Require Certificate Transparency for Symantec-operated roots

net/data/ssl/symantec/roots/a0459b9f63b22559f5fa5d4c6db3f9f72ff19342033578f073bf1d1b46cbb912.pem

+Certificate:
+    Data:
+        Version: 3 (0x2)
+        Serial Number: 1 (0x1)
+    Signature Algorithm: sha1WithRSAEncryption
+        Issuer: C=US, O=GeoTrust Inc., CN=GeoTrust Universal CA
+        Validity
+            Not Before: Mar  4 05:00:00 2004 GMT
+            Not After : Mar  4 05:00:00 2029 GMT
+        Subject: C=US, O=GeoTrust Inc., CN=GeoTrust Universal CA
+        Subject Public Key Info:
+            Public Key Algorithm: rsaEncryption
+                Public-Key: (4096 bit)
+                Modulus:
+                    00:a6:15:55:a0:a3:c6:e0:1f:8c:9d:21:50:d7:c1:
+                    be:2b:5b:b5:a4:9e:a1:d9:72:58:bd:00:1b:4c:bf:
+                    61:c9:14:1d:45:82:ab:c6:1d:80:d6:3d:eb:10:9c:
+                    3a:af:6d:24:f8:bc:71:01:9e:06:f5:7c:5f:1e:c1:
+                    0e:55:ca:83:9a:59:30:ae:19:cb:30:48:95:ed:22:
+                    37:8d:f4:4a:9a:72:66:3e:ad:95:c0:e0:16:00:e0:
+                    10:1f:2b:31:0e:d7:94:54:d3:42:33:a0:34:1d:1e:
+                    45:76:dd:4f:ca:18:37:ec:85:15:7a:19:08:fc:d5:
+                    c7:9c:f0:f2:a9:2e:10:a9:92:e6:3d:58:3d:a9:16:
+                    68:3c:2f:75:21:18:7f:28:77:a5:e1:61:17:b7:a6:
+                    e9:f8:1e:99:db:73:6e:f4:0a:a2:21:6c:ee:da:aa:
+                    85:92:66:af:f6:7a:6b:82:da:ba:22:08:35:0f:cf:
+                    42:f1:35:fa:6a:ee:7e:2b:25:cc:3a:11:e4:6d:af:
+                    73:b2:76:1d:ad:d0:b2:78:67:1a:a4:39:1c:51:0b:
+                    67:56:83:fd:38:5d:0d:ce:dd:f0:bb:2b:96:1f:de:
+                    7b:32:52:fd:1d:bb:b5:06:a1:b2:21:5e:a5:d6:95:
+                    68:7f:f0:99:9e:dc:45:08:3e:e7:d2:09:0d:35:94:
+                    dd:80:4e:53:97:d7:b5:09:44:20:64:16:17:03:02:
+                    4c:53:0d:68:de:d5:aa:72:4d:93:6d:82:0e:db:9c:
+                    bd:cf:b4:f3:5c:5d:54:7a:69:09:96:d6:db:11:c1:
+                    8d:75:a8:b4:cf:39:c8:ce:3c:bc:24:7c:e6:62:ca:
+                    e1:bd:7d:a7:bd:57:65:0b:e4:fe:25:ed:b6:69:10:
+                    dc:28:1a:46:bd:01:1d:d0:97:b5:e1:98:3b:c0:37:
+                    64:d6:3d:94:ee:0b:e1:f5:28:ae:0b:56:bf:71:8b:
+                    23:29:41:8e:86:c5:4b:52:7b:d8:71:ab:1f:8a:15:
+                    a6:3b:83:5a:d7:58:01:51:c6:4c:41:d9:7f:d8:41:
+                    67:72:a2:28:df:60:83:a9:9e:c8:7b:fc:53:73:72:
+                    59:f5:93:7a:17:76:0e:ce:f7:e5:5c:d9:0b:55:34:
+                    a2:aa:5b:b5:6a:54:e7:13:ca:57:ec:97:6d:f4:5e:
+                    06:2f:45:8b:58:d4:23:16:92:e4:16:6e:28:63:59:
+                    30:df:50:01:9c:63:89:1a:9f:db:17:94:82:70:37:
+                    c3:24:9e:9a:47:d6:5a:ca:4e:a8:69:89:72:1f:91:
+                    6c:db:7e:9e:1b:ad:c7:1f:73:dd:2c:4f:19:65:fd:
+                    7f:93:40:10:2e:d2:f0:ed:3c:9e:2e:28:3e:69:26:
+                    33:c5:7b
+                Exponent: 65537 (0x10001)
+        X509v3 extensions:
+            X509v3 Basic Constraints: critical
+                CA:TRUE
+            X509v3 Subject Key Identifier: 
+                DA:BB:2E:AA:B0:0C:B8:88:26:51:74:5C:6D:03:D3:C0:D8:8F:7A:D6
+            X509v3 Authority Key Identifier: 
+                keyid:DA:BB:2E:AA:B0:0C:B8:88:26:51:74:5C:6D:03:D3:C0:D8:8F:7A:D6
+
+            X509v3 Key Usage: critical
+                Digital Signature, Certificate Sign, CRL Sign
+    Signature Algorithm: sha1WithRSAEncryption
+         31:78:e6:c7:b5:df:b8:94:40:c9:71:c4:a8:35:ec:46:1d:c2:
+         85:f3:28:58:86:b0:0b:fc:8e:b2:39:8f:44:55:ab:64:84:5c:
+         69:a9:d0:9a:38:3c:fa:e5:1f:35:e5:44:e3:80:79:94:68:a4:
+         bb:c4:9f:3d:e1:34:cd:30:46:8b:54:2b:95:a5:ef:f7:3f:99:
+         84:fd:35:e6:cf:31:c6:dc:6a:bf:a7:d7:23:08:e1:98:5e:c3:
+         5a:08:76:a9:a6:af:77:2f:b7:60:bd:44:46:6a:ef:97:ff:73:
+         95:c1:8e:e8:93:fb:fd:31:b7:ec:57:11:11:45:9b:30:f1:1a:
+         88:39:c1:4f:3c:a7:00:d5:c7:fc:ab:6d:80:22:70:a5:0c:e0:
+         5d:04:29:02:fb:cb:a0:91:d1:7c:d6:c3:7e:50:d5:9d:58:be:
+         41:38:eb:b9:75:3c:15:d9:9b:c9:4a:83:59:c0:da:53:fd:33:
+         bb:36:18:9b:85:0f:15:dd:ee:2d:ac:76:93:b9:d9:01:8d:48:
+         10:a8:fb:f5:38:86:f1:db:0a:c6:bd:84:a3:23:41:de:d6:77:
+         6f:85:d4:85:1c:50:e0:ae:51:8a:ba:8d:3e:76:e2:b9:ca:27:
+         f2:5f:9f:ef:6e:59:0d:06:d8:2b:17:a4:d2:7c:6b:bb:5f:14:
+         1a:48:8f:1a:4c:e7:b3:47:1c:8e:4c:45:2b:20:ee:48:df:e7:
+         dd:09:8e:18:a8:da:40:8d:92:26:11:53:61:73:5d:eb:bd:e7:
+         c4:4d:29:37:61:eb:ac:39:2d:67:2e:16:d6:f5:00:83:85:a1:
+         cc:7f:76:c4:7d:e4:b7:4b:66:ef:03:45:60:69:b6:0c:52:96:
+         92:84:5e:a6:a3:b5:a4:3e:2b:d9:cc:d8:1b:47:aa:f2:44:da:
+         4f:f9:03:e8:f0:14:cb:3f:f3:83:de:d0:c1:54:e3:b7:e8:0a:
+         37:4d:8b:20:59:03:30:19:a1:2c:c8:bd:11:1f:df:ae:c9:4a:
+         c5:f3:27:66:66:86:ac:68:91:ff:d9:e6:53:1c:0f:8b:5c:69:
+         65:0a:26:c8:1e:34:c3:5d:51:7b:d7:a9:9c:06:a1:36:dd:d5:
+         89:94:bc:d9:e4:2d:0c:5e:09:6c:08:97:7c:a3:3d:7c:93:ff:
+         3f:a1:14:a7:cf:b5:5d:eb:db:db:1c:c4:76:df:88:b9:bd:45:
+         05:95:1b:ae:fc:46:6a:4c:af:48:e3:ce:ae:0f:d2:7e:eb:e6:
+         6c:9c:4f:81:6a:7a:64:ac:bb:3e:d5:e7:cb:76:2e:c5:a7:48:
+         c1:5c:90:0f:cb:c8:3f:fa:e6:32:e1:8d:1b:6f:a4:e6:8e:d8:
+         f9:29:48:8a:ce:73:fe:2c
+-----BEGIN CERTIFICATE-----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=
+-----END CERTIFICATE-----