Require Certificate Transparency for Symantec-operated roots

net/data/ssl/symantec/excluded/ac2b922ecfd5e01711772fea8ed372de9d1e2245fce3f57a9cdbec77296a424b.pem

Index: net/data/ssl/symantec/excluded/ac2b922ecfd5e01711772fea8ed372de9d1e2245fce3f57a9cdbec77296a424b.pem
diff --git a/net/data/ssl/symantec/excluded/ac2b922ecfd5e01711772fea8ed372de9d1e2245fce3f57a9cdbec77296a424b.pem b/net/data/ssl/symantec/excluded/ac2b922ecfd5e01711772fea8ed372de9d1e2245fce3f57a9cdbec77296a424b.pem
new file mode 100644
index 0000000000000000000000000000000000000000..26e2113310338ec10196c7a19534365ab0217f1c
--- /dev/null
+++ b/net/data/ssl/symantec/excluded/ac2b922ecfd5e01711772fea8ed372de9d1e2245fce3f57a9cdbec77296a424b.pem
@@ -0,0 +1,96 @@
+Certificate:
+    Data:
+        Version: 3 (0x2)
+        Serial Number: 146036 (0x23a74)
+    Signature Algorithm: sha256WithRSAEncryption
+        Issuer: C=US, O=GeoTrust Inc., CN=GeoTrust Global CA
+        Validity
+            Not Before: Jun 16 15:42:02 2014 GMT
+            Not After : May 20 15:42:02 2022 GMT
+        Subject: CN=Apple IST CA 2 - G1, OU=Certification Authority, O=Apple Inc., C=US
+        Subject Public Key Info:
+            Public Key Algorithm: rsaEncryption
+                Public-Key: (2048 bit)
+                Modulus:
+                    00:d0:93:a1:1d:47:43:20:16:b2:0b:6b:eb:c3:d5:
+                    b4:e8:c7:98:cd:f3:de:bf:e8:4d:e9:e3:36:80:07:
+                    fc:45:1b:6a:7c:45:86:ae:56:d3:a4:09:7f:61:0d:
+                    6b:5d:7e:52:6b:7d:b4:c8:39:c4:f4:67:3a:f7:83:
+                    ce:19:6f:86:2f:7e:45:7e:47:1c:67:52:ca:95:05:
+                    5d:e2:36:51:85:c0:d4:67:80:35:6f:15:dd:3e:fd:
+                    1d:d2:fd:8f:34:50:d8:ec:76:2a:be:e3:d3:da:e4:
+                    fd:c8:eb:28:02:96:11:97:17:61:1c:e9:c4:59:3b:
+                    42:dc:32:d1:09:1d:da:a6:d1:43:86:ff:5e:b2:bc:
+                    8c:cf:66:db:01:8b:02:ae:94:48:f3:38:8f:fd:ea:
+                    32:a8:08:ec:86:97:51:94:24:3e:49:49:96:53:e8:
+                    79:a1:40:81:e9:05:bb:93:95:51:fc:e3:fd:7c:11:
+                    4b:f7:9e:08:b3:15:49:15:07:f9:d1:37:a0:9b:4b:
+                    32:f6:b5:c4:dc:6a:d1:fc:0a:ed:f6:e0:c5:29:a0:
+                    a8:8b:71:fe:0d:92:bc:fe:54:70:18:0a:6d:c7:ed:
+                    0c:fb:c9:2d:06:c3:8c:85:fc:cb:86:5c:d6:36:8e:
+                    12:8b:09:7f:fb:19:1a:38:d5:f0:94:30:7a:0f:a6:
+                    8c:f3
+                Exponent: 65537 (0x10001)
+        X509v3 extensions:
+            X509v3 Authority Key Identifier: 
+                keyid:C0:7A:98:68:8D:89:FB:AB:05:64:0C:11:7D:AA:7D:65:B8:CA:CC:4E
+
+            X509v3 Subject Key Identifier: 
+                D8:7A:94:44:7C:90:70:90:16:9E:DD:17:9C:01:44:03:86:D6:2A:29
+            X509v3 Basic Constraints: critical
+                CA:TRUE, pathlen:0
+            X509v3 Key Usage: critical
+                Certificate Sign, CRL Sign
+            X509v3 CRL Distribution Points: 
+
+                Full Name:
+                  URI:http://g.symcb.com/crls/gtglobal.crl
+
+            Authority Information Access: 
+                OCSP - URI:http://g.symcd.com
+
+            X509v3 Certificate Policies: 
+                Policy: 2.16.840.1.113733.1.7.54
+                  CPS: http://www.geotrust.com/resources/cps
+
+    Signature Algorithm: sha256WithRSAEncryption
+         16:47:73:6f:85:a2:62:e1:e7:2a:76:bb:89:95:42:26:97:bc:
+         4a:ac:ac:70:53:3a:3f:31:83:3d:3c:1c:ab:9a:e2:b1:5d:1c:
+         76:1a:a0:3c:0c:72:57:be:d3:9e:50:e0:c8:99:d6:58:d7:02:
+         ea:ce:0d:29:54:7c:cd:f5:c2:c6:90:29:55:a3:6f:14:a8:0b:
+         42:0d:3a:98:6d:06:78:9e:f0:6a:a3:1d:02:0a:a2:28:a4:8d:
+         c2:81:46:3e:6d:67:da:de:3f:fe:85:0e:42:2a:12:de:b5:b7:
+         fb:b8:1b:a7:96:ec:77:9f:ec:d4:53:95:7a:ff:07:f4:f2:0a:
+         14:c0:51:52:b1:d6:8e:50:0b:1a:99:5c:bc:0b:c9:bd:ed:ed:
+         f8:5e:c1:56:db:4d:7e:23:a4:11:a1:2c:d4:1b:05:9a:e4:1b:
+         52:f6:7c:38:99:05:4b:ba:72:8d:42:89:60:04:66:2a:f4:fd:
+         68:d7:6b:f7:99:41:28:d6:6c:24:ab:e6:25:53:2e:c8:82:99:
+         e2:a2:8f:23:be:30:83:b1:27:8b:fa:68:7f:01:49:e8:c6:98:
+         6b:10:2e:98:5e:8a:d7:ca:4b:b1:c7:c9:58:9a:d0:36:db:96:
+         95:ec:b6:81:e4:f2:cd:6f:1b:79:87:4c:10:3c:89:e4:4d:fa:
+         54:dc:aa:a6
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----