# One blacklist entry per line, corresponding to the label in certdata.txt.

# Blacklist explicitly distrusted certificates
# They were already to-be-excluded since they are distrusted, but this
# silences the loud warning they produce.
"Distrust: O=Egypt Trust, OU=VeriSign Trust Network (cert 1/3)"
"Distrust: O=Egypt Trust, OU=VeriSign Trust Network (cert 2/3)"
"Distrust: O=Egypt Trust, OU=VeriSign Trust Network (cert 3/3)"
"Explicitly Distrust DigiNotar Root CA"
"Explicitly Distrusted DigiNotar PKIoverheid G2"
"MITM subCA 1 issued by Trustwave"
"MITM subCA 2 issued by Trustwave"
"TURKTRUST Mis-issued Intermediate CA 1"
"TURKTRUST Mis-issued Intermediate CA 2"

# Expired certificates
# Not Valid Before: Tue May 30 10:48:38 2000
# Not Valid After : Sat May 30 10:48:38 2020
"AddTrust External Root"
# Not Valid Before: Wed Mar 26 11:18:17 2008
# Not Valid After : Wed Mar 25 11:03:10 2020
"Staat der Nederlanden Root CA - G2"