_CA_X3.pem
+++ b/secure/caroot/trusted/DST_Root_CA_X3.pem
@@ -5,6 +5,8 @@
 ##  Authority (CA). It was automatically extracted from Mozilla's
 ##  root CA list (the file `certdata.txt' in security/nss).
 ##
+##  It contains a certificate trusted for server authentication.
+##
 ##  Extracted from nss
 ##  with $FreeBSD$
 ##
diff --git a/secure/caroot/trusted/DigiCert_Assured_ID_Root_CA.pem b/secure/caroot/trusted/DigiCert_Assured_ID_Root_CA.pem
index 12ce54725012..517dab4f837a 100644
--- a/secure/caroot/trusted/DigiCert_Assured_ID_Root_CA.pem
+++ b/secure/caroot/trusted/DigiCert_Assured_ID_Root_CA.pem
@@ -5,6 +5,8 @@
 ##  Authority (CA). It was automatically extracted from Mozilla's
 ##  root CA list (the file `certdata.txt' in security/nss).
 ##
+##  It contains a certificate trusted for server authentication.
+##
 ##  Extracted from nss
 ##  with $FreeBSD$
 ##
diff --git a/secure/caroot/trusted/DigiCert_Assured_ID_Root_G2.pem b/secure/caroot/trusted/DigiCert_Assured_ID_Root_G2.pem
index 7c5d96a053e4..3739c66f53eb 100644
--- a/secure/caroot/trusted/DigiCert_Assured_ID_Root_G2.pem
+++ b/secure/caroot/trusted/DigiCert_Assured_ID_Root_G2.pem
@@ -5,6 +5,8 @@
 ##  Authority (CA). It was automatically extracted from Mozilla's
 ##  root CA list (the file `certdata.txt' in security/nss).
 ##
+##  It contains a certificate trusted for server authentication.
+##
 ##  Extracted from nss
 ##  with $FreeBSD$
 ##
diff --git a/secure/caroot/trusted/DigiCert_Assured_ID_Root_G3.pem b/secure/caroot/trusted/DigiCert_Assured_ID_Root_G3.pem
index 901c33448725..ee8a53c317d0 100644
--- a/secure/caroot/trusted/DigiCert_Assured_ID_Root_G3.pem
+++ b/secure/caroot/trusted/DigiCert_Assured_ID_Root_G3.pem
@@ -5,6 +5,8 @@
 ##  Authority (CA). It was automatically extracted from Mozilla's
 ##  root CA list (the file `certdata.txt' in security/nss).
 ##
+##  It contains a certificate trusted for server authentication.
+##
 ##  Extracted from nss
 ##  with $FreeBSD$
 ##
diff --git a/secure/caroot/trusted/DigiCert_Global_Root_CA.pem b/secure/caroot/trusted/DigiCert_Global_Root_CA.pem
index 75c9fd45ebab..cc0b5a3e7630 100644
--- a/secure/caroot/trusted/DigiCert_Global_Root_CA.pem
+++ b/secure/caroot/trusted/DigiCert_Global_Root_CA.pem
@@ -5,6 +5,8 @@
 ##  Authority (CA). It was automatically extracted from Mozilla's
 ##  root CA list (the file `certdata.txt' in security/nss).
 ##
+##  It contains a certificate trusted for server authentication.
+##
 ##  Extracted from nss
 ##  with $FreeBSD$
 ##
diff --git a/secure/caroot/trusted/DigiCert_Global_Root_G2.pem b/secure/caroot/trusted/DigiCert_Global_Root_G2.pem
index 363d93b2c9ac..3775aa16ce1b 100644
--- a/secure/caroot/trusted/DigiCert_Global_Root_G2.pem
+++ b/secure/caroot/trusted/DigiCert_Global_Root_G2.pem
@@ -5,6 +5,8 @@
 ##  Authority (CA). It was automatically extracted from Mozilla's
 ##  root CA list (the file `certdata.txt' in security/nss).
 ##
+##  It contains a certificate trusted for server authentication.
+##
 ##  Extracted from nss
 ##  with $FreeBSD$
 ##
diff --git a/secure/caroot/trusted/DigiCert_Global_Root_G3.pem b/secure/caroot/trusted/DigiCert_Global_Root_G3.pem
index 45776f544654..650cbb7ce8e2 100644
--- a/secure/caroot/trusted/DigiCert_Global_Root_G3.pem
+++ b/secure/caroot/trusted/DigiCert_Global_Root_G3.pem
@@ -5,6 +5,8 @@
 ##  Authority (CA). It was automatically extracted from Mozilla's
 ##  root CA list (the file `certdata.txt' in security/nss).
 ##
+##  It contains a certificate trusted for server authentication.
+##
 ##  Extracted from nss
 ##  with $FreeBSD$
 ##
diff --git a/secure/caroot/trusted/DigiCert_High_Assurance_EV_Root_CA.pem b/secure/caroot/trusted/DigiCert_High_Assurance_EV_Root_CA.pem
index d76acb3c3896..45bcd8a2be14 100644
--- a/secure/caroot/trusted/DigiCert_High_Assurance_EV_Root_CA.pem
+++ b/secure/caroot/trusted/DigiCert_High_Assurance_EV_Root_CA.pem
@@ -5,6 +5,8 @@
 ##  Authority (CA). It was automatically extracted from Mozilla's
 ##  root CA list (the file `certdata.txt' in security/nss).
 ##
+##  It contains a certificate trusted for server authentication.
+##
 ##  Extracted from nss
 ##  with $FreeBSD$
 ##
diff --git a/secure/caroot/trusted/DigiCert_Trusted_Root_G4.pem b/secure/caroot/trusted/DigiCert_Trusted_Root_G4.pem
index 7ebb30081d81..26d81069d1a8 100644
--- a/secure/caroot/trusted/DigiCert_Trusted_Root_G4.pem
+++ b/secure/caroot/trusted/DigiCert_Trusted_Root_G4.pem
@@ -5,6 +5,8 @@
 ##  Authority (CA). It was automatically extracted from Mozilla's
 ##  root CA list (the file `certdata.txt' in security/nss).
 ##
+##  It contains a certificate trusted for server authentication.
+##
 ##  Extracted from nss
 ##  with $FreeBSD$
 ##
diff --git a/secure/caroot/trusted/E-Tugra_Certification_Authority.pem b/secure/caroot/trusted/E-Tugra_Certification_Authority.pem
index 04d1e630a816..1f5aa1a16a84 100644
--- a/secure/caroot/trusted/E-Tugra_Certification_Authority.pem
+++ b/secure/caroot/trusted/E-Tugra_Certification_Authority.pem
@@ -5,6 +5,8 @@
 ##  Authority (CA). It was automatically extracted from Mozilla's
 ##  root CA list (the file `certdata.txt' in security/nss).
 ##
+##  It contains a certificate trusted for server authentication.
+##
 ##  Extracted from nss
 ##  with $FreeBSD$
 ##
diff --git a/secure/caroot/trusted/Entrust_Root_Certification_Authority.pem b/secure/caroot/trusted/Entrust_Root_Certification_Authority.pem
index 50b0d2ed5c94..c33759f08280 100644
--- a/secure/caroot/trusted/Entrust_Root_Certification_Authority.pem
+++ b/secure/caroot/trusted/Entrust_Root_Certification_Authority.pem
@@ -5,6 +5,8 @@
 ##  Authority (CA). It was automatically extracted from Mozilla's
 ##  root CA list (the file `certdata.txt' in security/nss).
 ##
+##  It contains a certificate trusted for server authentication.
+##
 ##  Extracted from nss
 ##  with $FreeBSD$
 ##
diff --git a/secure/caroot/trusted/Entrust_Root_Certification_Authority_-_EC1.pem b/secure/caroot/trusted/Entrust_Root_Certification_Authority_-_EC1.pem
index eb15c3801be6..ad40a3142c9a 100644
--- a/secure/caroot/trusted/Entrust_Root_Certification_Authority_-_EC1.pem
+++ b/secure/caroot/trusted/Entrust_Root_Certification_Authority_-_EC1.pem
@@ -5,6 +5,8 @@
 ##  Authority (CA). It was automatically extracted from Mozilla's
 ##  root CA list (the file `certdata.txt' in security/nss).
 ##
+##  It contains a certificate trusted for server authentication.
+##
 ##  Extracted from nss
 ##  with $FreeBSD$
 ##
diff --git a/secure/caroot/trusted/Entrust_Root_Certification_Authority_-_G2.pem b/secure/caroot/trusted/Entrust_Root_Certification_Authority_-_G2.pem
index b92fd4aef90f..d3f94f45a7e7 100644
--- a/secure/caroot/trusted/Entrust_Root_Certification_Authority_-_G2.pem
+++ b/secure/caroot/trusted/Entrust_Root_Certification_Authority_-_G2.pem
@@ -5,6 +5,8 @@
 ##  Authority (CA). It was automatically extracted from Mozilla's
 ##  root CA list (the file `certdata.txt' in security/nss).
 ##
+##  It contains a certificate trusted for server authentication.
+##
 ##  Extracted from nss
 ##  with $FreeBSD$
 ##
diff --git a/secure/caroot/trusted/Entrust_Root_Certification_Authority_-_G4.pem b/secure/caroot/trusted/Entrust_Root_Certification_Authority_-_G4.pem
index 8443ae5ca195..1bf2c8b128b3 100644
--- a/secure/caroot/trusted/Entrust_Root_Certification_Authority_-_G4.pem
+++ b/secure/caroot/trusted/Entrust_Root_Certification_Authority_-_G4.pem
@@ -5,6 +5,8 @@
 ##  Authority (CA). It was automatically extracted from Mozilla's
 ##  root CA list (the file `certdata.txt' in security/nss).
 ##
+##  It contains a certificate trusted for server authentication.
+##
 ##  Extracted from nss
 ##  with $FreeBSD$
 ##
diff --git a/secure/caroot/trusted/Entrust_net_Premium_2048_Secure_Server_CA.pem b/secure/caroot/trusted/Entrust_net_Premium_2048_Secure_Server_CA.pem
index b429d96786ea..3f6795a51478 100644
--- a/secure/caroot/trusted/Entrust_net_Premium_2048_Secure_Server_CA.pem
+++ b/secure/caroot/trusted/Entrust_net_Premium_2048_Secure_Server_CA.pem
@@ -5,6 +5,8 @@
 ##  Authority (CA). It was automatically extracted from Mozilla's
 ##  root CA list (the file `certdata.txt' in security/nss).
 ##
+##  It contains a certificate trusted for server authentication.
+##
 ##  Extracted from nss
 ##  with $FreeBSD$
 ##
diff --git a/secure/caroot/trusted/GDCA_TrustAUTH_R5_ROOT.pem b/secure/caroot/trusted/GDCA_TrustAUTH_R5_ROOT.pem
index f9db5d422b8e..0936e508d0da 100644
--- a/secure/caroot/trusted/GDCA_TrustAUTH_R5_ROOT.pem
+++ b/secure/caroot/trusted/GDCA_TrustAUTH_R5_ROOT.pem
@@ -5,6 +5,8 @@
 ##  Authority (CA). It was automatically extracted from Mozilla's
 ##  root CA list (the file `certdata.txt' in security/nss).
 ##
+##  It contains a certificate trusted for server authentication.
+##
 ##  Extracted from nss
 ##  with $FreeBSD$
 ##
diff --git a/secure/caroot/trusted/GTS_Root_R1.pem b/secure/caroot/trusted/GTS_Root_R1.pem
index 9abe191b9bb9..deb77731627f 100644
--- a/secure/caroot/trusted/GTS_Root_R1.pem
+++ b/secure/caroot/trusted/GTS_Root_R1.pem
@@ -5,6 +5,8 @@
 ##  Authority (CA). It was automatically extracted from Mozilla's
 ##  root CA list (the file `certdata.txt' in security/nss).
 ##
+##  It contains a certificate trusted for server authentication.
+##
 ##  Extracted from nss
 ##  with $FreeBSD$
 ##
diff --git a/secure/caroot/trusted/GTS_Root_R2.pem b/secure/caroot/trusted/GTS_Root_R2.pem
index 8c5f92d1e610..8660b40deb91 100644
--- a/secure/caroot/trusted/GTS_Root_R2.pem
+++ b/secure/caroot/trusted/GTS_Root_R2.pem
@@ -5,6 +5,8 @@
 ##  Authority (CA). It was automatically extracted from Mozilla's
 ##  root CA list (the file `certdata.txt' in security/nss).
 ##
+##  It contains a certificate trusted for server authentication.
+##
 ##  Extracted from nss
 ##  with $FreeBSD$
 ##
diff --git a/secure/caroot/trusted/GTS_Root_R3.pem b/secure/caroot/trusted/GTS_Root_R3.pem
index d621d3053df1..82c9a6ea5ab0 100644
--- a/secure/caroot/trusted/GTS_Root_R3.pem
+++ b/secure/caroot/trusted/GTS_Root_R3.pem
@@ -5,6 +5,8 @@
 ##  Authority (CA). It was automatically extracted from Mozilla's
 ##  root CA list (the file `certdata.txt' in security/nss).
 ##
+##  It contains a certificate trusted for server authentication.
+##
 ##  Extracted from nss
 ##  with $FreeBSD$
 ##
diff --git a/secure/caroot/trusted/GTS_Root_R4.pem b/secure/caroot/trusted/GTS_Root_R4.pem
index 5a7a71764294..6986518db309 100644
--- a/secure/caroot/trusted/GTS_Root_R4.pem
+++ b/secure/caroot/trusted/GTS_Root_R4.pem
@@ -5,6 +5,8 @@
 ##  Authority (CA). It was automatically extracted from Mozilla's
 ##  root CA list (the file `certdata.txt' in security/nss).
 ##
+##  It contains a certificate trusted for server authentication.
+##
 ##  Extracted from nss
 ##  with $FreeBSD$
 ##
diff --git a/secure/caroot/trusted/GlobalSign_ECC_Root_CA_-_R4.pem b/secure/caroot/trusted/GlobalSign_ECC_Root_CA_-_R4.pem
index c63f8d8c441a..6263dcb9435e 100644
--- a/secure/caroot/trusted/GlobalSign_ECC_Root_CA_-_R4.pem
+++ b/secure/caroot/trusted/GlobalSign_ECC_Root_CA_-_R4.pem
@@ -5,6 +5,8 @@
 ##  Authority (CA). It was automatically extracted from Mozilla's
 ##  root CA list (the file `certdata.txt' in security/nss).
 ##
+##  It contains a certificate trusted for server authentication.
+##
 ##  Extracted from nss
 ##  with $FreeBSD$
 ##
diff --git a/secure/caroot/trusted/GlobalSign_ECC_Root_CA_-_R5.pem b/secure/caroot/trusted/GlobalSign_ECC_Root_CA_-_R5.pem
index 7a989c4577d8..c95e7a2cf92f 100644
--- a/secure/caroot/trusted/GlobalSign_ECC_Root_CA_-_R5.pem
+++ b/secure/caroot/trusted/GlobalSign_ECC_Root_CA_-_R5.pem
@@ -5,6 +5,8 @@
 ##  Authority (CA). It was automatically extracted from Mozilla's
 ##  root CA list (the file `certdata.txt' in security/nss).
 ##
+##  It contains a certificate trusted for server authentication.
+##
 ##  Extracted from nss
 ##  with $FreeBSD$
 ##
diff --git a/secure/caroot/trusted/GlobalSign_Root_CA.pem b/secure/caroot/trusted/GlobalSign_Root_CA.pem
index 0e2348e6c4f1..1fc32ec982e3 100644
--- a/secure/caroot/trusted/GlobalSign_Root_CA.pem
+++ b/secure/caroot/trusted/GlobalSign_Root_CA.pem
@@ -5,6 +5,8 @@
 ##  Authority (CA). It was automatically extracted from Mozilla's
 ##  root CA list (the file `certdata.txt' in security/nss).
 ##
+##  It contains a certificate trusted for server authentication.
+##
 ##  Extracted from nss
 ##  with $FreeBSD$
 ##
diff --git a/secure/caroot/trusted/GlobalSign_Root_CA_-_R2.pem b/secure/caroot/trusted/GlobalSign_Root_CA_-_R2.pem
index 616fe024937a..c9b9c9282c19 100644
--- a/secure/caroot/trusted/GlobalSign_Root_CA_-_R2.pem
+++ b/secure/caroot/trusted/GlobalSign_Root_CA_-_R2.pem
@@ -5,6 +5,8 @@
 ##  Authority (CA). It was automatically extracted from Mozilla's
 ##  root CA list (the file `certdata.txt' in security/nss).
 ##
+##  It contains a certificate trusted for server authentication.
+##
 ##  Extracted from nss
 ##  with $FreeBSD$
 ##
diff --git a/secure/caroot/trusted/GlobalSign_Root_CA_-_R3.pem b/secure/caroot/trusted/GlobalSign_Root_CA_-_R3.pem
index aedb37900191..f55b379232f2 100644
--- a/secure/caroot/trusted/GlobalSign_Root_CA_-_R3.pem
+++ b/secure/caroot/trusted/GlobalSign_Root_CA_-_R3.pem
@@ -5,6 +5,8 @@
 ##  Authority (CA). It was automatically extracted from Mozilla's
 ##  root CA list (the file `certdata.txt' in security/nss).
 ##
+##  It contains a certificate trusted for server authentication.
+##
 ##  Extracted from nss
 ##  with $FreeBSD$
 ##
diff --git a/secure/caroot/trusted/GlobalSign_Root_CA_-_R6.pem b/secure/caroot/trusted/GlobalSign_Root_CA_-_R6.pem
index 112aaf7fde17..b67daf31ec2b 100644
--- a/secure/caroot/trusted/GlobalSign_Root_CA_-_R6.pem
+++ b/secure/caroot/trusted/GlobalSign_Root_CA_-_R6.pem
@@ -5,6 +5,8 @@
 ##  Authority (CA). It was automatically extracted from Mozilla's
 ##  root CA list (the file `certdata.txt' in security/nss).
 ##
+##  It contains a certificate trusted for server authentication.
+##
 ##  Extracted from nss
 ##  with $FreeBSD$
 ##
diff --git a/secure/caroot/trusted/GlobalSign_Root_E46.pem b/secure/caroot/trusted/GlobalSign_Root_E46.pem
index c353dba208db..7624755d4b73 100644
--- a/secure/caroot/trusted/GlobalSign_Root_E46.pem
+++ b/secure/caroot/trusted/GlobalSign_Root_E46.pem
@@ -5,6 +5,8 @@
 ##  Authority (CA). It was automatically extracted from Mozilla's
 ##  root CA list (the file `certdata.txt' in security/nss).
 ##
+##  It contains a certificate trusted for server authentication.
+##
 ##  Extracted from nss
 ##  with $FreeBSD$
 ##
diff --git a/secure/caroot/trusted/GlobalSign_Root_R46.pem b/secure/caroot/trusted/GlobalSign_Root_R46.pem
index de107cd328c4..a016caba6051 100644
--- a/secure/caroot/trusted/GlobalSign_Root_R46.pem
+++ b/secure/caroot/trusted/GlobalSign_Root_R46.pem
@@ -5,6 +5,8 @@
 ##  Authority (CA). It was automatically extracted from Mozilla's
 ##  root CA list (the file `certdata.txt' in security/nss).
 ##
+##  It contains a certificate trusted for server authentication.
+##
 ##  Extracted from nss
 ##  with $FreeBSD$
 ##
diff --git a/secure/caroot/trusted/Go_Daddy_Class_2_CA.pem b/secure/caroot/trusted/Go_Daddy_Class_2_CA.pem
index 5083a0fcf21d..0d91c61331e8 100644
--- a/secure/caroot/trusted/Go_Daddy_Class_2_CA.pem
+++ b/secure/caroot/trusted/Go_Daddy_Class_2_CA.pem
@@ -5,6 +5,8 @@
 ##  Authority (CA). It was automatically extracted from Mozilla's
 ##  root CA list (the file `certdata.txt' in security/nss).
 ##
+##  It contains a certificate trusted for server authentication.
+##
 ##  Extracted from nss
 ##  with $FreeBSD$
 ##
diff --git a/secure/caroot/trusted/Go_Daddy_Root_Certificate_Authority_-_G2.pem b/secure/caroot/trusted/Go_Daddy_Root_Certificate_Authority_-_G2.pem
index 38fa9af7f743..3167a2899903 100644
--- a/secure/caroot/trusted/Go_Daddy_Root_Certificate_Authority_-_G2.pem
+++ b/secure/caroot/trusted/Go_Daddy_Root_Certificate_Authority_-_G2.pem
@@ -5,6 +5,8 @@
 ##  Authority (CA). It was automatically extracted from Mozilla's
 ##  root CA list (the file `certdata.txt' in security/nss).
 ##
+##  It contains a certificate trusted for server authentication.
+##
 ##  Extracted from nss
 ##  with $FreeBSD$
 ##
diff --git a/secure/caroot/trusted/Hellenic_Academic_and_Research_Institutions_ECC_RootCA_2015.pem b/secure/caroot/trusted/Hellenic_Academic_and_Research_Institutions_ECC_RootCA_2015.pem
index ebc5b8dc0ded..54eab928224b 100644
--- a/secure/caroot/trusted/Hellenic_Academic_and_Research_Institutions_ECC_RootCA_2015.pem
+++ b/secure/caroot/trusted/Hellenic_Academic_and_Research_Institutions_ECC_RootCA_2015.pem
@@ -5,6 +5,8 @@
 ##  Authority (CA). It was automatically extracted from Mozilla's
 ##  root CA list (the file `certdata.txt' in security/nss).
 ##
+##  It contains a certificate trusted for server authentication.
+##
 ##  Extracted from nss
 ##  with $FreeBSD$
 ##
diff --git a/secure/caroot/trusted/Hellenic_Academic_and_Research_Institutions_RootCA_2011.pem b/secure/caroot/trusted/Hellenic_Academic_and_Research_Institutions_RootCA_2011.pem
index 1c068806509a..827d7b869e60 100644
--- a/secure/caroot/trusted/Hellenic_Academic_and_Research_Institutions_RootCA_2011.pem
+++ b/secure/caroot/trusted/Hellenic_Academic_and_Research_Institutions_RootCA_2011.pem
@@ -5,6 +5,8 @@
 ##  Authority (CA). It was automatically extracted from Mozilla's
 ##  root CA list (the file `certdata.txt' in security/nss).
 ##
+##  It contains a certificate trusted for server authentication.
+##
 ##  Extracted from nss
 ##  with $FreeBSD$
 ##
diff --git a/secure/caroot/trusted/Hellenic_Academic_and_Research_Institutions_RootCA_2015.pem b/secure/caroot/trusted/Hellenic_Academic_and_Research_Institutions_RootCA_2015.pem
index afbe3afa1795..ff99fb9a56fc 100644
--- a/secure/caroot/trusted/Hellenic_Academic_and_Research_Institutions_RootCA_2015.pem
+++ b/secure/caroot/trusted/Hellenic_Academic_and_Research_Institutions_RootCA_2015.pem
@@ -5,6 +5,8 @@
 ##  Authority (CA). It was automatically extracted from Mozilla's
 ##  root CA list (the file `certdata.txt' in security/nss).
 ##
+##  It contains a certificate trusted for server authentication.
+##
 ##  Extracted from nss
 ##  with $FreeBSD$
 ##
diff --git a/secure/caroot/trusted/Hongkong_Post_Root_CA_1.pem b/secure/caroot/trusted/Hongkong_Post_Root_CA_1.pem
index 82b079da64e0..29327389967c 100644
--- a/secure/caroot/trusted/Hongkong_Post_Root_CA_1.pem
+++ b/secure/caroot/trusted/Hongkong_Post_Root_CA_1.pem
@@ -5,6 +5,8 @@
 ##  Authority (CA). It was automatically extracted from Mozilla's
 ##  root CA list (the file `certdata.txt' in security/nss).
 ##
+##  It contains a certificate trusted for server authentication.
+##
 ##  Extracted from nss
 ##  with $FreeBSD$
 ##
diff --git a/secure/caroot/trusted/Hongkong_Post_Root_CA_3.pem b/secure/caroot/trusted/Hongkong_Post_Root_CA_3.pem
index 5f5a5883ed80..8cc741f758de 100644
--- a/secure/caroot/trusted/Hongkong_Post_Root_CA_3.pem
+++ b/secure/caroot/trusted/Hongkong_Post_Root_CA_3.pem
@@ -5,6 +5,8 @@
 ##  Authority (CA). It was automatically extracted from Mozilla's
 ##  root CA list (the file `certdata.txt' in security/nss).
 ##
+##  It contains a certificate trusted for server authentication.
+##
 ##  Extracted from nss
*** 782 LINES SKIPPED ***



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?202104132200.13DM0Osm021856>