2 files changed, 485 insertions, 236 deletions
diff --git a/services/settings/dumps/security-state/intermediates.json b/services/settings/dumps/security-state/intermediates.json
index bb75d6bf03..c2dec37e4f 100644
--- a/services/settings/dumps/security-state/intermediates.json
+++ b/services/settings/dumps/security-state/intermediates.json
@@ -1,6 +1,474 @@
 {
   "data": [
     {
+      "schema": 1709780043992,
+      "derHash": "6CGxESkRBWfxYH8LDzaOx42BFBjwxIzEJUUPY+uICV0=",
+      "subject": "CN=Entrust 4K EV TLS Root CA - 2022,O=Entrust\\, Inc.,C=US",
+      "subjectDN": "MFAxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1FbnRydXN0LCBJbmMuMSkwJwYDVQQDEyBFbnRydXN0IDRLIEVWIFRMUyBSb290IENBIC0gMjAyMg==",
+      "whitelist": false,
+      "attachment": {
+        "hash": "d5d1224d52aeeff3fa819a835cf5693d219ded634ea68df06af892a481a09373",
+        "size": 2064,
+        "filename": "qtbKnoRh2GMf_QeXEIiJfMm-n4sx1kgOUifxXyU-tyg=.pem",
+        "location": "security-state-staging/intermediates/fc1a0f62-1577-4d38-b489-39b75b9303a4.pem",
+        "mimetype": "application/x-pem-file"
+      },
+      "pubKeyHash": "qtbKnoRh2GMf/QeXEIiJfMm+n4sx1kgOUifxXyU+tyg=",
+      "crlite_enrolled": false,
+      "id": "e2798fee-994b-49ad-bcb5-9fad36b266bf",
+      "last_modified": 1709780223348
+    },
+    {
+      "schema": 1709780043461,
+      "derHash": "sKF44Gt6cnTwsqZA9qA78AOrHt6Gk3cNXSdBstLwGYA=",
+      "subject": "CN=AffirmTrust 4K TLS Root CA - 2022,O=AffirmTrust,C=CA",
+      "subjectDN": "ME8xCzAJBgNVBAYTAkNBMRQwEgYDVQQKEwtBZmZpcm1UcnVzdDEqMCgGA1UEAxMhQWZmaXJtVHJ1c3QgNEsgVExTIFJvb3QgQ0EgLSAyMDIy",
+      "whitelist": false,
+      "attachment": {
+        "hash": "d68d5318a7ba2e9a85397e85f05d1f9fc36013ccdee30a7fff3c05e997f7ce91",
+        "size": 2288,
+        "filename": "PO-4Mc0JEYVGctI3huFt_Mbvj0EA2N9qQo9dg4I1_cw=.pem",
+        "location": "security-state-staging/intermediates/c6ba6944-757d-422a-85a3-113db515beed.pem",
+        "mimetype": "application/x-pem-file"
+      },
+      "pubKeyHash": "PO+4Mc0JEYVGctI3huFt/Mbvj0EA2N9qQo9dg4I1/cw=",
+      "crlite_enrolled": false,
+      "id": "83abb7ec-d98c-4b07-8ef3-c24056303b1a",
+      "last_modified": 1709780223345
+    },
+    {
+      "schema": 1709758443441,
+      "derHash": "ZfA1j8k5NM1arEMSLzeUjXvQQtFI5v2IsuZaqaw5nd0=",
+      "subject": "CN=Entrust Root Certification Authority - G2,OU=See www.entrust.net/legal-terms+OU=(c) 2009 Entrust\\, Inc. - for authorized use only,O=Entrust\\, Inc.,C=US",
+      "subjectDN": "MIG+MQswCQYDVQQGEwJVUzEWMBQGA1UEChMNRW50cnVzdCwgSW5jLjEoMCYGA1UECxMfU2VlIHd3dy5lbnRydXN0Lm5ldC9sZWdhbC10ZXJtczE5MDcGA1UECxMwKGMpIDIwMDkgRW50cnVzdCwgSW5jLiAtIGZvciBhdXRob3JpemVkIHVzZSBvbmx5MTIwMAYDVQQDEylFbnRydXN0IFJvb3QgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkgLSBHMg==",
+      "whitelist": false,
+      "attachment": {
+        "hash": "8097be6a2869b37e933e0d7cd1c8b2fe3fe53e3fd1942f557271eee692a28f5a",
+        "size": 1853,
+        "filename": "du6FkDdMcVQ3u8prumAo6t3i3G27uMP2EOhR8R0at_U=.pem",
+        "location": "security-state-staging/intermediates/470cc99c-a735-40d5-be7d-d35d395a9917.pem",
+        "mimetype": "application/x-pem-file"
+      },
+      "pubKeyHash": "du6FkDdMcVQ3u8prumAo6t3i3G27uMP2EOhR8R0at/U=",
+      "crlite_enrolled": false,
+      "id": "89c6906b-2f50-4f51-ae6c-29b661081f05",
+      "last_modified": 1709758623247
+    },
+    {
+      "schema": 1709758442871,
+      "derHash": "4lXaLVTs/Rb7ZCajioM5nn459qAeluZJzYUPsP3/VOs=",
+      "subject": "CN=Entrust 4K TLS Root CA - 2022,O=Entrust\\, Inc.,C=US",
+      "subjectDN": "ME0xCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1FbnRydXN0LCBJbmMuMSYwJAYDVQQDEx1FbnRydXN0IDRLIFRMUyBSb290IENBIC0gMjAyMg==",
+      "whitelist": false,
+      "attachment": {
+        "hash": "38fbd31004e9e27ad9be5bc74d44558035bd507afeca61071f303289eb1039f2",
+        "size": 2060,
+        "filename": "w8sbVZHe29cRAbw0WtuFV3BsGDBZKehyOv_50FpLf7A=.pem",
+        "location": "security-state-staging/intermediates/b6658a24-c5c8-4cb7-bd99-029c9467e3ac.pem",
+        "mimetype": "application/x-pem-file"
+      },
+      "pubKeyHash": "w8sbVZHe29cRAbw0WtuFV3BsGDBZKehyOv/50FpLf7A=",
+      "crlite_enrolled": false,
+      "id": "bb644eb4-afd2-4150-8fbb-4d0c76c48f3a",
+      "last_modified": 1709758623243
+    },
+    {
+      "schema": 1709322861611,
+      "derHash": "79BmhAYTDkM4LOre67F+YlzXf1KOKI6L7a6xQuGbzgI=",
+      "subject": "CN=CloudSecure RSA Domain Validation Secure Server CA 2,O=CloudSecure Corporation,C=JP",
+      "subjectDN": "MG4xCzAJBgNVBAYTAkpQMSAwHgYDVQQKExdDbG91ZFNlY3VyZSBDb3Jwb3JhdGlvbjE9MDsGA1UEAxM0Q2xvdWRTZWN1cmUgUlNBIERvbWFpbiBWYWxpZGF0aW9uIFNlY3VyZSBTZXJ2ZXIgQ0EgMg==",
+      "whitelist": false,
+      "attachment": {
+        "hash": "fb2121b1bc1d493d64cc748ec193beeffd50410766565c2f7d3c188672d62b2f",
+        "size": 2296,
+        "filename": "ngVpmshTjI2mGNZdkmE0BseYAQxwUyN7hAFExDPDwsg=.pem",
+        "location": "security-state-staging/intermediates/3928980f-322a-4b2f-a6d4-060445ac1799.pem",
+        "mimetype": "application/x-pem-file"
+      },
+      "pubKeyHash": "ngVpmshTjI2mGNZdkmE0BseYAQxwUyN7hAFExDPDwsg=",
+      "crlite_enrolled": false,
+      "id": "a66aa7c5-abb2-49b5-b693-66dd992c24ab",
+      "last_modified": 1709323057665
+    },
+    {
+      "schema": 1709322861260,
+      "derHash": "wKHKNkddM7Rx5OWOVXTdkpTTVMRXKVlU21VbJOrSqks=",
+      "subject": "CN=COMODO/PKWARE Secure Email CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB",
+      "subjectDN": "MIGAMQswCQYDVQQGEwJHQjEbMBkGA1UECBMSR3JlYXRlciBNYW5jaGVzdGVyMRAwDgYDVQQHEwdTYWxmb3JkMRowGAYDVQQKExFDT01PRE8gQ0EgTGltaXRlZDEmMCQGA1UEAxMdQ09NT0RPL1BLV0FSRSBTZWN1cmUgRW1haWwgQ0E=",
+      "whitelist": false,
+      "attachment": {
+        "hash": "536d387994d2fcf3c04c848acb66841104d87c9b0b1ed73ccec9768bd275d362",
+        "size": 1979,
+        "filename": "javoiDXitAWxKnEeWWJB_XeluETyAl8SAu8OHaB7Q0c=.pem",
+        "location": "security-state-staging/intermediates/a14785fd-f6c9-4f29-9d06-df68da0a3959.pem",
+        "mimetype": "application/x-pem-file"
+      },
+      "pubKeyHash": "javoiDXitAWxKnEeWWJB/XeluETyAl8SAu8OHaB7Q0c=",
+      "crlite_enrolled": false,
+      "id": "da5c02a2-8457-4e22-87c0-9f6e49221efe",
+      "last_modified": 1709323057662
+    },
+    {
+      "schema": 1709322860874,
+      "derHash": "YmFumxG9Djo1g2DIO3jbxb7qV1yQuX5oJEgz+zBDfGs=",
+      "subject": "CN=TERENA Personal CA,O=TERENA,C=NL",
+      "subjectDN": "MDsxCzAJBgNVBAYTAk5MMQ8wDQYDVQQKEwZURVJFTkExGzAZBgNVBAMTElRFUkVOQSBQZXJzb25hbCBDQQ==",
+      "whitelist": false,
+      "attachment": {
+        "hash": "b540a4b8690142678f25aaa6f34207fd3c4298612d40cac2034f5049aa748c3b",
+        "size": 1711,
+        "filename": "GrQOOcgaiD1vs9vGDvRaVMQKNDQm2_Nj7lPXTk4s2F0=.pem",
+        "location": "security-state-staging/intermediates/4742da83-41bb-4761-b382-7a48eb3f8886.pem",
+        "mimetype": "application/x-pem-file"
+      },
+      "pubKeyHash": "GrQOOcgaiD1vs9vGDvRaVMQKNDQm2/Nj7lPXTk4s2F0=",
+      "crlite_enrolled": false,
+      "id": "d447cf4a-07e2-4ccf-b3c9-898267f291fe",
+      "last_modified": 1709323057659
+    },
+    {
+      "schema": 1709322860517,
+      "derHash": "mm/Eq02x6m9mY1B+3B0Ajwka6I+rbzrlaoSkCQUp71g=",
+      "subject": "CN=Telekom Security EV RSA CA 23,O=Deutsche Telekom Security GmbH,C=DE",
+      "subjectDN": "MF4xCzAJBgNVBAYTAkRFMScwJQYDVQQKDB5EZXV0c2NoZSBUZWxla29tIFNlY3VyaXR5IEdtYkgxJjAkBgNVBAMMHVRlbGVrb20gU2VjdXJpdHkgRVYgUlNBIENBIDIz",
+      "whitelist": false,
+      "attachment": {
+        "hash": "5a3bc003f09d44a9bff3a566fbb608a3615298fe57e81f80753e9ebb01cd61d0",
+        "size": 2463,
+        "filename": "KsE3RzpShimShZDxrrUx8vMnCMdGFk9o00YoUm8hq1Y=.pem",
+        "location": "security-state-staging/intermediates/c196ecd0-2b07-4708-adc4-b44bbf006d56.pem",
+        "mimetype": "application/x-pem-file"
+      },
+      "pubKeyHash": "KsE3RzpShimShZDxrrUx8vMnCMdGFk9o00YoUm8hq1Y=",
+      "crlite_enrolled": false,
+      "id": "63278116-4a77-4a8d-830b-2d7766217557",
+      "last_modified": 1709323057656
+    },
+    {
+      "schema": 1709322859788,
+      "derHash": "/QKa3j96gKmNb//JQpBGWF7x2MuBk6F/YhQxfQZS18M=",
+      "subject": "CN=COMODO/HP Secure Email CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB",
+      "subjectDN": "MHwxCzAJBgNVBAYTAkdCMRswGQYDVQQIExJHcmVhdGVyIE1hbmNoZXN0ZXIxEDAOBgNVBAcTB1NhbGZvcmQxGjAYBgNVBAoTEUNPTU9ETyBDQSBMaW1pdGVkMSIwIAYDVQQDExlDT01PRE8vSFAgU2VjdXJlIEVtYWlsIENB",
+      "whitelist": false,
+      "attachment": {
+        "hash": "adb2966a8c1fc1a877edbb79b2d43109f804829872e34bd8667f85ba432153e5",
+        "size": 1975,
+        "filename": "VQkNSqdqPoVan53-i1N5YrjNCMnJRtvNFB7icXr9un8=.pem",
+        "location": "security-state-staging/intermediates/dde31d19-c833-41ae-a61a-48529e89c711.pem",
+        "mimetype": "application/x-pem-file"
+      },
+      "pubKeyHash": "VQkNSqdqPoVan53+i1N5YrjNCMnJRtvNFB7icXr9un8=",
+      "crlite_enrolled": false,
+      "id": "a53b33af-6b45-402a-abac-9e6140dc28ec",
+      "last_modified": 1709323057653
+    },
+    {
+      "schema": 1709322862713,
+      "derHash": "oCHY53TGozxza9tcF2klrd9EbJlnm83NguW9LqX+RE0=",
+      "subject": "CN=TrustSign BR RSA EV SSL CA 3,O=TrustSign Certificadora Dig. & Solucoes Seguranca da Inf. Ltda.,C=BR",
+      "subjectDN": "MH4xCzAJBgNVBAYTAkJSMUgwRgYDVQQKDD9UcnVzdFNpZ24gQ2VydGlmaWNhZG9yYSBEaWcuICYgU29sdWNvZXMgU2VndXJhbmNhIGRhIEluZi4gTHRkYS4xJTAjBgNVBAMTHFRydXN0U2lnbiBCUiBSU0EgRVYgU1NMIENBIDM=",
+      "whitelist": false,
+      "attachment": {
+        "hash": "2c84d91b393a7a753c19a6e8ecdd10deed6ab11cc24bd6bcf492eb38842b2450",
+        "size": 2296,
+        "filename": "LpohGU7zxrv6t1u_v9DhN6Y9n4Aonq2iqejOjCP0Ux8=.pem",
+        "location": "security-state-staging/intermediates/0794fa6c-acbb-45c4-9663-0efec7af694d.pem",
+        "mimetype": "application/x-pem-file"
+      },
+      "pubKeyHash": "LpohGU7zxrv6t1u/v9DhN6Y9n4Aonq2iqejOjCP0Ux8=",
+      "crlite_enrolled": false,
+      "id": "b05dd25e-5a3a-4951-878c-54fb55073a71",
+      "last_modified": 1709323057650
+    },
+    {
+      "schema": 1709322859425,
+      "derHash": "Ub2MI/MSaUY4WcHVugmaJrqWXZSg9q9XP5Xhl28cZ+A=",
+      "subject": "CN=cPanel ECC Domain Validation Secure Server CA 3,O=cPanel\\, LLC,C=US",
+      "subjectDN": "MF0xCzAJBgNVBAYTAlVTMRQwEgYDVQQKEwtjUGFuZWwsIExMQzE4MDYGA1UEAxMvY1BhbmVsIEVDQyBEb21haW4gVmFsaWRhdGlvbiBTZWN1cmUgU2VydmVyIENBIDM=",
+      "whitelist": false,
+      "attachment": {
+        "hash": "81d34a8d92722fab651fb8abaa7727686649d8a058bb61606f47ad5e942adc0b",
+        "size": 1219,
+        "filename": "x0Qkm6r8fuJiMuEHBtboy-jaDQ3y8uK8pyXK_03E2Ts=.pem",
+        "location": "security-state-staging/intermediates/9d8007dd-056d-4251-9d4f-2714d98e77de.pem",
+        "mimetype": "application/x-pem-file"
+      },
+      "pubKeyHash": "x0Qkm6r8fuJiMuEHBtboy+jaDQ3y8uK8pyXK/03E2Ts=",
+      "crlite_enrolled": false,
+      "id": "7e069ef5-0b0c-46a0-bbdf-4d8e728423c0",
+      "last_modified": 1709323057647
+    },
+    {
+      "schema": 1709322858581,
+      "derHash": "ofN4S+qZZBNozTVcHkWvLeMVdHMTmuhqHsUV4gMabD8=",
+      "subject": "CN=cPanel RSA Domain Validation Secure Server CA 3,O=cPanel\\, LLC,C=US",
+      "subjectDN": "MF0xCzAJBgNVBAYTAlVTMRQwEgYDVQQKEwtjUGFuZWwsIExMQzE4MDYGA1UEAxMvY1BhbmVsIFJTQSBEb21haW4gVmFsaWRhdGlvbiBTZWN1cmUgU2VydmVyIENBIDM=",
+      "whitelist": false,
+      "attachment": {
+        "hash": "6b080a2a80781e71ae161fbe4fff3ba30970e406aeb5c28c3bd1fe0613fdb7cc",
+        "size": 2227,
+        "filename": "1s-ZmXiKh7-UASkQQs1U4zOhS4YqerP9kEO5w54wsbw=.pem",
+        "location": "security-state-staging/intermediates/a5842fa3-5423-4b6e-90b9-5a4fc110a319.pem",
+        "mimetype": "application/x-pem-file"
+      },
+      "pubKeyHash": "1s+ZmXiKh7+UASkQQs1U4zOhS4YqerP9kEO5w54wsbw=",
+      "crlite_enrolled": false,
+      "id": "6435e6ca-cabc-415c-8a36-8afbecb70b12",
+      "last_modified": 1709323057644
+    },
+    {
+      "schema": 1709322856729,
+      "derHash": "j3JA8WCTbx/UBr8CizW11gm2SzvQ4x4TzG3Zq3yhLm8=",
+      "subject": "CN=GLOBE SSL SECURE EMAIL CA,O=GLOBE HOSTING CERTIFICATION AUTHORITY,C=RO",
+      "subjectDN": "MGExCzAJBgNVBAYTAlJPMS4wLAYDVQQKEyVHTE9CRSBIT1NUSU5HIENFUlRJRklDQVRJT04gQVVUSE9SSVRZMSIwIAYDVQQDExlHTE9CRSBTU0wgU0VDVVJFIEVNQUlMIENB",
+      "whitelist": false,
+      "attachment": {
+        "hash": "1cf3286ce0babb75314968445c3959acec4c2fb01d7342d74be3d80efd77125a",
+        "size": 1764,
+        "filename": "_eRFHz8wxXnTOa1eOct617RUUVoCS6wHVpWc2LKjvVg=.pem",
+        "location": "security-state-staging/intermediates/4c03d7f3-2876-42e2-8e63-1770d52bb8dd.pem",
+        "mimetype": "application/x-pem-file"
+      },
+      "pubKeyHash": "/eRFHz8wxXnTOa1eOct617RUUVoCS6wHVpWc2LKjvVg=",
+      "crlite_enrolled": false,
+      "id": "22c0373b-2dd6-46fd-a8f5-948c6627d4ea",
+      "last_modified": 1709323057641
+    },
+    {
+      "schema": 1709322858961,
+      "derHash": "6bmYDIo/WT9Nnn2j9Jev+Ptm4kLGy6DXMOIGVZUT+l0=",
+      "subject": "CN=CloudSecure RSA Extended Validation Secure Server CA 2,O=CloudSecure Corporation,C=JP",
+      "subjectDN": "MHAxCzAJBgNVBAYTAkpQMSAwHgYDVQQKExdDbG91ZFNlY3VyZSBDb3Jwb3JhdGlvbjE/MD0GA1UEAxM2Q2xvdWRTZWN1cmUgUlNBIEV4dGVuZGVkIFZhbGlkYXRpb24gU2VjdXJlIFNlcnZlciBDQSAy",
+      "whitelist": false,
+      "attachment": {
+        "hash": "f70f60394839abcacf961991bfa4a022936ba4e50648e62886dbf535cd906593",
+        "size": 2276,
+        "filename": "1Ul-LolMUZyXeMV_wwOQF62lnEb7N8nJxkwmRmRRcYI=.pem",
+        "location": "security-state-staging/intermediates/f7c81653-1126-40e7-8768-021015877551.pem",
+        "mimetype": "application/x-pem-file"
+      },
+      "pubKeyHash": "1Ul+LolMUZyXeMV/wwOQF62lnEb7N8nJxkwmRmRRcYI=",
+      "crlite_enrolled": false,
+      "id": "7ff7cab8-de89-4883-9ba7-e72ab7f9adcb",
+      "last_modified": 1709323057638
+    },
+    {
+      "schema": 1709322861976,
+      "derHash": "1mqdGWzSwn101xnKKCXEWEa1Q1AjdpgTeFZ3l7hXHTo=",
+      "subject": "CN=TrustSign BR RSA OV SSL CA 3,O=TrustSign Certificadora Dig. & Solucoes Seguranca da Inf. Ltda.,C=BR",
+      "subjectDN": "MH4xCzAJBgNVBAYTAkJSMUgwRgYDVQQKDD9UcnVzdFNpZ24gQ2VydGlmaWNhZG9yYSBEaWcuICYgU29sdWNvZXMgU2VndXJhbmNhIGRhIEluZi4gTHRkYS4xJTAjBgNVBAMTHFRydXN0U2lnbiBCUiBSU0EgT1YgU1NMIENBIDM=",
+      "whitelist": false,
+      "attachment": {
+        "hash": "4ffe538c0d7f0a5da3bb5331a42d56f1c9d607ee091deb7f1da0e1ceebee4ac0",
+        "size": 2316,
+        "filename": "5M4nqfeUxAKYvMXWPZxoI7Ohyf9GkQYIHHOMYGpbCmQ=.pem",
+        "location": "security-state-staging/intermediates/9e1bb80c-e7d7-4de1-9daf-27241124cf46.pem",
+        "mimetype": "application/x-pem-file"
+      },
+      "pubKeyHash": "5M4nqfeUxAKYvMXWPZxoI7Ohyf9GkQYIHHOMYGpbCmQ=",
+      "crlite_enrolled": false,
+      "id": "bc576a0c-04f0-41df-aa49-9759354a9cd0",
+      "last_modified": 1709323057634
+    },
+    {
+      "schema": 1709322857466,
+      "derHash": "6QSgV9g5vL5jEJK0IV3YzE+ISbqHtRqvJyi3HmSs51E=",
+      "subject": "CN=DREAMHOST SECURE EMAIL CA,O=DREAMHOST CERTIFICATION AUTHORITY,C=US",
+      "subjectDN": "MF0xCzAJBgNVBAYTAlVTMSowKAYDVQQKEyFEUkVBTUhPU1QgQ0VSVElGSUNBVElPTiBBVVRIT1JJVFkxIjAgBgNVBAMTGURSRUFNSE9TVCBTRUNVUkUgRU1BSUwgQ0E=",
+      "whitelist": false,
+      "attachment": {
+        "hash": "bd46e6b3068ecccbabe7da0273be8a3d35a413fdfcca05bc18847e7402db16fa",
+        "size": 1756,
+        "filename": "63NWnCfq1JadpotgYBS_ORAIQ4nhhoHBm9FjkLxi1nA=.pem",
+        "location": "security-state-staging/intermediates/6ba6c581-5ba3-48f8-8ccc-e38734c2de49.pem",
+        "mimetype": "application/x-pem-file"
+      },
+      "pubKeyHash": "63NWnCfq1JadpotgYBS/ORAIQ4nhhoHBm9FjkLxi1nA=",
+      "crlite_enrolled": false,
+      "id": "ad597bfa-50d0-4288-95d2-d15db698ffba",
+      "last_modified": 1709323057631
+    },
+    {
+      "schema": 1709322858187,
+      "derHash": "Xwo1uk+Epl9osW1KM/ZRfAl3CDk+qv0oVvuak0GHGfQ=",
+      "subject": "CN=SGTRUST EMAIL AND CLIENT CA,O=SGssl,C=KR",
+      "subjectDN": "MEMxCzAJBgNVBAYTAktSMQ4wDAYDVQQKEwVTR3NzbDEkMCIGA1UEAxMbU0dUUlVTVCBFTUFJTCBBTkQgQ0xJRU5UIENB",
+      "whitelist": false,
+      "attachment": {
+        "hash": "17a9b911f686f237aa390ea2ff06319ae420ccb51198aeed267a5518db5715c4",
+        "size": 1723,
+        "filename": "gQN5MDXBIRQe70cFfEaNKKTh3AELpmBrtzu-04X41Po=.pem",
+        "location": "security-state-staging/intermediates/460d3cb1-d178-47f3-b286-99a9adab7c6a.pem",
+        "mimetype": "application/x-pem-file"
+      },
+      "pubKeyHash": "gQN5MDXBIRQe70cFfEaNKKTh3AELpmBrtzu+04X41Po=",
+      "crlite_enrolled": false,
+      "id": "5a347462-e209-4a4f-bba5-902bb7cdd29b",
+      "last_modified": 1709323057628
+    },
+    {
+      "schema": 1709322860157,
+      "derHash": "JhjEFcFGupil8K1+pJiqWHgLpV+o47By0TwzDUEBBxc=",
+      "subject": "CN=EuropeanSSL Client CA,O=EUNETIC GmbH,C=DE",
+      "subjectDN": "MEQxCzAJBgNVBAYTAkRFMRUwEwYDVQQKEwxFVU5FVElDIEdtYkgxHjAcBgNVBAMTFUV1cm9wZWFuU1NMIENsaWVudCBDQQ==",
+      "whitelist": false,
+      "attachment": {
+        "hash": "939382e857302d9c045c2918ffbab03973b2a29f5c566cfdd7e53388636562f6",
+        "size": 1723,
+        "filename": "6rE_4fpPwsenurNcVvOyU8xh7Vp9kamSGTFA4_9ffGI=.pem",
+        "location": "security-state-staging/intermediates/a5c74b09-42b9-4fbe-ab76-8aac990547e8.pem",
+        "mimetype": "application/x-pem-file"
+      },
+      "pubKeyHash": "6rE/4fpPwsenurNcVvOyU8xh7Vp9kamSGTFA4/9ffGI=",
+      "crlite_enrolled": false,
+      "id": "21c33409-b6a8-429b-bddf-96d8eb9b5e6d",
+      "last_modified": 1709323057625
+    },
+    {
+      "schema": 1709322856380,
+      "derHash": "sF4Fz8v4GBPsMPo/dJIKoj/tNn4UfMgeESH2RphEnQ8=",
+      "subject": "CN=WISeKey CertifyID SSL GC CA 1,O=WISeKey,C=CH",
+      "subjectDN": "MEcxCzAJBgNVBAYTAkNIMRAwDgYDVQQKDAdXSVNlS2V5MSYwJAYDVQQDDB1XSVNlS2V5IENlcnRpZnlJRCBTU0wgR0MgQ0EgMQ==",
+      "whitelist": false,
+      "attachment": {
+        "hash": "d3ef1dcec7ca6721c8f698c1c8f6d88f5264f9596c6842ced7c780c3cbe4b79b",
+        "size": 1130,
+        "filename": "IUntA2TGvGsJRd1XrGg2Y7dxJ73p4cADKYPamKiIAPs=.pem",
+        "location": "security-state-staging/intermediates/338dc342-323f-41a6-8c50-062822784a9a.pem",
+        "mimetype": "application/x-pem-file"
+      },
+      "pubKeyHash": "IUntA2TGvGsJRd1XrGg2Y7dxJ73p4cADKYPamKiIAPs=",
+      "crlite_enrolled": false,
+      "id": "1a94aa13-0606-4858-923c-41f0aceb9941",
+      "last_modified": 1709323057622
+    },
+    {
+      "schema": 1709322855255,
+      "derHash": "9AUHfHF0cDuXgceVRKe+mUJjhU0VFz5hqNGaKM96SrE=",
+      "subject": "CN=TERENA eScience Personal CA,O=TERENA,C=NL",
+      "subjectDN": "MEQxCzAJBgNVBAYTAk5MMQ8wDQYDVQQKEwZURVJFTkExJDAiBgNVBAMTG1RFUkVOQSBlU2NpZW5jZSBQZXJzb25hbCBDQQ==",
+      "whitelist": false,
+      "attachment": {
+        "hash": "0ff25cb8ace98409f31247ecb59b650b17e31d145ec2485517081e2ac1dfa4fb",
+        "size": 1743,
+        "filename": "rfAIoQEXwIYxHVXIaa2COA8XlDmE8FsumvzEWCU7MfU=.pem",
+        "location": "security-state-staging/intermediates/572cc780-7a7f-4edb-bb11-5177e420e4ee.pem",
+        "mimetype": "application/x-pem-file"
+      },
+      "pubKeyHash": "rfAIoQEXwIYxHVXIaa2COA8XlDmE8FsumvzEWCU7MfU=",
+      "crlite_enrolled": false,
+      "id": "df33d49d-be3f-4bfc-9291-d978b63c2fb5",
+      "last_modified": 1709323057619
+    },
+    {
+      "schema": 1709322855622,
+      "derHash": "Jk2YC0i7HaMvuxR7gQQ0RaxMhWOVlLoVrZoriDai2sA=",
+      "subject": "CN=TrustSign BR RSA DV SSL CA 3,O=TrustSign Certificadora Dig. & Solucoes Seguranca da Inf. Ltda.,C=BR",
+      "subjectDN": "MH4xCzAJBgNVBAYTAkJSMUgwRgYDVQQKDD9UcnVzdFNpZ24gQ2VydGlmaWNhZG9yYSBEaWcuICYgU29sdWNvZXMgU2VndXJhbmNhIGRhIEluZi4gTHRkYS4xJTAjBgNVBAMTHFRydXN0U2lnbiBCUiBSU0EgRFYgU1NMIENBIDM=",
+      "whitelist": false,
+      "attachment": {
+        "hash": "27dacc48d530261d12816b8afab129e30ad60c13ca68d8ab480e84fd376aeedc",
+        "size": 2316,
+        "filename": "84TjjwMOkswfNmR4vhxNna7mdofPfiyWViNPR3qjzL8=.pem",
+        "location": "security-state-staging/intermediates/1b06b71c-6ace-446e-aac0-2d4fb31bfe45.pem",
+        "mimetype": "application/x-pem-file"
+      },
+      "pubKeyHash": "84TjjwMOkswfNmR4vhxNna7mdofPfiyWViNPR3qjzL8=",
+      "crlite_enrolled": false,
+      "id": "6cd1a68d-ab85-4064-856c-0fdab449d7bf",
+      "last_modified": 1709323057615
+    },
+    {
+      "schema": 1709322854820,
+      "derHash": "TywMFwG94Btr7tptF8M2BCQhr3MRcGM0f36Xt2rYl/U=",
+      "subject": "CN=GlobalSSL Secure E-Mail and Client Authentication CA,O=GlobalSSL,C=DE",
+      "subjectDN": "MGAxCzAJBgNVBAYTAkRFMRIwEAYDVQQKEwlHbG9iYWxTU0wxPTA7BgNVBAMTNEdsb2JhbFNTTCBTZWN1cmUgRS1NYWlsIGFuZCBDbGllbnQgQXV0aGVudGljYXRpb24gQ0E=",
+      "whitelist": false,
+      "attachment": {
+        "hash": "b2019acf4321d57d1f4034c278f7761779e2fc130bbf2ca87aabbe5a7047c614",
+        "size": 1760,
+        "filename": "rvxRPOOErynHJj6lYghacyWHWiAPuUDhnQ7bzVQe7nA=.pem",
+        "location": "security-state-staging/intermediates/cacd7664-e756-4647-96f8-682e65e01ae0.pem",
+        "mimetype": "application/x-pem-file"
+      },
+      "pubKeyHash": "rvxRPOOErynHJj6lYghacyWHWiAPuUDhnQ7bzVQe7nA=",
+      "crlite_enrolled": false,
+      "id": "9d2ed0cf-a2d4-430d-ae23-724baec635e4",
+      "last_modified": 1709323057612
+    },
+    {
+      "schema": 1709322857831,
+      "derHash": "16iplHwxgGwbRiX4L8vMp8wgkOWNshW45NiLqcYNMWY=",
+      "subject": "CN=Telekom Security EV ECC CA 21,O=Deutsche Telekom Security GmbH,C=DE",
+      "subjectDN": "MF4xCzAJBgNVBAYTAkRFMScwJQYDVQQKDB5EZXV0c2NoZSBUZWxla29tIFNlY3VyaXR5IEdtYkgxJjAkBgNVBAMMHVRlbGVrb20gU2VjdXJpdHkgRVYgRUNDIENBIDIx",
+      "whitelist": false,
+      "attachment": {
+        "hash": "4f4daf4500b9bacbea50c20917d19002ef1208e32742fccb32f02df7db43b2a5",
+        "size": 1288,
+        "filename": "wKQk6Q6vo3QumTIMdfN6uOOZ9KiK-cNGuthhTM680bg=.pem",
+        "location": "security-state-staging/intermediates/db242b85-b8f1-4409-a396-8322b80fd901.pem",
+        "mimetype": "application/x-pem-file"
+      },
+      "pubKeyHash": "wKQk6Q6vo3QumTIMdfN6uOOZ9KiK+cNGuthhTM680bg=",
+      "crlite_enrolled": false,
+      "id": "cfda4980-a121-4cd5-83e7-7686f5c693ff",
+      "last_modified": 1709323057609
+    },
+    {
+      "schema": 1709322862349,
+      "derHash": "ckJBfbqtFKmzf6nNYL6lZU8gw7XvbeiD6V3cWNSFR6c=",
+      "subject": "CN=CloudSecure RSA Organization Validation Secure Server CA 2,O=CloudSecure Corporation,C=JP",
+      "subjectDN": "MHQxCzAJBgNVBAYTAkpQMSAwHgYDVQQKExdDbG91ZFNlY3VyZSBDb3Jwb3JhdGlvbjFDMEEGA1UEAxM6Q2xvdWRTZWN1cmUgUlNBIE9yZ2FuaXphdGlvbiBWYWxpZGF0aW9uIFNlY3VyZSBTZXJ2ZXIgQ0EgMg==",
+      "whitelist": false,
+      "attachment": {
+        "hash": "7a4f3f78fee45b90c27ad40e93823927b437902e6e57b223874fe3f383445197",
+        "size": 2304,
+        "filename": "Iu5dk2QcXxmoM5qhlUdD0pxpGFJGscbvGtxX_B-p5Kg=.pem",
+        "location": "security-state-staging/intermediates/59b4453f-c97e-4f86-8f39-cfa809c124ce.pem",
+        "mimetype": "application/x-pem-file"
+      },
+      "pubKeyHash": "Iu5dk2QcXxmoM5qhlUdD0pxpGFJGscbvGtxX/B+p5Kg=",
+      "crlite_enrolled": false,
+      "id": "14b4ae02-05a1-4223-a420-35328f2932ae",
+      "last_modified": 1709323057606
+    },
+    {
+      "schema": 1709322857090,
+      "derHash": "8BflEJGLd9pn5NAg4rdqQkYYdugi9iDFVzvLw7uzdAY=",
+      "subject": "CN=Gandi Secure Email CA,O=GANDI SAS,C=FR",
+      "subjectDN": "MEExCzAJBgNVBAYTAkZSMRIwEAYDVQQKEwlHQU5ESSBTQVMxHjAcBgNVBAMTFUdhbmRpIFNlY3VyZSBFbWFpbCBDQQ==",
+      "whitelist": false,
+      "attachment": {
+        "hash": "7374bb117a04dbe56b2af679a65a85a2c734afce7e88acb81917ecd528ba648e",
+        "size": 1719,
+        "filename": "iFIEeQ06wWLDY4tmZC6npViJr_VFbFCHUdRkqmIc7OY=.pem",
+        "location": "security-state-staging/intermediates/80641d57-3847-4459-9d66-f653dd7bfadc.pem",
+        "mimetype": "application/x-pem-file"
+      },
+      "pubKeyHash": "iFIEeQ06wWLDY4tmZC6npViJr/VFbFCHUdRkqmIc7OY=",
+      "crlite_enrolled": false,
+      "id": "61df2979-bddb-4586-94f1-15e23fe3c076",
+      "last_modified": 1709323057603
+    },
+    {
+      "schema": 1709322855985,
+      "derHash": "9ooj65c3qMdE7mcRLy/AJKrcUDu7sE8lze1PJXbJNIU=",
+      "subject": "CN=The Code Project Secure Email (S/mime) CA,O=The Code Project,C=CA",
+      "subjectDN": "MFwxCzAJBgNVBAYTAkNBMRkwFwYDVQQKExBUaGUgQ29kZSBQcm9qZWN0MTIwMAYDVQQDEylUaGUgQ29kZSBQcm9qZWN0IFNlY3VyZSBFbWFpbCAoUy9taW1lKSBDQQ==",
+      "whitelist": false,
+      "attachment": {
+        "hash": "e34a2353b9ea221ccf98cccc3d39c3562f1daceb776f42298bbc37afdd4fc54a",
+        "size": 1752,
+        "filename": "xtYGt02m4umLJCyy0kfaczCboF12WILjsGOb1umDfX0=.pem",
+        "location": "security-state-staging/intermediates/53d673f8-b2c7-4c5c-9730-8965f2ec1dcb.pem",
+        "mimetype": "application/x-pem-file"
+      },
+      "pubKeyHash": "xtYGt02m4umLJCyy0kfaczCboF12WILjsGOb1umDfX0=",
+      "crlite_enrolled": false,
+      "id": "81d6dcac-df61-4042-bd32-3070f7a85340",
+      "last_modified": 1709323057600
+    },
+    {
       "schema": 1705981670999,
       "derHash": "edV7Fd+mXChw6v4Rtjd2WQnP6Te0nBXOfxlAMMqzla0=",
       "subject": "CN=DigiCert Global Root G2,OU=www.digicert.com,O=DigiCert Inc,C=US",
@@ -6463,24 +6931,6 @@
       "last_modified": 1666727875111
     },
     {
-      "schema": 1666727370608,
-      "derHash": "rB7FVjGOPqcPjwTgOg8mM7/nOZI1moEBRf/fGkJzlu4=",
-      "subject": "CN=TeleSec ServerPass Class 2 CA,OU=T-Systems Trust Center,O=T-Systems International GmbH,POSTALCODE=57250,STREET=Untere Industriestr. 20,L=Netphen,ST=Nordrhein Westfalen,C=DE",
-      "subjectDN": "MIHfMQswCQYDVQQGEwJERTElMCMGA1UECgwcVC1TeXN0ZW1zIEludGVybmF0aW9uYWwgR21iSDEfMB0GA1UECwwWVC1TeXN0ZW1zIFRydXN0IENlbnRlcjEcMBoGA1UECAwTTm9yZHJoZWluIFdlc3RmYWxlbjEOMAwGA1UEEQwFNTcyNTAxEDAOBgNVBAcMB05ldHBoZW4xIDAeBgNVBAkMF1VudGVyZSBJbmR1c3RyaWVzdHIuIDIwMSYwJAYDVQQDDB1UZWxlU2VjIFNlcnZlclBhc3MgQ2xhc3MgMiBDQQ==",
-      "whitelist": false,
-      "attachment": {
-        "hash": "76978532a4380253c7bbfe0ea07b7f0f9f595824a78f411a83835514c3a8d76f",
-        "size": 2052,
-        "filename": "c3jf-L8VIAFQnJJDM6Mfb4MtI1JnhVS8JwZHMwJj28M=.pem",
-        "location": "security-state-staging/intermediates/54f348f3-2ed6-4b67-a108-3c418ed93826.pem",
-        "mimetype": "application/x-pem-file"
-      },
-      "pubKeyHash": "c3jf+L8VIAFQnJJDM6Mfb4MtI1JnhVS8JwZHMwJj28M=",
-      "crlite_enrolled": false,
-      "id": "b19a4517-16ee-477e-bdf2-a6c9a655f216",
-      "last_modified": 1666727875082
-    },
-    {
       "schema": 1666727379977,
       "derHash": "ecQJGwWxXBaDEot6NV4KrWLhu7w+Xzc1NwwGzE0a+0Q=",
       "subject": "CN=CrossTrust OV CA5,O=SECOM Trust Systems CO.\\,LTD.,C=JP",
@@ -6643,24 +7093,6 @@
       "last_modified": 1666727874900
     },
     {
-      "schema": 1666727373959,
-      "derHash": "igrdrk8s+dLCTXpJ7tXIbIsd8chbpz3lxHfLFPoNE+k=",
-      "subject": "CN=TeleSec ServerPass Extended Validation Class 3 CA,OU=T-Systems Trust Center,O=T-Systems International GmbH,POSTALCODE=57250,STREET=Untere Industriestr. 20,L=Netphen,ST=Nordrhein Westfalen,C=DE",
-      "subjectDN": "MIHzMQswCQYDVQQGEwJERTElMCMGA1UECgwcVC1TeXN0ZW1zIEludGVybmF0aW9uYWwgR21iSDEfMB0GA1UECwwWVC1TeXN0ZW1zIFRydXN0IENlbnRlcjEcMBoGA1UECAwTTm9yZHJoZWluIFdlc3RmYWxlbjEOMAwGA1UEEQwFNTcyNTAxEDAOBgNVBAcMB05ldHBoZW4xIDAeBgNVBAkMF1VudGVyZSBJbmR1c3RyaWVzdHIuIDIwMTowOAYDVQQDDDFUZWxlU2VjIFNlcnZlclBhc3MgRXh0ZW5kZWQgVmFsaWRhdGlvbiBDbGFzcyAzIENB",
-      "whitelist": false,
-      "attachment": {
-        "hash": "6a9bc970754ff10c0c32a05c6c462115e39db917fcb15d1f1100b01b47dd134b",
-        "size": 2081,
-        "filename": "MTsGouOKFT5kWxvdmCP_-h4QV7TzhyPSvGXJhG-g5f0=.pem",
-        "location": "security-state-staging/intermediates/05b2e8d3-5c0a-4ac8-a431-6bdcf5338f52.pem",
-        "mimetype": "application/x-pem-file"
-      },
-      "pubKeyHash": "MTsGouOKFT5kWxvdmCP/+h4QV7TzhyPSvGXJhG+g5f0=",
-      "crlite_enrolled": false,
-      "id": "a0ea2a21-fe38-42f0-9e75-2978ac3f1b2b",
-      "last_modified": 1666727874885
-    },
-    {
       "schema": 1666727352661,
       "derHash": "TWcjeyz6z/893IPC/xySqOCpinG9BO05+K/0Kq+ZNx0=",
       "subject": "CN=Shuidi Webtrust SSL Domain Validated,O=Shanghai Ping An Credit Reference Company Limited,C=CN",
@@ -7093,24 +7525,6 @@
       "last_modified": 1666727874516
     },
     {
-      "schema": 1666727336158,
-      "derHash": "dO8zXl4YeIMH+52Jy3BL7BEqvSNIfb/0HE3tUHDyQdk=",
-      "subject": "CN=GlobalSign Organization Validation CA - SHA256 - G2,O=GlobalSign nv-sa,C=BE",
-      "subjectDN": "MGYxCzAJBgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMTwwOgYDVQQDEzNHbG9iYWxTaWduIE9yZ2FuaXphdGlvbiBWYWxpZGF0aW9uIENBIC0gU0hBMjU2IC0gRzI=",
-      "whitelist": false,
-      "attachment": {
-        "hash": "d127064c98a35e06b558457e35c1d15905d100eb14b73d7fd679b978441b5b0f",
-        "size": 1589,
-        "filename": "IQBnNBEiFuhj-8x6X8XLgh01V9Ic5_V3IRQLNFFc7v4=.pem",
-        "location": "security-state-staging/intermediates/a6c94cd4-4f33-46e2-8858-3eacc056bb12.pem",
-        "mimetype": "application/x-pem-file"
-      },
-      "pubKeyHash": "IQBnNBEiFuhj+8x6X8XLgh01V9Ic5/V3IRQLNFFc7v4=",
-      "crlite_enrolled": false,
-      "id": "f4e16820-98b9-49a9-8e18-7494d1d0dd70",
-      "last_modified": 1666727874502
-    },
-    {
       "schema": 1666727351122,
       "derHash": "OwzCA4StfyTrQ48rgMY+vgA/fyFbiHfkGOuwSEAo21c=",
       "subject": "CN=Entrust Certification Authority - L1K,OU=See www.entrust.net/legal-terms+OU=(c) 2012 Entrust\\, Inc. - for authorized use only,O=Entrust\\, Inc.,C=US",
@@ -7129,24 +7543,6 @@
       "last_modified": 1666727874488
     },
     {
-      "schema": 1666727357441,
-      "derHash": "jCQQ92sUnKBitCCrYRtr8KBubnmaKVh+TU7BbQU3t+o=",
-      "subject": "CN=AlphaSSL CA - SHA256 - G2,O=GlobalSign nv-sa,C=BE",
-      "subjectDN": "MEwxCzAJBgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMSIwIAYDVQQDExlBbHBoYVNTTCBDQSAtIFNIQTI1NiAtIEcy",
-      "whitelist": false,
-      "attachment": {
-        "hash": "251b1c75021f8bc991e5055b95dc85d55b230fe1e51032acec934db9388e32bb",
-        "size": 1548,
-        "filename": "amMeV6gb9QNx0Zf7FtJ19Wa_t2B7KpCF_1n2Js3UuSU=.pem",
-        "location": "security-state-staging/intermediates/9f419b94-c769-4b88-9c1a-b128ea2e4c7f.pem",
-        "mimetype": "application/x-pem-file"
-      },
-      "pubKeyHash": "amMeV6gb9QNx0Zf7FtJ19Wa/t2B7KpCF/1n2Js3UuSU=",
-      "crlite_enrolled": false,
-      "id": "d511b39d-be68-4a28-831e-12c61c4a9c8f",
-      "last_modified": 1666727874475
-    },
-    {
       "schema": 1666727347154,
       "derHash": "9cLyPGUY+dGbbzm+rqT7rhADG6ncmFzhVjpSDaCtQRY=",
       "subject": "CN=Entrust Certification Authority - L1K,OU=See www.entrust.net/legal-terms+OU=(c) 2012 Entrust\\, Inc. - for authorized use only,O=Entrust\\, Inc.,C=US",
@@ -7165,42 +7561,6 @@
       "last_modified": 1666727874460
     },
     {
-      "schema": 1666727374297,
-      "derHash": "WoF+raSteHNOuyz2dDUtl/Q1IpDEDq8Q52Sx6sB1sOY=",
-      "subject": "CN=AlphaSSL CA - SHA256 - G2,O=GlobalSign nv-sa,C=BE",
-      "subjectDN": "MEwxCzAJBgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMSIwIAYDVQQDExlBbHBoYVNTTCBDQSAtIFNIQTI1NiAtIEcy",
-      "whitelist": false,
-      "attachment": {
-        "hash": "9e22882f79ab3be980839bd320927657c042801062d09965a2ee7f9c37cb5ebb",
-        "size": 1553,
-        "filename": "amMeV6gb9QNx0Zf7FtJ19Wa_t2B7KpCF_1n2Js3UuSU=.pem",
-        "location": "security-state-staging/intermediates/eeca1f4a-6a10-4a9d-9ee9-def181a418dc.pem",
-        "mimetype": "application/x-pem-file"
-      },
-      "pubKeyHash": "amMeV6gb9QNx0Zf7FtJ19Wa/t2B7KpCF/1n2Js3UuSU=",
-      "crlite_enrolled": false,
-      "id": "7266f37e-582e-4266-8b74-bc9fb7fd3dd4",
-      "last_modified": 1666727874446
-    },
-    {
-      "schema": 1666727452824,
-      "derHash": "7nk2QxmUdO1g79yMzeTTdEWSFoNZOqdRu/juSRo5Hpc=",
-      "subject": "CN=AlphaSSL CA - SHA256 - G2,O=GlobalSign nv-sa,C=BE",
-      "subjectDN": "MEwxCzAJBgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMSIwIAYDVQQDExlBbHBoYVNTTCBDQSAtIFNIQTI1NiAtIEcy",
-      "whitelist": false,
-      "attachment": {
-        "hash": "c96caf591ca234c790ecd0c0142086ce1cbad337effe808b85d29665b86b6406",
-        "size": 1552,
-        "filename": "amMeV6gb9QNx0Zf7FtJ19Wa_t2B7KpCF_1n2Js3UuSU=.pem",
-        "location": "security-state-staging/intermediates/79818100-f277-4947-a852-dfbece0f18ac.pem",
-        "mimetype": "application/x-pem-file"
-      },
-      "pubKeyHash": "amMeV6gb9QNx0Zf7FtJ19Wa/t2B7KpCF/1n2Js3UuSU=",
-      "crlite_enrolled": false,
-      "id": "624fd6dc-c0b6-4c85-8fb1-295b309ec7f8",
-      "last_modified": 1666727874432
-    },
-    {
       "schema": 1666727428816,
       "derHash": "C0Bc/ppr6wmP+5aRIcX2cQ8/f6nqEBpkGPevIB09OTg=",
       "subject": "CN=Apple Public Server RSA CA 12 - G1,O=Apple Inc.,ST=California,C=US",
@@ -7255,24 +7615,6 @@
       "last_modified": 1666727874390
     },
     {
-      "schema": 1666727434937,
-      "derHash": "v99M8/FDrQ25EtirOnwS9he56mDOix9ORPdCcPshsZs=",
-      "subject": "CN=GlobalSign Domain Validation CA - SHA256 - G2,O=GlobalSign nv-sa,C=BE",
-      "subjectDN": "MGAxCzAJBgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMTYwNAYDVQQDEy1HbG9iYWxTaWduIERvbWFpbiBWYWxpZGF0aW9uIENBIC0gU0hBMjU2IC0gRzI=",
-      "whitelist": false,
-      "attachment": {
-        "hash": "afa822a679ac53a1fe787fd1b3418ea474613a029a776a216762efa2b870ff8b",
-        "size": 1581,
-        "filename": "PL1_TTDEe9Cm2lb2X0tixyQC7zaPREm_V0IHJscTCmw=.pem",
-        "location": "security-state-staging/intermediates/0ff9bf8a-8c2d-458a-843f-714bb4ae0838.pem",
-        "mimetype": "application/x-pem-file"
-      },
-      "pubKeyHash": "PL1/TTDEe9Cm2lb2X0tixyQC7zaPREm/V0IHJscTCmw=",
-      "crlite_enrolled": false,
-      "id": "391141f8-c2c2-411c-b042-418ab514fd96",
-      "last_modified": 1666727874376
-    },
-    {
       "schema": 1666727414953,
       "derHash": "6k7i+qV65LU5tjl3/luyBbavsy96c7KzY+S+As2Kkek=",
       "subject": "CN=AffirmTrust Certificate Authority - OV1,OU=See www.affirmtrust.com/repository,O=AffirmTrust,C=CA",
@@ -7417,42 +7759,6 @@
       "last_modified": 1666727874260
     },
     {
-      "schema": 1666727437501,
-      "derHash": "N9CApemlJmY+Vu4g3kvZ95UtrMNBSRQ5CAFnrV3RjKw=",
-      "subject": "CN=GlobalSign Domain Validation CA - SHA256 - G2,O=GlobalSign nv-sa,C=BE",
-      "subjectDN": "MGAxCzAJBgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMTYwNAYDVQQDEy1HbG9iYWxTaWduIERvbWFpbiBWYWxpZGF0aW9uIENBIC0gU0hBMjU2IC0gRzI=",
-      "whitelist": false,
-      "attachment": {
-        "hash": "8084973f28f9bb8da2dddef1086d13c58d35fafd5b6cd1cf19b002ea327410a9",
-        "size": 1577,
-        "filename": "PL1_TTDEe9Cm2lb2X0tixyQC7zaPREm_V0IHJscTCmw=.pem",
-        "location": "security-state-staging/intermediates/cd733eb5-cc1a-4fa5-b47c-ba77042e0a43.pem",
-        "mimetype": "application/x-pem-file"
-      },
-      "pubKeyHash": "PL1/TTDEe9Cm2lb2X0tixyQC7zaPREm/V0IHJscTCmw=",
-      "crlite_enrolled": false,
-      "id": "0d02c2ec-63df-4380-9e5d-1efee98dd704",
-      "last_modified": 1666727874245
-    },
-    {
-      "schema": 1666727382691,
-      "derHash": "HJc36Witnf+NjX/PmWoUS7l4UaGQEaAZDJQ8ro1Dz+A=",
-      "subject": "CN=GlobalSign Organization Validation CA - SHA256 - G2,O=GlobalSign nv-sa,C=BE",
-      "subjectDN": "MGYxCzAJBgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMTwwOgYDVQQDEzNHbG9iYWxTaWduIE9yZ2FuaXphdGlvbiBWYWxpZGF0aW9uIENBIC0gU0hBMjU2IC0gRzI=",
-      "whitelist": false,
-      "attachment": {
-        "hash": "b57a3d5029c97a35bb6880a05ad369fcc13be288c141ba5be144c0ae53d84579",
-        "size": 1585,
-        "filename": "IQBnNBEiFuhj-8x6X8XLgh01V9Ic5_V3IRQLNFFc7v4=.pem",
-        "location": "security-state-staging/intermediates/2c443791-49a4-46c3-a27f-7b2599e100bf.pem",
-        "mimetype": "application/x-pem-file"
-      },
-      "pubKeyHash": "IQBnNBEiFuhj+8x6X8XLgh01V9Ic5/V3IRQLNFFc7v4=",
-      "crlite_enrolled": false,
-      "id": "75e1b780-8583-4cab-9027-6f97f24c19ab",
-      "last_modified": 1666727874230
-    },
-    {
       "schema": 1666727417691,
       "derHash": "a6qwxDPXef1qS21W1jBNXm6l3mif41pDA4pAKPNF32A=",
       "subject": "CN=TrustID Server CA O1,OU=TrustID Server,O=IdenTrust,C=US",
@@ -8641,24 +8947,6 @@
       "last_modified": 1666727873224
     },
     {
-      "schema": 1666727429510,
-      "derHash": "odJdKJQfr8DCpuueWWpUeG5zHQpKjjIdufHPLCT91gk=",
-      "subject": "CN=Actalis Authentication CA G3,O=Actalis S.p.A./03358520967,L=Milano,ST=Milano,C=IT",
-      "subjectDN": "MHsxCzAJBgNVBAYTAklUMQ8wDQYDVQQIDAZNaWxhbm8xDzANBgNVBAcMBk1pbGFubzEjMCEGA1UECgwaQWN0YWxpcyBTLnAuQS4vMDMzNTg1MjA5NjcxJTAjBgNVBAMMHEFjdGFsaXMgQXV0aGVudGljYXRpb24gQ0EgRzM=",
-      "whitelist": false,
-      "attachment": {
-        "hash": "460a8caeba0a48e1b86b9aa61e29fe8358616f76304f1fbd67cb2527e77b9037",
-        "size": 2243,
-        "filename": "qqFYlKc1lGtPZDV3-S2Iiq7okt-fD5tWC2AM1QEBmEg=.pem",
-        "location": "security-state-staging/intermediates/8b0fb3aa-de5c-498b-ab03-3d295c24ca08.pem",
-        "mimetype": "application/x-pem-file"
-      },
-      "pubKeyHash": "qqFYlKc1lGtPZDV3+S2Iiq7okt+fD5tWC2AM1QEBmEg=",
-      "crlite_enrolled": false,
-      "id": "0fdbe9d5-d2f3-4438-9a51-df510e92865a",
-      "last_modified": 1666727873210
-    },
-    {
       "schema": 1666727348199,
       "derHash": "MlNBL9rUUjEIwJi7DuDv7df6/dAPsw5Hxrup/j4c24g=",
       "subject": "CN=GDCA TrustAUTH R4 Primer CA,O=Global Digital Cybersecurity Authority Co.\\, Ltd.,C=CN",
@@ -13249,24 +13537,6 @@
       "last_modified": 1666727868960
     },
     {
-      "schema": 1666727401317,
-      "derHash": "rXtYw8XZWGvltieZwnksQRHJhSqW97BgciEmVxOVfhw=",
-      "subject": "CN=SHECA OV Secure Server CA,O=Shanghai Electronic Certificate Authority Center Co.\\, Ltd.,C=CN",
-      "subjectDN": "MHYxCzAJBgNVBAYTAkNOMUMwQQYDVQQKEzpTaGFuZ2hhaSBFbGVjdHJvbmljIENlcnRpZmljYXRlIEF1dGhvcml0eSBDZW50ZXIgQ28uLCBMdGQuMSIwIAYDVQQDExlTSEVDQSBPViBTZWN1cmUgU2VydmVyIENB",
-      "whitelist": false,
-      "attachment": {
-        "hash": "64ac68b2f5fcfe1eb5b26d7d052a52af0101c298fc359ab1870916a82601f563",
-        "size": 1808,
-        "filename": "GvyQK0TA2Qh-B1rvOMI28XPmBiJD59lQrwz_N-iQO_U=.pem",
-        "location": "security-state-staging/intermediates/14f1f288-759d-4d00-9fae-c994e6f0a083.pem",
-        "mimetype": "application/x-pem-file"
-      },
-      "pubKeyHash": "GvyQK0TA2Qh+B1rvOMI28XPmBiJD59lQrwz/N+iQO/U=",
-      "crlite_enrolled": false,
-      "id": "48160348-dc77-4cd6-a4ee-d0b2e5af46c1",
-      "last_modified": 1666727868947
-    },
-    {
       "schema": 1666727370282,
       "derHash": "tn5OkihuFoqRbz28rcPwuD28CtvkP5lcH6rTFt3sddg=",
       "subject": "CN=HARICA Institutional TLS ECC,O=Hellenic Academic and Research Institutions CA,C=GR",
@@ -26821,42 +27091,6 @@
       "last_modified": 1614391116607
     },
     {
-      "schema": 1614347385669,
-      "derHash": "53V7sMSUKtwQjQkqF7gSsQQ+BqCU3V4hSSAyVVb8aSQ=",
-      "subject": "CN=GlobalSign Atlas ECCR5 DV ACME CA H1 2021,O=GlobalSign nv-sa,C=BE",
-      "subjectDN": "MFwxCzAJBgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMTIwMAYDVQQDEylHbG9iYWxTaWduIEF0bGFzIEVDQ1I1IERWIEFDTUUgQ0EgSDEgMjAyMQ==",
-      "whitelist": false,
-      "attachment": {
-        "hash": "d9217d113322b9cf222dbe85daabf40eaaa3d45f5518e8a803c5e9dac93bb187",
-        "size": 1272,
-        "filename": "V0xNdlxJlHA3lQdmPpnJgTwbm35n5XTazRe-_ohJSNw=.pem",
-        "location": "security-state-staging/intermediates/9c59ec46-f8e2-40c9-9fef-e2bf9b8e2c2f.pem",
-        "mimetype": "application/x-pem-file"
-      },
-      "pubKeyHash": "V0xNdlxJlHA3lQdmPpnJgTwbm35n5XTazRe+/ohJSNw=",
-      "crlite_enrolled": false,
-      "id": "cb931ed5-0b1a-4983-9253-022580174337",
-      "last_modified": 1614347896133
-    },
-    {
-      "schema": 1614347387466,
-      "derHash": "cPXGPE8RKDermYcLDstdci7qCw0N25MguYuZub0TeGY=",
-      "subject": "CN=GlobalSign Atlas R3 DV ACME CA H1 2021,O=GlobalSign nv-sa,C=BE",
-      "subjectDN": "MFkxCzAJBgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMS8wLQYDVQQDEyZHbG9iYWxTaWduIEF0bGFzIFIzIERWIEFDTUUgQ0EgSDEgMjAyMQ==",
-      "whitelist": false,
-      "attachment": {
-        "hash": "dba2c8c488827ab57a0aa66429277371e6d16435b67eba8972c4867e8498e8bf",
-        "size": 1715,
-        "filename": "MVSCqWQ2ilG7XoFYbonhfSF1W0r--ld_VUmz6Qp4U2o=.pem",
-        "location": "security-state-staging/intermediates/e9bb7fb9-e949-41be-9fe6-49ec9fd2d755.pem",
-        "mimetype": "application/x-pem-file"
-      },
-      "pubKeyHash": "MVSCqWQ2ilG7XoFYbonhfSF1W0r++ld/VUmz6Qp4U2o=",
-      "crlite_enrolled": false,
-      "id": "836b982b-2923-4f21-a669-3b1ebbf6f665",
-      "last_modified": 1614347896121
-    },
-    {
       "schema": 1611280168224,
       "derHash": "JpesuWpJviv8XAbDk5SfDY51EGrW1Mc+LaFyqQgxqFo=",
       "subject": "CN=Abbott Laboratories Secure Authentication CA G2,O=Abbott Laboratories Inc.,C=US",
@@ -29917,5 +30151,5 @@
       "last_modified": 1559865884636
     }
   ],
-  "timestamp": 1705982223073
+  "timestamp": 1709780223348
 }
diff --git a/services/settings/dumps/security-state/onecrl.json b/services/settings/dumps/security-state/onecrl.json
index bce3255539..86c2812f5e 100644
--- a/services/settings/dumps/security-state/onecrl.json
+++ b/services/settings/dumps/security-state/onecrl.json
@@ -1,6 +1,21 @@
 {
   "data": [
     {
+      "schema": 1709632813150,
+      "details": {
+        "bug": "https://bugzilla.mozilla.org/show_bug.cgi?id=1879046",
+        "who": "dkeeler@mozilla.com",
+        "why": "Kazakhstan MITM (#10)",
+        "name": "Information Security Certification Authority",
+        "created": ""
+      },
+      "enabled": true,
+      "issuerName": "MFMxNTAzBgNVBAMTLEluZm9ybWF0aW9uIFNlY3VyaXR5IENlcnRpZmljYXRpb24gQXV0aG9yaXR5MQ0wCwYDVQQKEwRJU0NBMQswCQYDVQQGEwJLWg==",
+      "serialNumber": "MgQS30wvsQLzmAyqdrphCuYshJI=",
+      "id": "2e32f465-fab4-4365-94d8-9a83041e660a",
+      "last_modified": 1709673810455
+    },
+    {
       "schema": 1701882093709,
       "details": {
         "bug": "https://bugzilla.mozilla.org/show_bug.cgi?id=1868611",
@@ -24031,5 +24046,5 @@
       "last_modified": 1480349158647
     }
   ],
-  "timestamp": 1701989913617
+  "timestamp": 1709673810455
 }