Merging upstream version 115.10.0esr.

Signed-off-by: Daniel Baumann <daniel.baumann@progress-linux.org>

2 files changed, 707 insertions, 164 deletions

diff --git a/services/settings/dumps/security-state/intermediates.json b/services/settings/dumps/security-state/intermediates.json
index c2dec37e4f..a7d46d8e4f 100644
--- a/services/settings/dumps/security-state/intermediates.json
+++ b/services/settings/dumps/security-state/intermediates.json
@@ -1,6 +1,636 @@
 {
   "data": [
     {
+      "schema": 1712310550077,
+      "derHash": "w+vOp+axOsPrOnnwWBnmfWiTxlZC9Q2bXhZHyyZQa44=",
+      "subject": "CN=Security Communication ECC RootCA1,O=SECOM Trust Systems CO.\\,LTD.,C=JP",
+      "subjectDN": "MGExCzAJBgNVBAYTAkpQMSUwIwYDVQQKExxTRUNPTSBUcnVzdCBTeXN0ZW1zIENPLixMVEQuMSswKQYDVQQDEyJTZWN1cml0eSBDb21tdW5pY2F0aW9uIEVDQyBSb290Q0Ex",
+      "whitelist": false,
+      "attachment": {
+        "hash": "49bb804fc27ee287203f35432fa03118cbda037f2cc4b15a762a27278f2a430a",
+        "size": 1455,
+        "filename": "Mym_oTtgB6tfw3E_CssolCbi-8mcxcEQqRSxOVcWALY=.pem",
+        "location": "security-state-staging/intermediates/85f47822-4d0f-454d-9d84-f0ce5fc4d157.pem",
+        "mimetype": "application/x-pem-file"
+      },
+      "pubKeyHash": "Mym/oTtgB6tfw3E/CssolCbi+8mcxcEQqRSxOVcWALY=",
+      "crlite_enrolled": false,
+      "id": "cdfe2baf-ce8e-4ff0-a638-e40128c6f4ee",
+      "last_modified": 1712311023721
+    },
+    {
+      "schema": 1712310549735,
+      "derHash": "nCgDadBy+J2cm2JkC78vKNLzDs7pdZhUAx1cXFPo0bY=",
+      "subject": "CN=JPRS OV ECC CA 2024 G1,O=Japan Registry Services Co.\\, Ltd.,C=JP",
+      "subjectDN": "MFoxCzAJBgNVBAYTAkpQMSowKAYDVQQKEyFKYXBhbiBSZWdpc3RyeSBTZXJ2aWNlcyBDby4sIEx0ZC4xHzAdBgNVBAMTFkpQUlMgT1YgRUNDIENBIDIwMjQgRzE=",
+      "whitelist": false,
+      "attachment": {
+        "hash": "8f21756b90356734138db1717baa7cd355f39bc01d0bbefcd782b6a73bb40267",
+        "size": 1284,
+        "filename": "v_cVY7f6bXpCh2OYwK6wmEE9ZIaufUJmoSlpxWvjBDI=.pem",
+        "location": "security-state-staging/intermediates/5d677b3c-4524-4ee7-a2b9-388e7d90dc2c.pem",
+        "mimetype": "application/x-pem-file"
+      },
+      "pubKeyHash": "v/cVY7f6bXpCh2OYwK6wmEE9ZIaufUJmoSlpxWvjBDI=",
+      "crlite_enrolled": false,
+      "id": "f9ed868e-cbce-49b9-85ff-1b7d8f9771e7",
+      "last_modified": 1712311023718
+    },
+    {
+      "schema": 1712310549107,
+      "derHash": "G5AdVQpaUfZzcnnGAhRF8FG9KTAVYSpbqj+FiIKe5po=",
+      "subject": "CN=JPRS DV ECC CA 2024 G1,O=Japan Registry Services Co.\\, Ltd.,C=JP",
+      "subjectDN": "MFoxCzAJBgNVBAYTAkpQMSowKAYDVQQKEyFKYXBhbiBSZWdpc3RyeSBTZXJ2aWNlcyBDby4sIEx0ZC4xHzAdBgNVBAMTFkpQUlMgRFYgRUNDIENBIDIwMjQgRzE=",
+      "whitelist": false,
+      "attachment": {
+        "hash": "3749489691bfad9b5833e7e64c622b11fa2a70217f4d99f59629a2e6e864a189",
+        "size": 1284,
+        "filename": "d7IsXA0lsOv-SgxZRrDbM-A_cNQoAtC0iZ2kRR58b5c=.pem",
+        "location": "security-state-staging/intermediates/57cb9705-521a-4177-82fa-7c562bc5aef7.pem",
+        "mimetype": "application/x-pem-file"
+      },
+      "pubKeyHash": "d7IsXA0lsOv+SgxZRrDbM+A/cNQoAtC0iZ2kRR58b5c=",
+      "crlite_enrolled": false,
+      "id": "cc33f7ee-ac11-426c-9210-dd79e9bde3ae",
+      "last_modified": 1712311023716
+    },
+    {
+      "schema": 1711724029637,
+      "derHash": "TkLi2IxOTbWRnHkATRycDpwtb7tFPaHWQtPTD3jAVy4=",
+      "subject": "CN=Certigna Server Authentication ACME FR CA G2,O=Certigna,C=FR",
+      "subjectDN": "MHYxCzAJBgNVBAYTAkZSMREwDwYDVQQKDAhDZXJ0aWduYTEdMBsGA1UEYQwUTlRSRlItNDgxNDYzMDgxMDAwMzYxNTAzBgNVBAMMLENlcnRpZ25hIFNlcnZlciBBdXRoZW50aWNhdGlvbiBBQ01FIEZSIENBIEcy",
+      "whitelist": false,
+      "attachment": {
+        "hash": "47f464e31a2f05a550e83d8045d8570fcf9f57caeb7722436101c8940e879ca3",
+        "size": 2467,
+        "filename": "ULy4kAY07boZvLRDouxffHNVcsGHGQFCnEuCkq-cMCQ=.pem",
+        "location": "security-state-staging/intermediates/c4de029c-0d39-43ba-881d-1f1bdac8eff3.pem",
+        "mimetype": "application/x-pem-file"
+      },
+      "pubKeyHash": "ULy4kAY07boZvLRDouxffHNVcsGHGQFCnEuCkq+cMCQ=",
+      "crlite_enrolled": false,
+      "id": "7d46e740-ae39-4f00-87ee-9a6e358e481d",
+      "last_modified": 1711724223131
+    },
+    {
+      "schema": 1711724029289,
+      "derHash": "yh/1TgMRhvkAa7FI+M5qU/BXQqS2zo/+ed/SrkceuqU=",
+      "subject": "CN=Certigna Server Authentication ACME FR CA G1,O=Certigna,C=FR",
+      "subjectDN": "MHYxCzAJBgNVBAYTAkZSMREwDwYDVQQKDAhDZXJ0aWduYTEdMBsGA1UEYQwUTlRSRlItNDgxNDYzMDgxMDAwMzYxNTAzBgNVBAMMLENlcnRpZ25hIFNlcnZlciBBdXRoZW50aWNhdGlvbiBBQ01FIEZSIENBIEcx",
+      "whitelist": false,
+      "attachment": {
+        "hash": "661792dc63ededccb7dc2dfcd2918e5d8236c2dedcce5f8da637be0e28481a61",
+        "size": 2052,
+        "filename": "OQzKIkNRq8kQgHkelHOGFIGYVop2_zdqAGChunarhRQ=.pem",
+        "location": "security-state-staging/intermediates/728c8635-f40a-4594-87cd-5740ebcc5aab.pem",
+        "mimetype": "application/x-pem-file"
+      },
+      "pubKeyHash": "OQzKIkNRq8kQgHkelHOGFIGYVop2/zdqAGChunarhRQ=",
+      "crlite_enrolled": false,
+      "id": "f14d65ec-1130-46a3-b84f-246c756cb63b",
+      "last_modified": 1711724223128
+    },
+    {
+      "schema": 1711724028964,
+      "derHash": "scjkcMofSIXd3uD+gLgF8sqCN3DsYHHBzOt39woPtsI=",
+      "subject": "CN=Certigna Server Authentication ACME CA G1,O=Certigna,C=FR",
+      "subjectDN": "MHMxCzAJBgNVBAYTAkZSMREwDwYDVQQKDAhDZXJ0aWduYTEdMBsGA1UEYQwUTlRSRlItNDgxNDYzMDgxMDAwMzYxMjAwBgNVBAMMKUNlcnRpZ25hIFNlcnZlciBBdXRoZW50aWNhdGlvbiBBQ01FIENBIEcx",
+      "whitelist": false,
+      "attachment": {
+        "hash": "6808866c9da6c164a23ade7632d0cce4a43b5740def835d4020636b892aa342f",
+        "size": 2048,
+        "filename": "rvK65wj_zEVuddzfsGOjD135Wh2MILoAbXu7kKxNwoM=.pem",
+        "location": "security-state-staging/intermediates/e4364543-7c84-43b9-a09d-e59d2930b628.pem",
+        "mimetype": "application/x-pem-file"
+      },
+      "pubKeyHash": "rvK65wj/zEVuddzfsGOjD135Wh2MILoAbXu7kKxNwoM=",
+      "crlite_enrolled": false,
+      "id": "8046050c-57cc-44c2-8341-e1801f5dde99",
+      "last_modified": 1711724223126
+    },
+    {
+      "schema": 1711724028612,
+      "derHash": "YP0d8Xerjt6HRy6OcoMH9W7EGmDMrXlMT9ttHLfUDVY=",
+      "subject": "CN=Certigna Server Authentication ACME CA G2,O=Certigna,C=FR",
+      "subjectDN": "MHMxCzAJBgNVBAYTAkZSMREwDwYDVQQKDAhDZXJ0aWduYTEdMBsGA1UEYQwUTlRSRlItNDgxNDYzMDgxMDAwMzYxMjAwBgNVBAMMKUNlcnRpZ25hIFNlcnZlciBBdXRoZW50aWNhdGlvbiBBQ01FIENBIEcy",
+      "whitelist": false,
+      "attachment": {
+        "hash": "eac6be7c8bce492dda5b1ff24dea8088d2aacfea367f4d96fd3900d742aebb65",
+        "size": 2463,
+        "filename": "RKrRuFywubwqUKSLQ4_OujB1TYcPLRKs1GDCg351ako=.pem",
+        "location": "security-state-staging/intermediates/05a73290-0d3d-49c1-840a-22d2de8c1fb6.pem",
+        "mimetype": "application/x-pem-file"
+      },
+      "pubKeyHash": "RKrRuFywubwqUKSLQ4/OujB1TYcPLRKs1GDCg351ako=",
+      "crlite_enrolled": false,
+      "id": "2269c12e-3b8e-4700-a4d5-42525a948a50",
+      "last_modified": 1711724223123
+    },
+    {
+      "schema": 1711464837732,
+      "derHash": "8H04OCfiZDJsXQ2+JXqoIQhAnyUkb4HuNsivIitaHkM=",
+      "subject": "CN=Telia RSA OV CA v4,O=Telia Company AB,C=SE",
+      "subjectDN": "MEUxCzAJBgNVBAYTAlNFMRkwFwYDVQQKDBBUZWxpYSBDb21wYW55IEFCMRswGQYDVQQDDBJUZWxpYSBSU0EgT1YgQ0EgdjQ=",
+      "whitelist": false,
+      "attachment": {
+        "hash": "8a8a355227c0c3345470ef0bfb850234b21b1dd60470e4dcf566cfdff0e502f8",
+        "size": 2300,
+        "filename": "uNTFkYMpAkhXFadzPws2J6iLVX44ue38H6LKC6alh3A=.pem",
+        "location": "security-state-staging/intermediates/74ec359d-1abe-4c34-9800-83d22cf1824f.pem",
+        "mimetype": "application/x-pem-file"
+      },
+      "pubKeyHash": "uNTFkYMpAkhXFadzPws2J6iLVX44ue38H6LKC6alh3A=",
+      "crlite_enrolled": false,
+      "id": "2b785473-c7ec-4117-be0b-1f5cbe2c9bca",
+      "last_modified": 1711465023926
+    },
+    {
+      "schema": 1711464836863,
+      "derHash": "pn8+Z8sd8urPOkBOr/F5N05eP0ug2C6RQF2urfsPM30=",
+      "subject": "CN=Telia RSA DV CA v4,O=Telia Company AB,C=SE",
+      "subjectDN": "MEUxCzAJBgNVBAYTAlNFMRkwFwYDVQQKDBBUZWxpYSBDb21wYW55IEFCMRswGQYDVQQDDBJUZWxpYSBSU0EgRFYgQ0EgdjQ=",
+      "whitelist": false,
+      "attachment": {
+        "hash": "dd2acaf8dd832742c4ce4c63de0d80621f24a60707462a487a496d4fd1271456",
+        "size": 2300,
+        "filename": "pbnDROwxL9imiYDtQcKHL4D07MvFyHJGsfaj_hTH-uw=.pem",
+        "location": "security-state-staging/intermediates/7acb6902-fa54-421e-9b3f-bbb075b0e656.pem",
+        "mimetype": "application/x-pem-file"
+      },
+      "pubKeyHash": "pbnDROwxL9imiYDtQcKHL4D07MvFyHJGsfaj/hTH+uw=",
+      "crlite_enrolled": false,
+      "id": "7e90cfb9-3e37-47af-898a-e5d61b99b444",
+      "last_modified": 1711465023924
+    },
+    {
+      "schema": 1711464837319,
+      "derHash": "JtdCdBukKDlPkE5EEO1tqS9NDFVSHx7eKyl5f4ZslVw=",
+      "subject": "CN=Telia EC DV CA v4,O=Telia Company AB,C=SE",
+      "subjectDN": "MEQxCzAJBgNVBAYTAlNFMRkwFwYDVQQKDBBUZWxpYSBDb21wYW55IEFCMRowGAYDVQQDDBFUZWxpYSBFQyBEViBDQSB2NA==",
+      "whitelist": false,
+      "attachment": {
+        "hash": "c085e851d30509db40952fc9f84105396c73546c29ad715cda6452e1c7e04e1d",
+        "size": 1150,
+        "filename": "NeN7Ibyh_EFluoZE27OfNSDLpVsqzCOtSIe0YDz2GSA=.pem",
+        "location": "security-state-staging/intermediates/81c10429-00de-407d-a5c2-78f8d1a46d0d.pem",
+        "mimetype": "application/x-pem-file"
+      },
+      "pubKeyHash": "NeN7Ibyh/EFluoZE27OfNSDLpVsqzCOtSIe0YDz2GSA=",
+      "crlite_enrolled": false,
+      "id": "ccbb9d09-e78a-42eb-84e3-ec36872e58a4",
+      "last_modified": 1711465023921
+    },
+    {
+      "schema": 1711079327797,
+      "derHash": "GnD+GCdR5jfA5dPVU+db26HWVf/lQR2bOQtzyDePpyw=",
+      "subject": "CN=Leocert TLS Issuing RSA CA 1,O=Leocert LLC,C=US",
+      "subjectDN": "MEoxCzAJBgNVBAYTAlVTMRQwEgYDVQQKDAtMZW9jZXJ0IExMQzElMCMGA1UEAwwcTGVvY2VydCBUTFMgSXNzdWluZyBSU0EgQ0EgMQ==",
+      "whitelist": false,
+      "attachment": {
+        "hash": "909b2e8999e89c9ba6a76900402d0f011877b2cac32792910aa1f10c33ab823b",
+        "size": 2064,
+        "filename": "TLG3k1viplwCa4FIN66yKHXwUwpjuk-zYaXHlJKI1mY=.pem",
+        "location": "security-state-staging/intermediates/eafb2b1c-e818-4c8e-914b-86ac8c5d7235.pem",
+        "mimetype": "application/x-pem-file"
+      },
+      "pubKeyHash": "TLG3k1viplwCa4FIN66yKHXwUwpjuk+zYaXHlJKI1mY=",
+      "crlite_enrolled": false,
+      "id": "b1c85617-4d30-44d3-ab20-4d5ea7d6ac51",
+      "last_modified": 1711079823132
+    },
+    {
+      "schema": 1711079328231,
+      "derHash": "eQidoGeOCFCA5Y1UxGKzE+94QWqHJPrOfRqJN0OOAMc=",
+      "subject": "CN=Leocert TLS Issuing ECC CA 1,O=Leocert LLC,C=US",
+      "subjectDN": "MEoxCzAJBgNVBAYTAlVTMRQwEgYDVQQKDAtMZW9jZXJ0IExMQzElMCMGA1UEAwwcTGVvY2VydCBUTFMgSXNzdWluZyBFQ0MgQ0EgMQ==",
+      "whitelist": false,
+      "attachment": {
+        "hash": "3c2391cb93c7441025a1e056e161c4d31acb51039c0f8720ee0598ebe26e35d6",
+        "size": 1089,
+        "filename": "VCKMSEPlE_Wm1yh1cVkPT9qFW95J646OM9DdihnTErc=.pem",
+        "location": "security-state-staging/intermediates/7d525c97-e82d-4f3a-be44-21c246617a24.pem",
+        "mimetype": "application/x-pem-file"
+      },
+      "pubKeyHash": "VCKMSEPlE/Wm1yh1cVkPT9qFW95J646OM9DdihnTErc=",
+      "crlite_enrolled": false,
+      "id": "2945ac79-f854-4685-a0ec-f140cdf5e8c7",
+      "last_modified": 1711079823129
+    },
+    {
+      "schema": 1710946446035,
+      "derHash": "8DZVz+hbOj8q8v03yrnqKDs6KKm2FX/pvrdcF8BhGzo=",
+      "subject": "CN=Keysec GR3 DV TLS CA 2024,O=KEYSEC LTDA,C=BR",
+      "subjectDN": "MEcxCzAJBgNVBAYTAkJSMRQwEgYDVQQKEwtLRVlTRUMgTFREQTEiMCAGA1UEAxMZS2V5c2VjIEdSMyBEViBUTFMgQ0EgMjAyNA==",
+      "whitelist": false,
+      "attachment": {
+        "hash": "fe495e9179292f67d50ca37e6347b3171d4a7cc6716d0ce1b782e000cedf5097",
+        "size": 1618,
+        "filename": "re4iHDQVFeEgZFfakl2IhF85P-DgLTbzfOV36u4F3FU=.pem",
+        "location": "security-state-staging/intermediates/3df9d148-6d1d-494e-8f77-d641a7d78124.pem",
+        "mimetype": "application/x-pem-file"
+      },
+      "pubKeyHash": "re4iHDQVFeEgZFfakl2IhF85P+DgLTbzfOV36u4F3FU=",
+      "crlite_enrolled": false,
+      "id": "244051c7-07f4-4e57-9854-ab624aa55021",
+      "last_modified": 1710946623378
+    },
+    {
+      "schema": 1710946445643,
+      "derHash": "kXPvrqTmGFXrhY0QfbqUoc0YyuAOr5x+21cgGtmam/0=",
+      "subject": "CN=Keysec GR3 EV TLS CA 2024,O=KEYSEC LTDA,C=BR",
+      "subjectDN": "MEcxCzAJBgNVBAYTAkJSMRQwEgYDVQQKEwtLRVlTRUMgTFREQTEiMCAGA1UEAxMZS2V5c2VjIEdSMyBFViBUTFMgQ0EgMjAyNA==",
+      "whitelist": false,
+      "attachment": {
+        "hash": "9c2fd810de290c9602eaf84292356ccc60b5b9a86a64a6735918a60ce80152ad",
+        "size": 1634,
+        "filename": "5zd2ZxybEEZSlXlhcynmpWBuSSlSNb-L2hyf1iH-WVU=.pem",
+        "location": "security-state-staging/intermediates/09a3003d-6573-4bc0-8ed5-501a2960b9bb.pem",
+        "mimetype": "application/x-pem-file"
+      },
+      "pubKeyHash": "5zd2ZxybEEZSlXlhcynmpWBuSSlSNb+L2hyf1iH+WVU=",
+      "crlite_enrolled": false,
+      "id": "361e1616-6414-4ae8-afca-b6e6a3ab544b",
+      "last_modified": 1710946623375
+    },
+    {
+      "schema": 1710946446503,
+      "derHash": "iv2h7XO/N13G4Jfbhxu/5M62jmE4HDm99qRXbcFxv7I=",
+      "subject": "CN=Keysec GR3 OV TLS CA 2024,O=KEYSEC LTDA,C=BR",
+      "subjectDN": "MEcxCzAJBgNVBAYTAkJSMRQwEgYDVQQKEwtLRVlTRUMgTFREQTEiMCAGA1UEAxMZS2V5c2VjIEdSMyBPViBUTFMgQ0EgMjAyNA==",
+      "whitelist": false,
+      "attachment": {
+        "hash": "5f922fcec6e5bdeeb7c72bf6cb4d7cb9712affcd3ca7b2edf439390a7bdceee1",
+        "size": 1618,
+        "filename": "ffyswDTRpdykWIYlQPDpRA5VFTJ6omaHxk5W69jO8JA=.pem",
+        "location": "security-state-staging/intermediates/59adb38b-7ec7-4ac1-afd9-e42cd392cf81.pem",
+        "mimetype": "application/x-pem-file"
+      },
+      "pubKeyHash": "ffyswDTRpdykWIYlQPDpRA5VFTJ6omaHxk5W69jO8JA=",
+      "crlite_enrolled": false,
+      "id": "662042eb-44f1-427f-b3a4-46109e55908c",
+      "last_modified": 1710946623372
+    },
+    {
+      "schema": 1710795242451,
+      "derHash": "la3INQ6EjZEg93vn1fpYdQhVO2Ua2jpCo/DIrck2PdI=",
+      "subject": "CN=MarketWare RSA Extended Validation Secure Server CA 3,O=MarketWare - Soluções para Mercados Digitais\\, Lda.,C=PT",
+      "subjectDN": "MIGMMQswCQYDVQQGEwJQVDE9MDsGA1UECgw0TWFya2V0V2FyZSAtIFNvbHXDp8O1ZXMgcGFyYSBNZXJjYWRvcyBEaWdpdGFpcywgTGRhLjE+MDwGA1UEAxM1TWFya2V0V2FyZSBSU0EgRXh0ZW5kZWQgVmFsaWRhdGlvbiBTZWN1cmUgU2VydmVyIENBIDM=",
+      "whitelist": false,
+      "attachment": {
+        "hash": "2d24d3da735acff32c0c688d7156d6772dc4cddd374c7ed9401fc73faba750de",
+        "size": 2292,
+        "filename": "Es9zrpvheH6jWlnnG5GZKf4OGJttFUqxTOsCFLZlhko=.pem",
+        "location": "security-state-staging/intermediates/b9bcb2bc-23b6-4d66-afda-8f70b1181a4c.pem",
+        "mimetype": "application/x-pem-file"
+      },
+      "pubKeyHash": "Es9zrpvheH6jWlnnG5GZKf4OGJttFUqxTOsCFLZlhko=",
+      "crlite_enrolled": false,
+      "id": "314cdc34-8ab8-4717-ad45-fa803357b3c6",
+      "last_modified": 1710795423423
+    },
+    {
+      "schema": 1710795242856,
+      "derHash": "yJWZUIAJLkaFrm1OHvp8QZExroD9yuH8qD2i+PmVEjY=",
+      "subject": "CN=K Software RSA Domain Validation Secure Server CA 3,O=K Software LLC,C=US",
+      "subjectDN": "MGQxCzAJBgNVBAYTAlVTMRcwFQYDVQQKEw5LIFNvZnR3YXJlIExMQzE8MDoGA1UEAxMzSyBTb2Z0d2FyZSBSU0EgRG9tYWluIFZhbGlkYXRpb24gU2VjdXJlIFNlcnZlciBDQSAz",
+      "whitelist": false,
+      "attachment": {
+        "hash": "0069cb355fa82da3d0bbdf596110250a0d5e89b460a37831381349ecb5dcbc79",
+        "size": 2239,
+        "filename": "d7RXpz4TO5w7He2jqcJhDOe93JbF318mPnR2dLjAU3Q=.pem",
+        "location": "security-state-staging/intermediates/57b04cf4-27ff-42a9-8b4f-839f2b0f2eae.pem",
+        "mimetype": "application/x-pem-file"
+      },
+      "pubKeyHash": "d7RXpz4TO5w7He2jqcJhDOe93JbF318mPnR2dLjAU3Q=",
+      "crlite_enrolled": false,
+      "id": "7800aa03-e9e9-4949-a479-ca6be3172496",
+      "last_modified": 1710795423420
+    },
+    {
+      "schema": 1710795243216,
+      "derHash": "N53ZNUfsvhz2f32UrS/D3GLPFuZ31xITVl0KyZJ+5V4=",
+      "subject": "CN=MarketWare RSA Domain Validation Secure Server CA 3,O=MarketWare - Soluções para Mercados Digitais\\, Lda.,C=PT",
+      "subjectDN": "MIGKMQswCQYDVQQGEwJQVDE9MDsGA1UECgw0TWFya2V0V2FyZSAtIFNvbHXDp8O1ZXMgcGFyYSBNZXJjYWRvcyBEaWdpdGFpcywgTGRhLjE8MDoGA1UEAxMzTWFya2V0V2FyZSBSU0EgRG9tYWluIFZhbGlkYXRpb24gU2VjdXJlIFNlcnZlciBDQSAz",
+      "whitelist": false,
+      "attachment": {
+        "hash": "20ff6348a25369a532d720e964d6d0705902f3aba8e88dc10132304da34f25ba",
+        "size": 2292,
+        "filename": "cPk3iWChPK4OBkAMXZkVl0nHVot2WEoaEc4JShoOgXk=.pem",
+        "location": "security-state-staging/intermediates/fd4cdd62-8c22-4f42-b396-b7eb3ca60553.pem",
+        "mimetype": "application/x-pem-file"
+      },
+      "pubKeyHash": "cPk3iWChPK4OBkAMXZkVl0nHVot2WEoaEc4JShoOgXk=",
+      "crlite_enrolled": false,
+      "id": "1ff8e545-a74d-4ec5-b7a2-f3fbaf355c06",
+      "last_modified": 1710795423416
+    },
+    {
+      "schema": 1710557651981,
+      "derHash": "54jRSwQ2tRILvuPxXBW63wjBQH/nJWik8W+RUcOA4eM=",
+      "subject": "CN=E5,O=Let's Encrypt,C=US",
+      "subjectDN": "MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQDEwJFNQ==",
+      "whitelist": false,
+      "attachment": {
+        "hash": "badc62e1392ffc5e5df2409ec05a71b1334be3bb5a0a5d42b3c1cdb7d4834386",
+        "size": 996,
+        "filename": "NYbU7PBwV4y9J67c4guWTki8FJ-uudrXL0a4V4aRcrg=.pem",
+        "location": "security-state-staging/intermediates/f46b0b36-6ce3-41a8-8c05-6fe451f74273.pem",
+        "mimetype": "application/x-pem-file"
+      },
+      "pubKeyHash": "NYbU7PBwV4y9J67c4guWTki8FJ+uudrXL0a4V4aRcrg=",
+      "crlite_enrolled": false,
+      "id": "57a05de3-2ab5-463d-b51a-a451c946031a",
+      "last_modified": 1710557823264
+    },
+    {
+      "schema": 1710557651622,
+      "derHash": "g2JP0zjI2bAjwYpny3qcBRnaQ9EXdbTGy9rUXD2ZfFI=",
+      "subject": "CN=E8,O=Let's Encrypt,C=US",
+      "subjectDN": "MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQDEwJFOA==",
+      "whitelist": false,
+      "attachment": {
+        "hash": "55a1393645174b530ee0bc29e53a01df5802e864e568402988f0a4b03b25063a",
+        "size": 1565,
+        "filename": "iFvwVyJSxnQdyaUvUERIf-8qk7gRze3612JMwoO3zdU=.pem",
+        "location": "security-state-staging/intermediates/08e1a7b8-7f72-4887-bcff-e14095cb1921.pem",
+        "mimetype": "application/x-pem-file"
+      },
+      "pubKeyHash": "iFvwVyJSxnQdyaUvUERIf+8qk7gRze3612JMwoO3zdU=",
+      "crlite_enrolled": false,
+      "id": "126f7654-6ee4-4022-bba6-595372f9e7e9",
+      "last_modified": 1710557823261
+    },
+    {
+      "schema": 1710557650551,
+      "derHash": "Xf2zzzGybyPYfAnzoM72QvZAaan7fP4pJwu13A8eFrs=",
+      "subject": "CN=E5,O=Let's Encrypt,C=US",
+      "subjectDN": "MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQDEwJFNQ==",
+      "whitelist": false,
+      "attachment": {
+        "hash": "9b0bc663a1b51bce1c95a42b86e234cd0f9d724eff86544bc703307ca8192cab",
+        "size": 1565,
+        "filename": "NYbU7PBwV4y9J67c4guWTki8FJ-uudrXL0a4V4aRcrg=.pem",
+        "location": "security-state-staging/intermediates/abe14e76-5c32-4ec0-8b94-c1a2ab5451fe.pem",
+        "mimetype": "application/x-pem-file"
+      },
+      "pubKeyHash": "NYbU7PBwV4y9J67c4guWTki8FJ+uudrXL0a4V4aRcrg=",
+      "crlite_enrolled": false,
+      "id": "28e14e4f-c8a2-45e2-afe1-1c62a1afe3c1",
+      "last_modified": 1710557823258
+    },
+    {
+      "schema": 1710557652358,
+      "derHash": "QYXfl4BsK6dvHXmCPxEv+mOaSczcmQkIECBnq2QSuIY=",
+      "subject": "CN=E9,O=Let's Encrypt,C=US",
+      "subjectDN": "MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQDEwJFOQ==",
+      "whitelist": false,
+      "attachment": {
+        "hash": "dd0e77f937de5f95d9b2bc38a9508960d8ca86838ef36c489bc9a7c9e5c94492",
+        "size": 996,
+        "filename": "8UQKm3bh5B5TpMtGEym_Yze0GXJr5RPkLhnxxpHF1LI=.pem",
+        "location": "security-state-staging/intermediates/c9f44b8b-4670-440c-9987-bcee06fda84a.pem",
+        "mimetype": "application/x-pem-file"
+      },
+      "pubKeyHash": "8UQKm3bh5B5TpMtGEym/Yze0GXJr5RPkLhnxxpHF1LI=",
+      "crlite_enrolled": false,
+      "id": "04914e40-9ad6-4efe-96f9-6858e21f0bc4",
+      "last_modified": 1710557823255
+    },
+    {
+      "schema": 1710557649379,
+      "derHash": "duniiKr8Djf0OQy/lGqtmX1cHJAbPOUT09j626viq4U=",
+      "subject": "CN=E6,O=Let's Encrypt,C=US",
+      "subjectDN": "MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQDEwJFNg==",
+      "whitelist": false,
+      "attachment": {
+        "hash": "3ebd77749d7810d81e7b5330f2432d81311cb84798964a819ae7098326312cfb",
+        "size": 1565,
+        "filename": "0Bbh_jEZSKymTy3kTOhsmlHKBB32EDu1KojrP3YfV9c=.pem",
+        "location": "security-state-staging/intermediates/724bdee9-0f01-4959-858a-d38b832f352f.pem",
+        "mimetype": "application/x-pem-file"
+      },
+      "pubKeyHash": "0Bbh/jEZSKymTy3kTOhsmlHKBB32EDu1KojrP3YfV9c=",
+      "crlite_enrolled": false,
+      "id": "3ee6f34f-6f4d-4fa3-a105-c1403c0d5d87",
+      "last_modified": 1710557823252
+    },
+    {
+      "schema": 1710557651259,
+      "derHash": "VHFUICJMW2W+7QGNw5QNczjFd+Mi1UiPYz2Mao/tYbI=",
+      "subject": "CN=E7,O=Let's Encrypt,C=US",
+      "subjectDN": "MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQDEwJFNw==",
+      "whitelist": false,
+      "attachment": {
+        "hash": "454fbabf72a59356f1d08e89a1c7f7b2c839b88d77a5215be7f2f126d408586e",
+        "size": 1000,
+        "filename": "y7xVm0TVJNahMr2sZydE2jQH8SquXV9yLF9seROHHHU=.pem",
+        "location": "security-state-staging/intermediates/a90ebad7-4e4e-48af-ad7e-0f916a648c2f.pem",
+        "mimetype": "application/x-pem-file"
+      },
+      "pubKeyHash": "y7xVm0TVJNahMr2sZydE2jQH8SquXV9yLF9seROHHHU=",
+      "crlite_enrolled": false,
+      "id": "9f201f58-e8b8-4590-8c7d-b355adddf50d",
+      "last_modified": 1710557823250
+    },
+    {
+      "schema": 1710557649005,
+      "derHash": "Blq30qBQ+UdYcSF2XY0HDA4TMNV5j6pCwgcnSe0pN2I=",
+      "subject": "CN=E6,O=Let's Encrypt,C=US",
+      "subjectDN": "MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQDEwJFNg==",
+      "whitelist": false,
+      "attachment": {
+        "hash": "be5ca6ac557668f57ea85588340ee76ac3a237a359f221406e815dc5665bd3b7",
+        "size": 1000,
+        "filename": "0Bbh_jEZSKymTy3kTOhsmlHKBB32EDu1KojrP3YfV9c=.pem",
+        "location": "security-state-staging/intermediates/3c307724-fa1f-46be-b729-f131ae30d8cd.pem",
+        "mimetype": "application/x-pem-file"
+      },
+      "pubKeyHash": "0Bbh/jEZSKymTy3kTOhsmlHKBB32EDu1KojrP3YfV9c=",
+      "crlite_enrolled": false,
+      "id": "c34d8f1d-8cbe-47a7-ba7e-7e317b07f27a",
+      "last_modified": 1710557823247
+    },
+    {
+      "schema": 1710557652725,
+      "derHash": "rBJ0VCJn8XtSVTW1Vjv3Mf67GCUztGqC3Iactk61KMA=",
+      "subject": "CN=E8,O=Let's Encrypt,C=US",
+      "subjectDN": "MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQDEwJFOA==",
+      "whitelist": false,
+      "attachment": {
+        "hash": "8c5710eda1b3c27dd74d73141a1a8fe0323f4a45533aac37d07398d1fe1ba809",
+        "size": 1000,
+        "filename": "iFvwVyJSxnQdyaUvUERIf-8qk7gRze3612JMwoO3zdU=.pem",
+        "location": "security-state-staging/intermediates/3654e458-bec6-4580-8663-7d02c432873e.pem",
+        "mimetype": "application/x-pem-file"
+      },
+      "pubKeyHash": "iFvwVyJSxnQdyaUvUERIf+8qk7gRze3612JMwoO3zdU=",
+      "crlite_enrolled": false,
+      "id": "6cbf3471-29d3-4c71-a08c-172017a3cbaf",
+      "last_modified": 1710557823244
+    },
+    {
+      "schema": 1710557648653,
+      "derHash": "nXw/GqatKy7A1c8eJG+NmubLyf0HVa03u5dLHy+2A/M=",
+      "subject": "CN=R10,O=Let's Encrypt,C=US",
+      "subjectDN": "MDMxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQwwCgYDVQQDEwNSMTA=",
+      "whitelist": false,
+      "attachment": {
+        "hash": "c81d1bd2445e83c128c7d552399b6488c0aa07373b79cf7e6ff4bcf9fbf6ada4",
+        "size": 1800,
+        "filename": "K7rZOrXHknnsEhUH8nLL4MZkejquUuIvOIr6tCa0rbo=.pem",
+        "location": "security-state-staging/intermediates/9f6c1f8c-f285-4901-982b-1b77f1fecfbf.pem",
+        "mimetype": "application/x-pem-file"
+      },
+      "pubKeyHash": "K7rZOrXHknnsEhUH8nLL4MZkejquUuIvOIr6tCa0rbo=",
+      "crlite_enrolled": false,
+      "id": "3911db43-1240-493b-8579-eb57a02d958f",
+      "last_modified": 1710557823241
+    },
+    {
+      "schema": 1710557647945,
+      "derHash": "MpUgMLlH2AhYqHQleIUYvfbZSmMdVeIBF1hcieuykZc=",
+      "subject": "CN=Tesla Public RSA TLS Issuing CA 2024,O=Tesla\\, Inc.,C=US",
+      "subjectDN": "MFIxCzAJBgNVBAYTAlVTMRQwEgYDVQQKEwtUZXNsYSwgSW5jLjEtMCsGA1UEAxMkVGVzbGEgUHVibGljIFJTQSBUTFMgSXNzdWluZyBDQSAyMDI0",
+      "whitelist": false,
+      "attachment": {
+        "hash": "a9031e9af0574759f114729defe476ad7f5029c11c6848bef2cc5a21cac69f5d",
+        "size": 2324,
+        "filename": "9P49cufpvzdZXLi1rCWs-JDJ-OYFAqYkiOGdsQ8Y9EM=.pem",
+        "location": "security-state-staging/intermediates/d2e210e5-05e2-4c69-bfdf-ef3f59e3cd70.pem",
+        "mimetype": "application/x-pem-file"
+      },
+      "pubKeyHash": "9P49cufpvzdZXLi1rCWs+JDJ+OYFAqYkiOGdsQ8Y9EM=",
+      "crlite_enrolled": false,
+      "id": "7805c87e-4397-4d4d-abea-8e4b832c2944",
+      "last_modified": 1710557823239
+    },
+    {
+      "schema": 1710557648300,
+      "derHash": "d1TKt8Ja0mBaaB46BBh8Hjs6RvGIqCR9yG4CoPwzb5E=",
+      "subject": "CN=Tesla China Public RSA TLS Issuing CA 2024,O=Tesla\\, Inc.,C=US",
+      "subjectDN": "MFgxCzAJBgNVBAYTAlVTMRQwEgYDVQQKEwtUZXNsYSwgSW5jLjEzMDEGA1UEAxMqVGVzbGEgQ2hpbmEgUHVibGljIFJTQSBUTFMgSXNzdWluZyBDQSAyMDI0",
+      "whitelist": false,
+      "attachment": {
+        "hash": "1ebc266e5393c8914867037b06e2f36582ae5ba4d30caac2627367872a217b92",
+        "size": 2328,
+        "filename": "OTunEZ8hph3f2IjPSz6uBOtO1dr9gSAT6QkdsRjLvIc=.pem",
+        "location": "security-state-staging/intermediates/fdf0eed3-116e-4072-84ba-a4db196264d2.pem",
+        "mimetype": "application/x-pem-file"
+      },
+      "pubKeyHash": "OTunEZ8hph3f2IjPSz6uBOtO1dr9gSAT6QkdsRjLvIc=",
+      "crlite_enrolled": false,
+      "id": "38d93572-6ab8-45ba-885a-08ffb780251e",
+      "last_modified": 1710557823236
+    },
+    {
+      "schema": 1710557647597,
+      "derHash": "WR6c5shj06B56fq+FHjHM5omshJp3eeVIRNhAkrjGkQ=",
+      "subject": "CN=R11,O=Let's Encrypt,C=US",
+      "subjectDN": "MDMxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQwwCgYDVQQDEwNSMTE=",
+      "whitelist": false,
+      "attachment": {
+        "hash": "4015249779032694e5dd8f5c9dd09836a0d664d07ad96267ab63effc1b4df6e1",
+        "size": 1800,
+        "filename": "bdrBhpj38ffhxpubzkINl0rG-UyossdhcBYj-Zx2fcc=.pem",
+        "location": "security-state-staging/intermediates/9b0f44f1-8d97-453b-812d-f86c94550ee8.pem",
+        "mimetype": "application/x-pem-file"
+      },
+      "pubKeyHash": "bdrBhpj38ffhxpubzkINl0rG+UyossdhcBYj+Zx2fcc=",
+      "crlite_enrolled": false,
+      "id": "167f2ab2-d72b-467d-a4ae-5a77eb903142",
+      "last_modified": 1710557823233
+    },
+    {
+      "schema": 1710557646962,
+      "derHash": "rrH9dBDoO8lvXaPGp8LBu4NtH6XLhucIUViQ5Ciodws=",
+      "subject": "CN=E7,O=Let's Encrypt,C=US",
+      "subjectDN": "MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQDEwJFNw==",
+      "whitelist": false,
+      "attachment": {
+        "hash": "a3e3761ac2290e44f21dd83a3dee7616beb0fae40a86b7614df5aff5cfe0fbe2",
+        "size": 1565,
+        "filename": "y7xVm0TVJNahMr2sZydE2jQH8SquXV9yLF9seROHHHU=.pem",
+        "location": "security-state-staging/intermediates/d709b849-5593-4c34-8c01-6c2667055f27.pem",
+        "mimetype": "application/x-pem-file"
+      },
+      "pubKeyHash": "y7xVm0TVJNahMr2sZydE2jQH8SquXV9yLF9seROHHHU=",
+      "crlite_enrolled": false,
+      "id": "5ec48a39-b128-4c18-ac18-78717882cf7a",
+      "last_modified": 1710557823230
+    },
+    {
+      "schema": 1710557650889,
+      "derHash": "07EoIWqEP47xMhUB9d9Spd9Sk57iwZKXcSzT3k1Bk1Q=",
+      "subject": "CN=R13,O=Let's Encrypt,C=US",
+      "subjectDN": "MDMxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQwwCgYDVQQDEwNSMTM=",
+      "whitelist": false,
+      "attachment": {
+        "hash": "8efd63a1350e6eced60418673bc51aa42d82242a553e6bddee30765207732a84",
+        "size": 1800,
+        "filename": "AlSQhgtJirc8ahLyekmtX-Iw-v46yPYRLJt9Cq1GlB0=.pem",
+        "location": "security-state-staging/intermediates/00e94c9e-039c-4ac0-afb5-95fb4af9247a.pem",
+        "mimetype": "application/x-pem-file"
+      },
+      "pubKeyHash": "AlSQhgtJirc8ahLyekmtX+Iw+v46yPYRLJt9Cq1GlB0=",
+      "crlite_enrolled": false,
+      "id": "740850ff-e7cb-484e-a7a5-fa7b77642099",
+      "last_modified": 1710557823228
+    },
+    {
+      "schema": 1710557653101,
+      "derHash": "Ex/Od4QBaJmloAIDqe/IDxjrvXVYBxftwVU1gJMINuw=",
+      "subject": "CN=R12,O=Let's Encrypt,C=US",
+      "subjectDN": "MDMxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQwwCgYDVQQDEwNSMTI=",
+      "whitelist": false,
+      "attachment": {
+        "hash": "f5c1e03c9d4d299af1ec42ade782748f4cab780f708979e1f6be00a18f420591",
+        "size": 1800,
+        "filename": "kZwN96eHtZftBWrOZUsd6cA4es80n3NzSk_XtYz2EqQ=.pem",
+        "location": "security-state-staging/intermediates/b27616f6-d705-4101-99c7-225fc36c5276.pem",
+        "mimetype": "application/x-pem-file"
+      },
+      "pubKeyHash": "kZwN96eHtZftBWrOZUsd6cA4es80n3NzSk/XtYz2EqQ=",
+      "crlite_enrolled": false,
+      "id": "1224b785-8a96-4bdc-bd99-cf9cf1a91fe8",
+      "last_modified": 1710557823225
+    },
+    {
+      "schema": 1710557650106,
+      "derHash": "/eiPLU+JE9PcFmTV+N5R4H/iq/7ZO0WsrVopv+uqI/s=",
+      "subject": "CN=E9,O=Let's Encrypt,C=US",
+      "subjectDN": "MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQDEwJFOQ==",
+      "whitelist": false,
+      "attachment": {
+        "hash": "e174bd7700981b8496d947ddfeaae0d4c5386d116f6c55cf4d678bc56e54f8a8",
+        "size": 1565,
+        "filename": "8UQKm3bh5B5TpMtGEym_Yze0GXJr5RPkLhnxxpHF1LI=.pem",
+        "location": "security-state-staging/intermediates/75c016fa-42c2-4278-9fd8-420ef53ceea1.pem",
+        "mimetype": "application/x-pem-file"
+      },
+      "pubKeyHash": "8UQKm3bh5B5TpMtGEym/Yze0GXJr5RPkLhnxxpHF1LI=",
+      "crlite_enrolled": false,
+      "id": "6e708fe9-bef1-4e04-a62c-b5f2df61674a",
+      "last_modified": 1710557823222
+    },
+    {
+      "schema": 1710557649732,
+      "derHash": "JNRaqbjWBT0oHzhCyMwMbBr3zN/ULdXBL2p0+pMj96I=",
+      "subject": "CN=R14,O=Let's Encrypt,C=US",
+      "subjectDN": "MDMxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQwwCgYDVQQDEwNSMTQ=",
+      "whitelist": false,
+      "attachment": {
+        "hash": "4bf1193ec7761636410d2f274e618ad669f85b537c9c5b1a93f3e84bd76ad96b",
+        "size": 1800,
+        "filename": "8WR6XuPvrFTIkukwWE_keXm3rNHHbBJxvKHFB22GmIg=.pem",
+        "location": "security-state-staging/intermediates/7e6c46a5-df71-419d-ada0-694612e63c1d.pem",
+        "mimetype": "application/x-pem-file"
+      },
+      "pubKeyHash": "8WR6XuPvrFTIkukwWE/keXm3rNHHbBJxvKHFB22GmIg=",
+      "crlite_enrolled": false,
+      "id": "69343a2a-10ab-428d-9412-9a7986910578",
+      "last_modified": 1710557823219
+    },
+    {
       "schema": 1709780043992,
       "derHash": "6CGxESkRBWfxYH8LDzaOx42BFBjwxIzEJUUPY+uICV0=",
       "subject": "CN=Entrust 4K EV TLS Root CA - 2022,O=Entrust\\, Inc.,C=US",
@@ -12331,24 +12961,6 @@
       "last_modified": 1666727870028
     },
     {
-      "schema": 1666727330223,
-      "derHash": "0zqEf2QDd74K4aQpFToH6HyIJ/pIQLUVi83LheEKRTo=",
-      "subject": "CN=VR IDENT EV SSL CA 2020,O=Fiducia & GAD IT AG,C=DE",
-      "subjectDN": "ME0xCzAJBgNVBAYTAkRFMRwwGgYDVQQKDBNGaWR1Y2lhICYgR0FEIElUIEFHMSAwHgYDVQQDDBdWUiBJREVOVCBFViBTU0wgQ0EgMjAyMA==",
-      "whitelist": false,
-      "attachment": {
-        "hash": "a95e7ccf2ef4b020f65fbd061c44e49d966821be27623376e3f16a8a3ebd371f",
-        "size": 2361,
-        "filename": "te09bIALahNazDua57TEibeM7CatIkOAT8t-qu_Kdro=.pem",
-        "location": "security-state-staging/intermediates/e8b0b0a2-f7f0-4893-b9ef-32f493e8a146.pem",
-        "mimetype": "application/x-pem-file"
-      },
-      "pubKeyHash": "te09bIALahNazDua57TEibeM7CatIkOAT8t+qu/Kdro=",
-      "crlite_enrolled": false,
-      "id": "92b7ea6b-c8ed-47fc-bd89-4834ef4a3ad5",
-      "last_modified": 1666727870010
-    },
-    {
       "schema": 1666727401140,
       "derHash": "y2Zmsyv/Lv7cxBh98Umm00pdELcWW5z/KmfA4xGu7tc=",
       "subject": "CN=QuoVadis Europe EV SSL CA G1,O=QuoVadis Trustlink B.V.,C=NL",
@@ -12403,24 +13015,6 @@
       "last_modified": 1666727869969
     },
     {
-      "schema": 1666727372418,
-      "derHash": "NH0Y3Mwu/FGpIOen+7B7+9o1YTaB+C3KXExyuwyDwDU=",
-      "subject": "CN=VR IDENT SSL CA 2020,O=Fiducia & GAD IT AG,C=DE",
-      "subjectDN": "MEoxCzAJBgNVBAYTAkRFMRwwGgYDVQQKDBNGaWR1Y2lhICYgR0FEIElUIEFHMR0wGwYDVQQDDBRWUiBJREVOVCBTU0wgQ0EgMjAyMA==",
-      "whitelist": false,
-      "attachment": {
-        "hash": "4158e246be129509cb8d8eb14b647517fea0196e81a9d593f4b8f64a11a6414f",
-        "size": 2357,
-        "filename": "fQUctsUYoew1aFnAFT0prf-kJmkVNqkPo2jJ5Jm9RaA=.pem",
-        "location": "security-state-staging/intermediates/ada7bb67-cb15-43b5-9c74-259e711941b5.pem",
-        "mimetype": "application/x-pem-file"
-      },
-      "pubKeyHash": "fQUctsUYoew1aFnAFT0prf+kJmkVNqkPo2jJ5Jm9RaA=",
-      "crlite_enrolled": false,
-      "id": "2b1f7c04-dd89-4f96-ad7d-e4e167a9099d",
-      "last_modified": 1666727869953
-    },
-    {
       "schema": 1666727415303,
       "derHash": "n/I8uTh7ngCDvVqhlU7t33kokKqOZ81NON0or0pDmtg=",
       "subject": "CN=AC SERVIDORES SEGUROS TIPO2,OU=Ceres,O=FNMT-RCM,C=ES",
@@ -13141,24 +13735,6 @@
       "last_modified": 1666727869297
     },
     {
-      "schema": 1666727410331,
-      "derHash": "6uWboswzKBpc3exQz7/Z3QylVl8872mMk2ahDOwIf5c=",
-      "subject": "CN=Domain The Net Technologies Ltd CA for SSL R2,O=Domain The Net Technologies Ltd,C=IL",
-      "subjectDN": "MG8xCzAJBgNVBAYTAklMMSgwJgYDVQQKDB9Eb21haW4gVGhlIE5ldCBUZWNobm9sb2dpZXMgTHRkMTYwNAYDVQQDDC1Eb21haW4gVGhlIE5ldCBUZWNobm9sb2dpZXMgTHRkIENBIGZvciBTU0wgUjI=",
-      "whitelist": false,
-      "attachment": {
-        "hash": "74b27e430703697e4e0eb4a4518f35a8e27789b980b29dd2593702248ea4491d",
-        "size": 2483,
-        "filename": "1FBqLyRsP8ibxXXsW64LYWGTeYMGSsUTMFEetUQakD8=.pem",
-        "location": "security-state-staging/intermediates/beb201df-0f86-438c-911c-f798428aa9c4.pem",
-        "mimetype": "application/x-pem-file"
-      },
-      "pubKeyHash": "1FBqLyRsP8ibxXXsW64LYWGTeYMGSsUTMFEetUQakD8=",
-      "crlite_enrolled": false,
-      "id": "ac504f95-1d16-427c-8e82-82da28c34bc6",
-      "last_modified": 1666727869284
-    },
-    {
       "schema": 1666727422380,
       "derHash": "UpmYc6PRKkVx25oWBXap2VGtTkp9oxxcEGE4BekiQyU=",
       "subject": "CN=MuaSSL.com TLS Issuing RSA CA R1,O=Hao Quang Viet Software Company Limited,C=VN",
@@ -20521,24 +21097,6 @@
       "last_modified": 1663786626392
     },
     {
-      "schema": 1663786369285,
-      "derHash": "ysEs67zNJAJpr4hsPF7GRiKIHWdsYl/LfRRNyzVS68c=",
-      "subject": "CN=GlobalSign GCC R3 AlphaSSL CA 2022,O=Globalsign nv-sa,C=BE",
-      "subjectDN": "MFUxCzAJBgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxzaWduIG52LXNhMSswKQYDVQQDEyJHbG9iYWxTaWduIEdDQyBSMyBBbHBoYVNTTCBDQSAyMDIy",
-      "whitelist": false,
-      "attachment": {
-        "hash": "d72e9d5d07679986f854079226533b17f9db1a768648573767b6d35f17297777",
-        "size": 1634,
-        "filename": "7Ge-CB4gM_GQW4c8QeQgayw60TuN7PhmMpmoFX8YQv0=.pem",
-        "location": "security-state-staging/intermediates/dd8c26df-1f99-4f77-a0b8-28a35d06adc1.pem",
-        "mimetype": "application/x-pem-file"
-      },
-      "pubKeyHash": "7Ge+CB4gM/GQW4c8QeQgayw60TuN7PhmMpmoFX8YQv0=",
-      "crlite_enrolled": false,
-      "id": "72b9a255-5f16-422b-93d4-75f7687cc0b3",
-      "last_modified": 1663786626385
-    },
-    {
       "schema": 1663786374768,
       "derHash": "JEobcwyh11pppS9eX0IbtUfHl+JK++nPuZyZNIjNwnE=",
       "subject": "CN=SSLs.com RSA OV Secure Server CA,O=SSLs.com,L=Phoenix,ST=Arizona,C=US",
@@ -23239,24 +23797,6 @@
       "last_modified": 1661561823060
     },
     {
-      "schema": 1659747423666,
-      "derHash": "PzHbdYKNqpbk3luCoGeP4gI71bJGw/klDL9nGOEJWPU=",
-      "subject": "CN=Domain The Net Technologies Ltd CA for EV SSL R2,O=Domain The Net Technologies Ltd,C=IL",
-      "subjectDN": "MHIxCzAJBgNVBAYTAklMMSgwJgYDVQQKDB9Eb21haW4gVGhlIE5ldCBUZWNobm9sb2dpZXMgTHRkMTkwNwYDVQQDDDBEb21haW4gVGhlIE5ldCBUZWNobm9sb2dpZXMgTHRkIENBIGZvciBFViBTU0wgUjI=",
-      "whitelist": false,
-      "attachment": {
-        "hash": "8a4d28681845cdc8a071852db1380fdac3ad47d045153ee6fc939a47193b2bff",
-        "size": 2487,
-        "filename": "Lk19AkNIC7AwHNF5HsU_phCEnUBI-eiA0mbFhxxeQsQ=.pem",
-        "location": "security-state-staging/intermediates/88af22d0-cfec-40f3-bb5e-5e0f70ca65bf.pem",
-        "mimetype": "application/x-pem-file"
-      },
-      "pubKeyHash": "Lk19AkNIC7AwHNF5HsU/phCEnUBI+eiA0mbFhxxeQsQ=",
-      "crlite_enrolled": false,
-      "id": "ebf62e8f-f268-416f-b7de-23e67b4313c9",
-      "last_modified": 1660093023424
-    },
-    {
       "schema": 1659617319739,
       "derHash": "r9ep9iQLEcBtD2ck1E9FTg1eMX1cz/a4GNVyRO7VoZk=",
       "subject": "CN=Positiwise OV SSL CA,O=Positiwise Software LLC,C=US",
@@ -25705,24 +26245,6 @@
       "last_modified": 1645578267671
     },
     {
-      "schema": 1645577474282,
-      "derHash": "ozAX2d9JTAnVhwkQdAOu5GG5Rh6BujlcKMNmk8J9GYY=",
-      "subject": "CN=GlobalSign GCC R3 UK EV QWAC CA 2020,O=GMO GlobalSign Ltd,C=GB",
-      "subjectDN": "MFkxCzAJBgNVBAYTAkdCMRswGQYDVQQKExJHTU8gR2xvYmFsU2lnbiBMdGQxLTArBgNVBAMTJEdsb2JhbFNpZ24gR0NDIFIzIFVLIEVWIFFXQUMgQ0EgMjAyMA==",
-      "whitelist": false,
-      "attachment": {
-        "hash": "ef3f87aa1971aaebb3accc4f6b43e518068a070c3df5324fafc49bd6faea510d",
-        "size": 2040,
-        "filename": "_cLNIs90Pu4zrpnBuJdA-wTl2BrxEVUjup-MFOMyr1g=.pem",
-        "location": "security-state-staging/intermediates/8ec8c2d1-26c1-4c8e-b2d2-8f9031409923.pem",
-        "mimetype": "application/x-pem-file"
-      },
-      "pubKeyHash": "/cLNIs90Pu4zrpnBuJdA+wTl2BrxEVUjup+MFOMyr1g=",
-      "crlite_enrolled": false,
-      "id": "f0ff68db-90fa-4d8a-b3a1-d54555a22294",
-      "last_modified": 1645578267661
-    },
-    {
       "schema": 1645577475604,
       "derHash": "PuAnjfcfo8ElxM1IfwHXdGlOb8V+DNlMJO/XaRM5GOU=",
       "subject": "CN=GTS Root R1,O=Google Trust Services LLC,C=US",
@@ -26983,60 +27505,6 @@
       "last_modified": 1618102648566
     },
     {
-      "schema": 1616744984591,
-      "derHash": "CWaohynJOPnc1luzxjtghhjq5Rg+0f7XUrMjCJaHog4=",
-      "subject": "CN=GlobalSign GCC E5 UK EV QWAC CA 2021,O=GMO GlobalSign Ltd,C=GB",
-      "subjectDN": "MFkxCzAJBgNVBAYTAkdCMRswGQYDVQQKExJHTU8gR2xvYmFsU2lnbiBMdGQxLTArBgNVBAMTJEdsb2JhbFNpZ24gR0NDIEU1IFVLIEVWIFFXQUMgQ0EgMjAyMQ==",
-      "whitelist": false,
-      "attachment": {
-        "hash": "4005a355e57cd2a8bd4a424b5f4e7e4ee933a872f1efda2e36c1166230ca170f",
-        "size": 1248,
-        "filename": "HO9pYHxroEYeUAkryxMtHI3o_SH6tMvwv-u0CDggQEc=.pem",
-        "location": "security-state-staging/intermediates/5b9ce9ed-6717-41a3-bda1-2c4d234f9bdb.pem",
-        "mimetype": "application/x-pem-file"
-      },
-      "pubKeyHash": "HO9pYHxroEYeUAkryxMtHI3o/SH6tMvwv+u0CDggQEc=",
-      "crlite_enrolled": false,
-      "id": "0ec48e75-7ccc-48c5-9165-e48c23c1e45b",
-      "last_modified": 1616745549980
-    },
-    {
-      "schema": 1616744986241,
-      "derHash": "DdLH4K+CAPSfQZKomuY01M5BuAxjsGKcxo5TjDFvAg4=",
-      "subject": "CN=GlobalSign GCC E5 EV QWAC CA 2021,O=GlobalSign nv-sa,C=BE",
-      "subjectDN": "MFQxCzAJBgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMSowKAYDVQQDEyFHbG9iYWxTaWduIEdDQyBFNSBFViBRV0FDIENBIDIwMjE=",
-      "whitelist": false,
-      "attachment": {
-        "hash": "43f1f0accb925b694a412440868b1029f41df0c3f1fde4a3ac788b5cd3ad14b2",
-        "size": 1240,
-        "filename": "e3FAFA6PHmIXryngxPMDIkcW8S7q79f5gqJUVApp3pY=.pem",
-        "location": "security-state-staging/intermediates/9bda82e3-aac5-4a12-a32c-f86a4fc1ca14.pem",
-        "mimetype": "application/x-pem-file"
-      },
-      "pubKeyHash": "e3FAFA6PHmIXryngxPMDIkcW8S7q79f5gqJUVApp3pY=",
-      "crlite_enrolled": false,
-      "id": "e49837e3-b031-45e3-8712-12d4dbabdbc4",
-      "last_modified": 1616745549968
-    },
-    {
-      "schema": 1616744987712,
-      "derHash": "Grxa1bw5EaW0qR5Cu6MhLiqj3IAUfv4dSVcuS+BTJjM=",
-      "subject": "CN=GlobalSign Atlas R3 AlphaSSL CA H1 2021,O=Globalsign nv-sa,C=BE",
-      "subjectDN": "MFoxCzAJBgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxzaWduIG52LXNhMTAwLgYDVQQDEydHbG9iYWxTaWduIEF0bGFzIFIzIEFscGhhU1NMIENBIEgxIDIwMjE=",
-      "whitelist": false,
-      "attachment": {
-        "hash": "0ac4293f335c1f7922726fccc78a0a749002116e0d6d354411046b3681c14fe0",
-        "size": 1715,
-        "filename": "HAdiOrIGPG14XkymnmeQ184Cm1Z8E9-jnOoBut3PORw=.pem",
-        "location": "security-state-staging/intermediates/a79140b4-b597-4021-b12a-e83c7b03a7e0.pem",
-        "mimetype": "application/x-pem-file"
-      },
-      "pubKeyHash": "HAdiOrIGPG14XkymnmeQ184Cm1Z8E9+jnOoBut3PORw=",
-      "crlite_enrolled": false,
-      "id": "afbdb701-e59b-4398-967c-b0db2394d003",
-      "last_modified": 1616745549953
-    },
-    {
       "schema": 1615384231447,
       "derHash": "sQhhc3s+ybEfphVNI5cP+y2r/Ciuamv1bD8yBCZiOa0=",
       "subject": "CN=SECOM Passport for Member PUB CA4,OU=SECOM Passport for Member 2.0 PUB,O=SECOM Trust Systems CO.\\,LTD.,C=JP",
@@ -30151,5 +30619,5 @@
       "last_modified": 1559865884636
     }
   ],
-  "timestamp": 1709780223348
+  "timestamp": 1712311023721
 }
diff --git a/services/settings/dumps/security-state/onecrl.json b/services/settings/dumps/security-state/onecrl.json
index 86c2812f5e..48e394966a 100644
--- a/services/settings/dumps/security-state/onecrl.json
+++ b/services/settings/dumps/security-state/onecrl.json
@@ -1,6 +1,81 @@
 {
   "data": [
     {
+      "schema": 1709917272661,
+      "details": {
+        "bug": "https://bugzilla.mozilla.org/show_bug.cgi?id=1884400",
+        "who": "",
+        "why": "",
+        "name": "",
+        "created": ""
+      },
+      "enabled": false,
+      "issuerName": "MEcxCzAJBgNVBAYTAkNOMRwwGgYDVQQKExNpVHJ1c0NoaW5hIENvLixMdGQuMRowGAYDVQQDExF2VHJ1cyBFQ0MgUm9vdCBDQQ==",
+      "serialNumber": "baFk8S+rVizrFzxGvKqfqQvu0kY=",
+      "id": "4a2a8154-e012-418f-8557-a9c3bb5ef380",
+      "last_modified": 1710189695302
+    },
+    {
+      "schema": 1709717394495,
+      "details": {
+        "bug": "https://bugzilla.mozilla.org/show_bug.cgi?id=1884400",
+        "who": "",
+        "why": "",
+        "name": "",
+        "created": ""
+      },
+      "enabled": false,
+      "issuerName": "MEcxCzAJBgNVBAYTAkNOMRwwGgYDVQQKExNpVHJ1c0NoaW5hIENvLixMdGQuMRowGAYDVQQDExF2VHJ1cyBFQ0MgUm9vdCBDQQ==",
+      "serialNumber": "F7oJqB+ONoNowl5eHOOl8oSDne0=",
+      "id": "dd781eef-2b60-4ff1-a1d1-2c65c31915fa",
+      "last_modified": 1710189695297
+    },
+    {
+      "schema": 1709917272890,
+      "details": {
+        "bug": "https://bugzilla.mozilla.org/show_bug.cgi?id=1884400",
+        "who": "",
+        "why": "",
+        "name": "",
+        "created": ""
+      },
+      "enabled": false,
+      "issuerName": "MEMxCzAJBgNVBAYTAkNOMRwwGgYDVQQKExNpVHJ1c0NoaW5hIENvLixMdGQuMRYwFAYDVQQDEw12VHJ1cyBSb290IENB",
+      "serialNumber": "VmPk4uhKrU+Ar6D+FKt4T+wADJs=",
+      "id": "4c28a487-8372-4061-9be2-a4f5090ab231",
+      "last_modified": 1710189695292
+    },
+    {
+      "schema": 1709917272733,
+      "details": {
+        "bug": "https://bugzilla.mozilla.org/show_bug.cgi?id=1884400",
+        "who": "",
+        "why": "",
+        "name": "",
+        "created": ""
+      },
+      "enabled": false,
+      "issuerName": "MEoxCzAJBgNVBAYTAlVTMRIwEAYDVQQKEwlJZGVuVHJ1c3QxJzAlBgNVBAMTHklkZW5UcnVzdCBDb21tZXJjaWFsIFJvb3QgQ0EgMQ==",
+      "serialNumber": "fgr3g+MTaN10FgQg4sbqcA==",
+      "id": "2fe0159b-6ae2-4f7b-a92b-63c27e5056fa",
+      "last_modified": 1710189695287
+    },
+    {
+      "schema": 1709917272813,
+      "details": {
+        "bug": "https://bugzilla.mozilla.org/show_bug.cgi?id=1884400",
+        "who": "",
+        "why": "",
+        "name": "",
+        "created": ""
+      },
+      "enabled": false,
+      "issuerName": "MEMxCzAJBgNVBAYTAkNOMRwwGgYDVQQKExNpVHJ1c0NoaW5hIENvLixMdGQuMRYwFAYDVQQDEw12VHJ1cyBSb290IENB",
+      "serialNumber": "H6Q9cmNee/OBNe7znM/J3cNHeYY=",
+      "id": "f5b7873a-fe31-44a0-b75c-fbbeebfc5a35",
+      "last_modified": 1710189695282
+    },
+    {
       "schema": 1709632813150,
       "details": {
         "bug": "https://bugzilla.mozilla.org/show_bug.cgi?id=1879046",
@@ -24046,5 +24121,5 @@
       "last_modified": 1480349158647
     }
   ],
-  "timestamp": 1709673810455
+  "timestamp": 1710189695302
 }