Require Certificate Transparency for Symantec-operated roots

net/data/ssl/symantec/excluded/8c31013d19f8eea618c95fda6d21f5777c6e930c7413031559ee863d78dfe809.pem

Index: net/data/ssl/symantec/excluded/8c31013d19f8eea618c95fda6d21f5777c6e930c7413031559ee863d78dfe809.pem
diff --git a/net/data/ssl/symantec/excluded/8c31013d19f8eea618c95fda6d21f5777c6e930c7413031559ee863d78dfe809.pem b/net/data/ssl/symantec/excluded/8c31013d19f8eea618c95fda6d21f5777c6e930c7413031559ee863d78dfe809.pem
new file mode 100644
index 0000000000000000000000000000000000000000..a0252dfdf7289c1c9c40a21f6d80d69eb3669a2c
--- /dev/null
+++ b/net/data/ssl/symantec/excluded/8c31013d19f8eea618c95fda6d21f5777c6e930c7413031559ee863d78dfe809.pem
@@ -0,0 +1,96 @@
+Certificate:
+    Data:
+        Version: 3 (0x2)
+        Serial Number: 146059 (0x23a8b)
+    Signature Algorithm: sha256WithRSAEncryption
+        Issuer: C=US, O=GeoTrust Inc., CN=GeoTrust Global CA
+        Validity
+            Not Before: Dec 18 12:55:22 2015 GMT
+            Not After : Dec 17 12:55:22 2018 GMT
+        Subject: C=IT, O=UniCredit S.p.A., CN=UniCredit Subordinate External
+        Subject Public Key Info:
+            Public Key Algorithm: rsaEncryption
+                Public-Key: (2048 bit)
+                Modulus:
+                    00:ba:b0:4f:c9:1a:42:7a:50:31:17:7a:88:0a:76:
+                    39:2c:e2:33:d1:0f:f7:14:ff:2a:9d:57:4d:39:c1:
+                    55:f2:1e:17:c8:36:dd:e6:16:1d:e6:1f:82:58:21:
+                    9b:da:1f:9e:35:f0:77:dc:fb:17:9e:52:c2:ff:cf:
+                    28:77:1e:4c:06:d0:7d:0d:cb:53:e6:48:2c:f5:cf:
+                    16:1e:69:66:33:3e:9d:a9:ef:2d:e0:e0:93:f8:5e:
+                    70:7e:c8:36:39:0e:71:46:21:90:43:47:f0:e5:eb:
+                    da:b4:a0:e5:f2:91:72:f9:2c:9f:a4:26:34:ea:83:
+                    0c:7c:e5:28:c9:f3:1f:c6:f1:c4:1c:b1:55:cc:83:
+                    4e:90:e6:3e:c5:5d:12:cb:cf:2e:56:b8:fe:19:44:
+                    73:15:77:be:de:cf:78:28:6a:04:21:96:58:96:f3:
+                    9c:c0:5a:b1:75:c2:c2:a2:18:7a:f4:f3:15:2f:ac:
+                    e4:aa:3f:d2:dc:c1:cc:a8:3e:cc:b9:c8:70:8c:3c:
+                    c1:91:bd:94:a0:4d:85:d8:e8:b0:5a:f9:90:6d:6b:
+                    2a:1e:b6:88:ff:40:12:cd:3b:1d:2f:46:d2:b2:f5:
+                    0c:d1:74:c1:8f:04:25:49:fe:ca:58:03:f8:3f:cb:
+                    99:86:d0:6d:42:e1:3b:03:64:7b:8d:4c:d4:9a:9c:
+                    74:1b
+                Exponent: 65537 (0x10001)
+        X509v3 extensions:
+            X509v3 Authority Key Identifier: 
+                keyid:C0:7A:98:68:8D:89:FB:AB:05:64:0C:11:7D:AA:7D:65:B8:CA:CC:4E
+
+            X509v3 Subject Key Identifier: 
+                F0:56:4F:75:77:1E:74:76:35:D3:40:14:A0:12:E6:0D:5D:F5:3E:27
+            X509v3 Key Usage: critical
+                Certificate Sign, CRL Sign
+            Authority Information Access: 
+                OCSP - URI:http://g.symcd.com
+
+            X509v3 Basic Constraints: critical
+                CA:TRUE, pathlen:0
+            X509v3 CRL Distribution Points: 
+
+                Full Name:
+                  URI:http://g.symcb.com/crls/gtglobal.crl
+
+            X509v3 Certificate Policies: 
+                Policy: 1.3.6.1.4.1.37016.1.1.1.1
+                  CPS: http://ca.unicredit.eu/CPS/cps.html
+
+    Signature Algorithm: sha256WithRSAEncryption
+         ab:0f:08:df:e0:61:2a:f7:af:5a:08:8f:fd:d9:d3:2d:63:1d:
+         6b:31:d8:09:de:aa:6a:91:90:85:73:0e:bf:4b:7d:ad:c3:ea:
+         90:87:44:39:06:71:3c:bf:37:85:dd:24:38:59:7f:4b:18:11:
+         0d:79:16:69:3d:3b:89:81:60:3a:94:43:db:9d:b1:fb:af:0a:
+         79:10:c5:0a:7d:f2:c0:eb:a2:22:6e:01:3f:f2:23:d9:38:e7:
+         09:ed:06:c4:f5:cb:83:c9:be:45:c6:05:cf:b9:3c:11:37:30:
+         bb:95:38:87:65:cf:dc:50:30:a3:20:39:a6:6f:30:2d:0a:a8:
+         49:c5:cb:4f:4b:59:e1:b7:e2:bc:b5:47:83:7d:ba:18:f5:04:
+         d2:89:74:03:3b:9f:b3:ef:ea:e3:84:e3:56:c4:0a:5e:b0:19:
+         f5:cf:1e:a5:41:4f:16:06:aa:d1:d7:31:22:69:9b:87:bd:e5:
+         87:f1:24:07:a4:2c:69:d1:ef:c5:2f:a5:49:f1:ea:32:43:4f:
+         58:ee:a4:bb:de:a5:08:60:ec:02:3a:ea:65:e7:0c:3f:e4:5f:
+         97:33:bc:4a:db:95:6a:38:f2:2e:23:18:04:23:f7:72:05:c4:
+         50:7e:06:4f:e6:ea:ef:23:4b:f3:6b:66:a0:d4:2a:e3:e6:00:
+         8d:e7:0e:b1
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----