Update CA certificates

ADDED    Repository imported
         SHA1      : BA:29:41:60:77:98:3F:F4:F3:EF:F2:31:05:3B:2E:EA:6D:4D:45:FD
         Subject   : C=US, O=IdenTrust, CN=IdenTrust Public Sector Root CA 1
         Not Before: Jan 16 17:53:32 2014 GMT
         Not After : Jan 16 17:53:32 2034 GMT
ADDED    Repository imported
         SHA1      : D8:EB:6B:41:51:92:59:E0:F3:E7:85:00:C0:3D:B6:88:97:C9:EE:FC
         Subject   : C=NL, O=Staat der Nederlanden, CN=Staat der Nederlanden Root CA - G3
         Not Before: Nov 14 11:28:42 2013 GMT
         Not After : Nov 13 23:00:00 2028 GMT
ADDED    Repository imported
         SHA1      : 76:E2:7E:C1:4F:DB:82:C1:C0:A6:75:B5:05:BE:3D:29:B4:ED:DB:BB
         Subject   : C=NL, O=Staat der Nederlanden, CN=Staat der Nederlanden EV Root CA
         Not Before: Dec  8 11:19:29 2010 GMT
         Not After : Dec  8 11:10:28 2022 GMT
ADDED    Repository imported
         SHA1      : E2:B8:29:4B:55:84:AB:6B:58:C2:90:46:6C:AC:3F:B8:39:8F:84:83
         Subject   : C=CN, O=China Financial Certification Authority, CN=CFCA EV ROOT
         Not Before: Aug  8 03:07:01 2012 GMT
         Not After : Dec 31 03:07:01 2029 GMT
ADDED    Repository imported
         SHA1      : DF:71:7E:AA:4A:D9:4E:C9:55:84:99:60:2D:48:DE:5F:BC:F0:3A:25
         Subject   : C=US, O=IdenTrust, CN=IdenTrust Commercial Root CA 1
         Not Before: Jan 16 18:12:23 2014 GMT
         Not After : Jan 16 18:12:23 2034 GMT
ADDED    from http://www.turktrust.com.tr/sertifikalar/TURKTRUST_Elektronik_Sertifika_Hizmet_Saglayicisi_h5.crt (sha1 confirmed)
         SHA1      : C4:18:F6:4D:46:D1:DF:00:3D:27:30:13:72:43:A9:12:11:C6:75:FB
         Subject   : C=TR, L=Ankara, O=T\xC3\x9CRKTRUST Bilgi \xC4\xB0leti\xC5\x9Fim ve Bili\xC5\x9Fim G\xC3\xBCvenli\xC4\x9Fi Hizmetleri A.\xC5\x9E., CN=T\xC3\x9CRKTRUST Elektronik Sertifika Hizmet Sa\xC4\x9Flay\xC4\xB1c\xC4\xB1s\xC4\xB1 H5
         Not Before: Apr 30 08:07:01 2013 GMT
         Not After : Apr 28 08:07:01 2023 GMT
ADDED    from http://www.turktrust.com.tr/sertifikalar/TURKTRUST_Elektronik_Sertifika_Hizmet_Saglayicisi_h6.crt (sha1 confirmed)
         SHA1      : 8A:5C:8C:EE:A5:03:E6:05:56:BA:D8:1B:D4:F6:C9:B0:ED:E5:2F:E0
         Subject   : C=TR, L=Ankara, O=T\xC3\x9CRKTRUST Bilgi \xC4\xB0leti\xC5\x9Fim ve Bili\xC5\x9Fim G\xC3\xBCvenli\xC4\x9Fi Hizmetleri A.\xC5\x9E., CN=T\xC3\x9CRKTRUST Elektronik Sertifika Hizmet Sa\xC4\x9Flay\xC4\xB1c\xC4\xB1s\xC4\xB1 H6
         Not Before: Dec 18 09:04:10 2013 GMT
         Not After : Dec 16 09:04:10 2023 GMT
ADDED    from http://www.certinomis.fr/publi/cer/AC_Racine_G3.cer (sha1 confirmed)
         SHA1      : 9D:70:BB:01:A5:A4:A0:18:11:2E:F7:1C:01:B9:32:C5:34:E7:88:A8
         Subject   : C=FR, O=Certinomis, OU=0002 433998903, CN=Certinomis - Root CA
         Not Before: Oct 21 09:17:18 2013 GMT
         Not After : Oct 21 09:17:18 2033 GMT
REMOVE   old root; last issued certificate expired
         SHA1      : DA:40:18:8B:91:89:A3:ED:EE:AE:DA:97:FE:2F:9D:F5:B7:D1:8A:41
         Subject   : C=US, O=Equifax Secure Inc., CN=Equifax Secure eBusiness CA-1
         Not Before: Jun 21 04:00:00 1999 GMT
         Not After : Jun 21 04:00:00 2020 GMT
REMOVE   1024-bit root removed
         SHA1      : 7E:78:4A:10:1C:82:65:CC:2D:E1:F1:6D:47:B4:40:CA:D9:0A:19:45
         Subject   : C=US, O=Equifax Secure Inc., CN=Equifax Secure Global eBusiness CA-1
         Not Before: Jun 21 04:00:00 1999 GMT
         Not After : Jun 21 04:00:00 2020 GMT
REMOVE   1024-bit root removed
         SHA1      : E0:AB:05:94:20:72:54:93:05:60:62:02:36:70:F7:CD:2E:FC:66:66
         Subject   : C=ZA, ST=Western Cape, L=Cape Town, O=Thawte Consulting cc, OU=Certification Services Division, CN=Thawte Premium Server CA/emailAddress=premium-server@thawte.com
         Not Before: Aug  1 00:00:00 1996 GMT
         Not After : Jan  1 23:59:59 2021 GMT
REMOVE   1024-bit root
         SHA1      : 85:37:1C:A6:E5:50:14:3D:CE:28:03:47:1B:DE:3A:09:E8:F8:77:0F
         Subject   : C=US, O=VeriSign, Inc., OU=Class 3 Public Primary Certification Authority - G2, OU=(c) 1998 VeriSign, Inc. - For authorized use only, OU=VeriSign Trust Network
         Not Before: May 18 00:00:00 1998 GMT
         Not After : Aug  1 23:59:59 2028 GMT
REMOVE   old root; last issued certificate expired
         SHA1      : 39:21:C1:15:C1:5D:0E:CA:5C:CB:5B:C4:F0:7D:21:D8:05:0B:56:6A
         Subject   : C=US, O=America Online Inc., CN=America Online Root Certification Authority 1
         Not Before: May 28 06:00:00 2002 GMT
         Not After : Nov 19 20:43:00 2037 GMT
REMOVE   old root; last issued certificate expired
         SHA1      : 85:B5:FF:67:9B:0C:79:96:1F:C8:6E:44:22:00:46:13:DB:17:92:84
         Subject   : C=US, O=America Online Inc., CN=America Online Root Certification Authority 2
         Not Before: May 28 06:00:00 2002 GMT
         Not After : Sep 29 14:08:00 2037 GMT
REMOVE   old root cert no longer in use
         SHA1      : 80:25:EF:F4:6E:70:C8:D4:72:24:65:84:FE:40:3B:8A:8D:6A:DB:F5
         Subject   : C=DE, O=TC TrustCenter GmbH, OU=TC TrustCenter Class 3 CA, CN=TC TrustCenter Class 3 CA II
         Not Before: Jan 12 14:41:57 2006 GMT
         Not After : Dec 31 22:59:59 2025 GMT
REMOVE   unused, see https://bugzilla.mozilla.org/show_bug.cgi?id=850740
         SHA1      : 6B:2F:34:AD:89:58:BE:62:FD:B0:6B:5C:CE:BB:9D:D9:4F:4E:39:F3
         Subject   : C=DE, O=TC TrustCenter GmbH, OU=TC TrustCenter Universal CA, CN=TC TrustCenter Universal CA I
         Not Before: Mar 22 15:54:28 2006 GMT
         Not After : Dec 31 22:59:59 2025 GMT
REMOVE   unused, see https://bugzilla.mozilla.org/show_bug.cgi?id=850740
         SHA1      : AE:50:83:ED:7C:F4:5C:BC:8F:61:C6:21:FE:68:5D:79:42:21:15:6E
         Subject   : C=DE, O=TC TrustCenter GmbH, OU=TC TrustCenter Class 2 CA, CN=TC TrustCenter Class 2 CA II
         Not Before: Jan 12 14:38:43 2006 GMT
         Not After : Dec 31 22:59:59 2025 GMT
REMOVE   Audit requirements not met
         SHA1      : DD:E1:D2:A9:01:80:2E:1D:87:5E:84:B3:80:7E:4B:B1:FD:99:41:34
         Subject   : C=TR, O=Elektronik Bilgi Guvenligi A.S., CN=e-Guven Kok Elektronik Sertifika Hizmet Saglayicisi
         Not Before: Jan  4 11:32:48 2007 GMT
         Not After : Jan  4 11:32:48 2017 GMT

(cherry picked from commit 226c1f270ea2f96d13b31bdf47b929f960c29b56)

Bug: 19418204
Bug: 20033228
Bug: 20069329
Bug: 20643923
Bug: 21480355
Bug: 24992154
Change-Id: I17bf8f3224832b9d67f51e3b1011530f3319058e
19 files changed
tree: d0bca97513e4882802c849913ecd2c401a3efc0e
  1. files/
  2. Android.mk
  3. README.cacerts