Automatic update from google3

Automatic update for 2022-04-01 UTC

Change-Id: I01b44a578e9c2fa15037a6a21f8ccc1c5870b053
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/3564712
Commit-Queue: CT Log list updates bot <mdb.chrome-pki-metadata@google.com>
Bot-Commit: CT Log list updates bot <mdb.chrome-pki-metadata@google.com>
Cr-Commit-Position: refs/branch-heads/4951@{#336}
Cr-Branched-From: 27de6227ca357da0d57ae2c7b18da170c4651438-refs/heads/main@{#982481}
diff --git a/components/certificate_transparency/data/log_list.json b/components/certificate_transparency/data/log_list.json
index 01e2a5f..0b59e5ee 100644
--- a/components/certificate_transparency/data/log_list.json
+++ b/components/certificate_transparency/data/log_list.json
@@ -1,6 +1,6 @@
 {
-  "version": "7.3",
-  "log_list_timestamp": "2022-03-17T01:34:25Z",
+  "version": "7.20",
+  "log_list_timestamp": "2022-04-01T02:54:38Z",
   "operators": [
     {
       "name": "Google",
diff --git a/net/data/ssl/chrome_root_store/root_store.certs b/net/data/ssl/chrome_root_store/root_store.certs
index 87d34986..32fc0eb 100644
--- a/net/data/ssl/chrome_root_store/root_store.certs
+++ b/net/data/ssl/chrome_root_store/root_store.certs
@@ -5955,127 +5955,6 @@
 uu8wd+RU4riEmViAqhOLUTpPSPaLtrM=
 -----END CERTIFICATE-----
 
-# 3c4fb0b95ab8b30032f432b86f535fe172c185d0fd39865837cf36187fa6f428
-Certificate:
-    Data:
-        Version: 3 (0x2)
-        Serial Number: 10003001 (0x98a239)
-        Signature Algorithm: sha256WithRSAEncryption
-        Issuer: C = NL, O = Staat der Nederlanden, CN = Staat der Nederlanden Root CA - G3
-        Validity
-            Not Before: Nov 14 11:28:42 2013 GMT
-            Not After : Nov 13 23:00:00 2028 GMT
-        Subject: C = NL, O = Staat der Nederlanden, CN = Staat der Nederlanden Root CA - G3
-        Subject Public Key Info:
-            Public Key Algorithm: rsaEncryption
-                RSA Public-Key: (4096 bit)
-                Modulus:
-                    00:be:32:a2:54:0f:70:fb:2c:5c:59:eb:6c:c4:a4:
-                    51:e8:85:2a:b3:cc:4a:34:f2:b0:5f:f3:0e:c7:1c:
-                    3d:53:1e:88:08:68:d8:6f:3d:ad:c2:9e:cc:82:67:
-                    07:27:87:68:71:3a:9f:75:96:22:46:05:b0:ed:ad:
-                    c7:5b:9e:2a:de:9c:fc:3a:c6:95:a7:f5:17:67:18:
-                    e7:2f:49:08:0c:5c:cf:e6:cc:34:ed:78:fb:50:b1:
-                    dc:6b:32:f0:a2:fe:b6:3c:e4:ec:5a:97:c7:3f:1e:
-                    70:08:30:a0:dc:c5:b3:6d:6f:d0:82:72:11:ab:d2:
-                    81:68:59:82:17:b7:78:92:60:fa:cc:de:3f:84:eb:
-                    8d:38:33:90:0a:72:23:fa:35:cc:26:71:31:d1:72:
-                    28:92:d9:5b:23:6d:66:b5:6d:07:42:eb:a6:33:ce:
-                    92:db:c0:f6:6c:63:78:cd:ca:4e:3d:b5:e5:52:9b:
-                    f1:be:3b:e6:54:60:b0:66:1e:09:ab:07:fe:54:89:
-                    11:42:d1:f7:24:ba:60:78:1a:98:f7:c9:11:fd:16:
-                    c1:35:1a:54:75:ef:43:d3:e5:ae:4e:ce:e7:7b:c3:
-                    c6:4e:61:51:4b:ab:9a:45:4b:a1:1f:41:bd:48:53:
-                    15:71:64:0b:86:b3:e5:2e:be:ce:a4:1b:c1:29:84:
-                    a2:b5:cb:08:23:76:43:22:24:1f:17:04:d4:6e:9c:
-                    c6:fc:7f:2b:66:1a:ec:8a:e5:d6:cf:4d:f5:63:09:
-                    b7:15:39:d6:7b:ac:eb:e3:7c:e9:4e:fc:75:42:c8:
-                    ed:58:95:0c:06:42:a2:9c:f7:e4:70:b3:df:72:6f:
-                    5a:37:40:89:d8:85:a4:d7:f1:0b:de:43:19:d4:4a:
-                    58:2c:8c:8a:39:9e:bf:84:87:f1:16:3b:36:0c:e9:
-                    d3:b4:ca:6c:19:41:52:09:a1:1d:b0:6a:bf:82:ef:
-                    70:51:21:32:dc:05:76:8c:cb:f7:64:e4:03:50:af:
-                    8c:91:67:ab:c5:f2:ee:58:d8:de:be:f7:e7:31:cf:
-                    6c:c9:3b:71:c1:d5:88:b5:65:bc:c0:e8:17:17:07:
-                    12:b5:5c:d2:ab:20:93:b4:e6:82:83:70:36:c5:cd:
-                    a3:8d:ad:8b:ec:a3:c1:43:87:e6:43:e2:34:be:95:
-                    8b:35:ed:07:39:da:a8:1d:7a:9f:36:9e:12:b0:0c:
-                    65:12:90:15:60:d9:26:40:44:e3:56:60:a5:10:d4:
-                    6a:3c:fd:41:dc:0e:5a:47:b6:ef:97:61:75:4f:d9:
-                    fe:c7:b2:1d:d4:ed:5d:49:b3:a9:6a:cb:66:84:13:
-                    d5:5c:a0:dc:df:6e:77:06:d1:71:75:c8:57:6f:af:
-                    0f:77:5b
-                Exponent: 65537 (0x10001)
-        X509v3 extensions:
-            X509v3 Basic Constraints: critical
-                CA:TRUE
-            X509v3 Key Usage: critical
-                Certificate Sign, CRL Sign
-            X509v3 Subject Key Identifier: 
-                54:AD:FA:C7:92:57:AE:CA:35:9C:2E:12:FB:E4:BA:5D:20:DC:94:57
-    Signature Algorithm: sha256WithRSAEncryption
-         30:99:9d:05:32:c8:5e:0e:3b:98:01:3a:8a:a4:e7:07:f7:7a:
-         f8:e7:9a:df:50:43:53:97:2a:3d:ca:3c:47:98:2e:e1:15:7b:
-         f1:92:f3:61:da:90:25:16:65:c0:9f:54:5d:0e:03:3b:5b:77:
-         02:9c:84:b6:0d:98:5f:34:dd:3b:63:c2:c3:28:81:c2:9c:29:
-         2e:29:e2:c8:c3:01:f2:33:ea:2a:aa:cc:09:08:f7:65:67:c6:
-         cd:df:d3:b6:2b:a7:bd:cc:d1:0e:70:5f:b8:23:d1:cb:91:4e:
-         0a:f4:c8:7a:e5:d9:63:36:c1:d4:df:fc:22:97:f7:60:5d:ea:
-         29:2f:58:b2:bd:58:bd:8d:96:4f:10:75:bf:48:7b:3d:51:87:
-         a1:3c:74:22:c2:fc:07:7f:80:dc:c4:ac:fe:6a:c1:70:30:b0:
-         e9:8e:69:e2:2c:69:81:94:09:ba:dd:fe:4d:c0:83:8c:94:58:
-         c0:46:20:af:9c:1f:02:f8:35:55:49:2f:46:d4:c0:f0:a0:96:
-         02:0f:33:c5:71:f3:9e:23:7d:94:b7:fd:3a:d3:09:83:06:21:
-         fd:60:3d:ae:32:c0:d2:ee:8d:a6:f0:e7:b4:82:7c:0a:cc:70:
-         c9:79:80:f8:fe:4c:f7:35:84:19:8a:31:fb:0a:d9:d7:7f:9b:
-         f0:a2:9a:6b:c3:05:4a:ed:41:60:14:30:d1:aa:11:42:6e:d3:
-         23:02:04:0b:c6:65:dd:dd:52:77:da:81:6b:b2:a8:fa:01:38:
-         b9:96:ea:2a:6c:67:97:89:94:9e:bc:e1:54:d5:e4:6a:78:ef:
-         4a:bd:2b:9a:3d:40:7e:c6:c0:75:d2:6e:fb:68:30:ec:ec:8b:
-         9d:f9:49:35:9a:1a:2c:d9:b3:95:39:d5:1e:92:f7:a6:b9:65:
-         2f:e5:3d:6d:3a:48:4c:08:dc:e4:28:12:28:be:7d:35:5c:ea:
-         e0:16:7e:13:1b:6a:d7:3e:d7:9e:fc:2d:75:b2:c1:14:d5:23:
-         03:db:5b:6f:0b:3e:78:2f:0d:de:33:8d:16:b7:48:e7:83:9a:
-         81:0f:7b:c1:43:4d:55:04:17:38:4a:51:d5:59:a2:89:74:d3:
-         9f:be:1e:4b:d7:c6:6d:b7:88:24:6f:60:91:a4:82:85:5b:56:
-         41:bc:d0:44:ab:6a:13:be:d1:2c:58:b7:12:33:58:b2:37:63:
-         dc:13:f5:94:1d:3f:40:51:f5:4f:f5:3a:ed:c8:c5:eb:c2:1e:
-         1d:16:95:7a:c7:7e:42:71:93:6e:4b:15:b7:30:df:aa:ed:57:
-         85:48:ac:1d:6a:dd:39:69:e4:e1:79:78:be:ce:05:bf:a1:0c:
-         f7:80:7b:21:67:27:30:59
------BEGIN CERTIFICATE-----
-MIIFdDCCA1ygAwIBAgIEAJiiOTANBgkqhkiG9w0BAQsFADBaMQswCQYDVQQGEwJO
-TDEeMBwGA1UECgwVU3RhYXQgZGVyIE5lZGVybGFuZGVuMSswKQYDVQQDDCJTdGFh
-dCBkZXIgTmVkZXJsYW5kZW4gUm9vdCBDQSAtIEczMB4XDTEzMTExNDExMjg0MloX
-DTI4MTExMzIzMDAwMFowWjELMAkGA1UEBhMCTkwxHjAcBgNVBAoMFVN0YWF0IGRl
-ciBOZWRlcmxhbmRlbjErMCkGA1UEAwwiU3RhYXQgZGVyIE5lZGVybGFuZGVuIFJv
-b3QgQ0EgLSBHMzCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAL4yolQP
-cPssXFnrbMSkUeiFKrPMSjTysF/zDsccPVMeiAho2G89rcKezIJnByeHaHE6n3WW
-IkYFsO2tx1ueKt6c/DrGlaf1F2cY5y9JCAxcz+bMNO14+1Cx3Gsy8KL+tjzk7FqX
-xz8ecAgwoNzFs21v0IJyEavSgWhZghe3eJJg+szeP4TrjTgzkApyI/o1zCZxMdFy
-KJLZWyNtZrVtB0LrpjPOktvA9mxjeM3KTj215VKb8b475lRgsGYeCasH/lSJEULR
-9yS6YHgamPfJEf0WwTUaVHXvQ9Plrk7O53vDxk5hUUurmkVLoR9BvUhTFXFkC4az
-5S6+zqQbwSmEorXLCCN2QyIkHxcE1G6cxvx/K2Ya7Irl1s9N9WMJtxU51nus6+N8
-6U78dULI7ViVDAZCopz35HCz33JvWjdAidiFpNfxC95DGdRKWCyMijmev4SH8RY7
-Ngzp07TKbBlBUgmhHbBqv4LvcFEhMtwFdozL92TkA1CvjJFnq8Xy7ljY3r735zHP
-bMk7ccHViLVlvMDoFxcHErVc0qsgk7TmgoNwNsXNo42ti+yjwUOH5kPiNL6VizXt
-BznaqB16nzaeErAMZRKQFWDZJkBE41ZgpRDUajz9QdwOWke275dhdU/Z/seyHdTt
-XUmzqWrLZoQT1Vyg3N9udwbRcXXIV2+vD3dbAgMBAAGjQjBAMA8GA1UdEwEB/wQF
-MAMBAf8wDgYDVR0PAQH/BAQDAgEGMB0GA1UdDgQWBBRUrfrHkleuyjWcLhL75Lpd
-INyUVzANBgkqhkiG9w0BAQsFAAOCAgEAMJmdBTLIXg47mAE6iqTnB/d6+Oea31BD
-U5cqPco8R5gu4RV78ZLzYdqQJRZlwJ9UXQ4DO1t3ApyEtg2YXzTdO2PCwyiBwpwp
-LiniyMMB8jPqKqrMCQj3ZWfGzd/TtiunvczRDnBfuCPRy5FOCvTIeuXZYzbB1N/8
-Ipf3YF3qKS9Ysr1YvY2WTxB1v0h7PVGHoTx0IsL8B3+A3MSs/mrBcDCw6Y5p4ixp
-gZQJut3+TcCDjJRYwEYgr5wfAvg1VUkvRtTA8KCWAg8zxXHzniN9lLf9OtMJgwYh
-/WA9rjLA0u6NpvDntIJ8CsxwyXmA+P5M9zWEGYox+wrZ13+b8KKaa8MFSu1BYBQw
-0aoRQm7TIwIEC8Zl3d1Sd9qBa7Ko+gE4uZbqKmxnl4mUnrzhVNXkanjvSr0rmj1A
-fsbAddJu+2gw7OyLnflJNZoaLNmzlTnVHpL3prllL+U9bTpITAjc5CgSKL59NVzq
-4BZ+Extq1z7XnvwtdbLBFNUjA9tbbws+eC8N3jONFrdI54OagQ97wUNNVQQXOEpR
-1VmiiXTTn74eS9fGbbeIJG9gkaSChVtWQbzQRKtqE77RLFi3EjNYsjdj3BP1lB0/
-QFH1T/U67cjF68IeHRaVesd+QnGTbksVtzDfqu1XhUisHWrdOWnk4Xl4vs4Fv6EM
-94B7IWcnMFk=
------END CERTIFICATE-----
-
 # 4d2491414cfe956746ec4cefa6cf6f72e28a1329432f9d8a907ac4cb5dadc15a
 Certificate:
     Data:
@@ -6461,100 +6340,6 @@
 vm9qp/UsQu0yrbYhnr68
 -----END CERTIFICATE-----
 
-# bc104f15a48be709dca542a7e1d4b9df6f054527e802eaa92d595444258afe71
-Certificate:
-    Data:
-        Version: 3 (0x2)
-        Serial Number: 0 (0x0)
-        Signature Algorithm: sha1WithRSAEncryption
-        Issuer: C = GR, O = Hellenic Academic and Research Institutions Cert. Authority, CN = Hellenic Academic and Research Institutions RootCA 2011
-        Validity
-            Not Before: Dec  6 13:49:52 2011 GMT
-            Not After : Dec  1 13:49:52 2031 GMT
-        Subject: C = GR, O = Hellenic Academic and Research Institutions Cert. Authority, CN = Hellenic Academic and Research Institutions RootCA 2011
-        Subject Public Key Info:
-            Public Key Algorithm: rsaEncryption
-                RSA Public-Key: (2048 bit)
-                Modulus:
-                    00:a9:53:00:e3:2e:a6:f6:8e:fa:60:d8:2d:95:3e:
-                    f8:2c:2a:54:4e:cd:b9:84:61:94:58:4f:8f:3d:8b:
-                    e4:43:f3:75:89:8d:51:e4:c3:37:d2:8a:88:4d:79:
-                    1e:b7:12:dd:43:78:4a:8a:92:e6:d7:48:d5:0f:a4:
-                    3a:29:44:35:b8:07:f6:68:1d:55:cd:38:51:f0:8c:
-                    24:31:85:af:83:c9:7d:e9:77:af:ed:1a:7b:9d:17:
-                    f9:b3:9d:38:50:0f:a6:5a:79:91:80:af:37:ae:a6:
-                    d3:31:fb:b5:26:09:9d:3c:5a:ef:51:c5:2b:df:96:
-                    5d:eb:32:1e:02:da:70:49:ec:6e:0c:c8:9a:37:8d:
-                    f7:f1:36:60:4b:26:2c:82:9e:d0:78:f3:0d:0f:63:
-                    a4:51:30:e1:f9:2b:27:12:07:d8:ea:bd:18:62:98:
-                    b0:59:37:7d:be:ee:f3:20:51:42:5a:83:ef:93:ba:
-                    69:15:f1:62:9d:9f:99:39:82:a1:b7:74:2e:8b:d4:
-                    c5:0b:7b:2f:f0:c8:0a:da:3d:79:0a:9a:93:1c:a5:
-                    28:72:73:91:43:9a:a7:d1:4d:85:84:b9:a9:74:8f:
-                    14:40:c7:dc:de:ac:41:64:6c:b4:19:9b:02:63:6d:
-                    24:64:8f:44:b2:25:ea:ce:5d:74:0c:63:32:5c:8d:
-                    87:e5
-                Exponent: 65537 (0x10001)
-        X509v3 extensions:
-            X509v3 Basic Constraints: critical
-                CA:TRUE
-            X509v3 Key Usage: 
-                Certificate Sign, CRL Sign
-            X509v3 Subject Key Identifier: 
-                A6:91:42:FD:13:61:4A:23:9E:08:A4:29:E5:D8:13:04:23:EE:41:25
-            X509v3 Name Constraints: 
-                Permitted:
-                  DNS:.gr
-                  DNS:.eu
-                  DNS:.edu
-                  DNS:.org
-                  email:.gr
-                  email:.eu
-                  email:.edu
-                  email:.org
-
-    Signature Algorithm: sha1WithRSAEncryption
-         1f:ef:79:41:e1:7b:6e:3f:b2:8c:86:37:42:4a:4e:1c:37:1e:
-         8d:66:ba:24:81:c9:4f:12:0f:21:c0:03:97:86:25:6d:5d:d3:
-         22:29:a8:6c:a2:0d:a9:eb:3d:06:5b:99:3a:c7:cc:c3:9a:34:
-         7f:ab:0e:c8:4e:1c:e1:fa:e4:dc:cd:0d:be:bf:24:fe:6c:e7:
-         6b:c2:0d:c8:06:9e:4e:8d:61:28:a6:6a:fd:e5:f6:62:ea:18:
-         3c:4e:a0:53:9d:b2:3a:9c:eb:a5:9c:91:16:b6:4d:82:e0:0c:
-         05:48:a9:6c:f5:cc:f8:cb:9d:49:b4:f0:02:a5:fd:70:03:ed:
-         8a:21:a5:ae:13:86:49:c3:33:73:be:87:3b:74:8b:17:45:26:
-         4c:16:91:83:fe:67:7d:cd:4d:63:67:fa:f3:03:12:96:78:06:
-         8d:b1:67:ed:8e:3f:be:9f:4f:02:f5:b3:09:2f:f3:4c:87:df:
-         2a:cb:95:7c:01:cc:ac:36:7a:bf:a2:73:7a:f7:8f:c1:b5:9a:
-         a1:14:b2:8f:33:9f:0d:ef:22:dc:66:7b:84:bd:45:17:06:3d:
-         3c:ca:b9:77:34:8f:ca:ea:cf:3f:31:3e:e3:88:e3:80:49:25:
-         c8:97:b5:9d:9a:99:4d:b0:3c:f8:4a:00:9b:64:dd:9f:39:4b:
-         d1:27:d7:b8
------BEGIN CERTIFICATE-----
-MIIEMTCCAxmgAwIBAgIBADANBgkqhkiG9w0BAQUFADCBlTELMAkGA1UEBhMCR1Ix
-RDBCBgNVBAoTO0hlbGxlbmljIEFjYWRlbWljIGFuZCBSZXNlYXJjaCBJbnN0aXR1
-dGlvbnMgQ2VydC4gQXV0aG9yaXR5MUAwPgYDVQQDEzdIZWxsZW5pYyBBY2FkZW1p
-YyBhbmQgUmVzZWFyY2ggSW5zdGl0dXRpb25zIFJvb3RDQSAyMDExMB4XDTExMTIw
-NjEzNDk1MloXDTMxMTIwMTEzNDk1MlowgZUxCzAJBgNVBAYTAkdSMUQwQgYDVQQK
-EztIZWxsZW5pYyBBY2FkZW1pYyBhbmQgUmVzZWFyY2ggSW5zdGl0dXRpb25zIENl
-cnQuIEF1dGhvcml0eTFAMD4GA1UEAxM3SGVsbGVuaWMgQWNhZGVtaWMgYW5kIFJl
-c2VhcmNoIEluc3RpdHV0aW9ucyBSb290Q0EgMjAxMTCCASIwDQYJKoZIhvcNAQEB
-BQADggEPADCCAQoCggEBAKlTAOMupvaO+mDYLZU++CwqVE7NuYRhlFhPjz2L5EPz
-dYmNUeTDN9KKiE15HrcS3UN4SoqS5tdI1Q+kOilENbgH9mgdVc04UfCMJDGFr4PJ
-fel3r+0ae50X+bOdOFAPplp5kYCvN66m0zH7tSYJnTxa71HFK9+WXesyHgLacEns
-bgzImjeN9/E2YEsmLIKe0HjzDQ9jpFEw4fkrJxIH2Oq9GGKYsFk3fb7u8yBRQlqD
-75O6aRXxYp2fmTmCobd0LovUxQt7L/DICto9eQqakxylKHJzkUOap9FNhYS5qXSP
-FEDH3N6sQWRstBmbAmNtJGSPRLIl6s5ddAxjMlyNh+UCAwEAAaOBiTCBhjAPBgNV
-HRMBAf8EBTADAQH/MAsGA1UdDwQEAwIBBjAdBgNVHQ4EFgQUppFC/RNhSiOeCKQp
-5dgTBCPuQSUwRwYDVR0eBEAwPqA8MAWCAy5ncjAFggMuZXUwBoIELmVkdTAGggQu
-b3JnMAWBAy5ncjAFgQMuZXUwBoEELmVkdTAGgQQub3JnMA0GCSqGSIb3DQEBBQUA
-A4IBAQAf73lB4XtuP7KMhjdCSk4cNx6NZrokgclPEg8hwAOXhiVtXdMiKahsog2p
-6z0GW5k6x8zDmjR/qw7IThzh+uTczQ2+vyT+bOdrwg3IBp5OjWEopmr95fZi6hg8
-TqBTnbI6nOulnJEWtk2C4AwFSKls9cz4y51JtPACpf1wA+2KIaWuE4ZJwzNzvoc7
-dIsXRSZMFpGD/md9zU1jZ/rzAxKWeAaNsWftjj++n08C9bMJL/NMh98qy5V8Acys
-Nnq/onN694/BtZqhFLKPM58N7yLcZnuEvUUXBj08yrl3NI/K6s8/MT7jiOOASSXI
-l7WdmplNsDz4SgCbZN2fOUvRJ9e4
------END CERTIFICATE-----
-
 # 30d0895a9a448a262091635522d1f52010b5867acae12c78ef958fd4f4389f2f
 Certificate:
     Data:
diff --git a/net/data/ssl/chrome_root_store/root_store.textproto b/net/data/ssl/chrome_root_store/root_store.textproto
index 2d5563a..621d387 100644
--- a/net/data/ssl/chrome_root_store/root_store.textproto
+++ b/net/data/ssl/chrome_root_store/root_store.textproto
@@ -5,589 +5,579 @@
 
 # Version # should always be incremented up whenever this (or any pem file that
 # it references) is changed.
-version_major: 1
+version_major: 2
 
-# Actalis Authentication Root CA
+# CN=Actalis Authentication Root CA, O=Actalis S.p.A./03358520967, L=Milan, C=IT
 trust_anchors {
   sha256_hex: "55926084ec963a64b96e2abe01ce0ba86a64fbfebcc7aab5afc155b37fd76066"
 }
 
-# Amazon Root CA 3
+# CN=Amazon Root CA 3, O=Amazon, C=US
 trust_anchors {
   sha256_hex: "18ce6cfe7bf14e60b2e347b8dfe868cb31d02ebb3ada271569f50343b46db3a4"
 }
 
-# Amazon Root CA 2
+# CN=Amazon Root CA 2, O=Amazon, C=US
 trust_anchors {
   sha256_hex: "1ba5b2aa8c65401a82960118f80bec4f62304d83cec4713a19c39c011ea46db4"
 }
 
-# Starfield Services Root Certificate Authority - G2
+# CN=Starfield Services Root Certificate Authority - G2, O=Starfield Technologies, Inc., L=Scottsdale, ST=Arizona, C=US
 trust_anchors {
   sha256_hex: "568d6905a2c88708a4b3025190edcfedb1974a606a13c6e5290fcb2ae63edab5"
 }
 
-# Amazon Root CA 1
+# CN=Amazon Root CA 1, O=Amazon, C=US
 trust_anchors {
   sha256_hex: "8ecde6884f3d87b1125ba31ac3fcb13d7016de7f57cc904fe1cb97c6ae98196e"
 }
 
-# Amazon Root CA 4
+# CN=Amazon Root CA 4, O=Amazon, C=US
 trust_anchors {
   sha256_hex: "e35d28419ed02025cfa69038cd623962458da5c695fbdea3c22b0bfb25897092"
 }
 
-# Certum Trusted Network CA
+# CN=Certum Trusted Network CA, OU=Certum Certification Authority, O=Unizeto Technologies S.A., C=PL
 trust_anchors {
   sha256_hex: "5c58468d55f58e497e743982d2b50010b6d165374acf83a7d4a32db768c4408e"
 }
 
-# Certum Trusted Network CA 2
+# CN=Certum Trusted Network CA 2, OU=Certum Certification Authority, O=Unizeto Technologies S.A., C=PL
 trust_anchors {
   sha256_hex: "b676f2eddae8775cd36cb0f63cd1d4603961f49e6265ba013a2f0307b6d0b804"
 }
 
-# Atos TrustedRoot 2011
+# C=DE, O=Atos, CN=Atos TrustedRoot 2011
 trust_anchors {
   sha256_hex: "f356bea244b7a91eb35d53ca9ad7864ace018e2d35d5f8f96ddf68a6f41aa474"
 }
 
-# Autoridad de Certificacion Firmaprofesional CIF A62634068
+# CN=Autoridad de Certificacion Firmaprofesional CIF A62634068, C=ES
 trust_anchors {
   sha256_hex: "04048028bf1f2864d48f9ad4d83294366a828856553f3b14303f90147f5d40ef"
 }
 
-# Buypass Class 2 Root CA
+# CN=Buypass Class 2 Root CA, O=Buypass AS-983163327, C=NO
 trust_anchors {
   sha256_hex: "9a114025197c5bb95d94e63d55cd43790847b646b23cdf11ada4a00eff15fb48"
 }
 
-# Buypass Class 3 Root CA
+# CN=Buypass Class 3 Root CA, O=Buypass AS-983163327, C=NO
 trust_anchors {
   sha256_hex: "edf7ebbca27a2a384d387b7d4010c666e2edb4843e4c29b4ae1d5b9332e6b24d"
 }
 
-# certSIGN Root CA G2
+# OU=certSIGN ROOT CA G2, O=CERTSIGN SA, C=RO
 trust_anchors {
   sha256_hex: "657cfe2fa73faa38462571f332a2363a46fce7020951710702cdfbb6eeda3305"
 }
 
-# certSIGN ROOT CA
+# OU=certSIGN ROOT CA, O=certSIGN, C=RO
 trust_anchors {
   sha256_hex: "eaa962c4fa4a6bafebe415196d351ccd888d4f53f3fa8ae6d7c466a94e6042bb"
 }
 
-# CFCA EV ROOT
+# CN=CFCA EV ROOT, O=China Financial Certification Authority, C=CN
 trust_anchors {
   sha256_hex: "5cc3d78e4e1d5e45547a04e6873e64f90cf9536d1ccc2ef800f355c4c5fd70fd"
 }
 
-# Chunghwa Telecom Co., Ltd. - ePKI Root Certification Authority
+# OU=ePKI Root Certification Authority, O=Chunghwa Telecom Co., Ltd., C=TW
 trust_anchors {
   sha256_hex: "c0a6f4dc63a24bfdcf54ef2a6a082a0a72de35803e2ff5ff527ae5d87206dfd5"
 }
 
-# SecureSign RootCA11
+# CN=SecureSign RootCA11, O=Japan Certification Services, Inc., C=JP
 trust_anchors {
   sha256_hex: "bf0feefb9e3a581ad5f9e9db7589985743d261085c4d314f6f5d7259aa421612"
 }
 
-# D-TRUST Root Class 3 CA 2 2009
+# CN=D-TRUST Root Class 3 CA 2 2009, O=D-Trust GmbH, C=DE
 trust_anchors {
   sha256_hex: "49e7a442acf0ea6287050054b52564b650e4f49e42e348d6aa38e039e957b1c1"
 }
 
-# D-TRUST Root Class 3 CA 2 EV 2009
+# CN=D-TRUST Root Class 3 CA 2 EV 2009, O=D-Trust GmbH, C=DE
 trust_anchors {
   sha256_hex: "eec5496b988ce98625b934092eec2908bed0b0f316c2d4730c84eaf1f3d34881"
 }
 
-# T-TeleSec GlobalRoot Class 2
+# CN=T-TeleSec GlobalRoot Class 2, OU=T-Systems Trust Center, O=T-Systems Enterprise Services GmbH, C=DE
 trust_anchors {
   sha256_hex: "91e2f5788d5810eba7ba58737de1548a8ecacd014598bc0b143e041b17052552"
 }
 
-# T-TeleSec GlobalRoot Class 3
+# CN=T-TeleSec GlobalRoot Class 3, OU=T-Systems Trust Center, O=T-Systems Enterprise Services GmbH, C=DE
 trust_anchors {
   sha256_hex: "fd73dad31c644ff1b43bef0ccdda96710b9cd9875eca7e31707af3e96d522bbd"
 }
 
-# Certigna Root CA
+# CN=Certigna Root CA, OU=0002 48146308100036, O=Dhimyotis, C=FR
 trust_anchors {
   sha256_hex: "d48d3d23eedb50a459e55197601c27774b9d7b18c94d5a059511a10250b93168"
 }
 
-# Certigna
+# CN=Certigna, O=Dhimyotis, C=FR
 trust_anchors {
   sha256_hex: "e3b6a2db2ed7ce48842f7ac53241c7b71d54144bfb40c11f3f1d0b42f5eea12d"
 }
 
-# Baltimore CyberTrust Root
+# CN=Baltimore CyberTrust Root, OU=CyberTrust, O=Baltimore, C=IE
 trust_anchors {
   sha256_hex: "16af57a9f676b0ab126095aa5ebadef22ab31119d644ac95cd4b93dbf3f26aeb"
 }
 
-# DigiCert Global Root G3
+# CN=DigiCert Global Root G3, OU=www.digicert.com, O=DigiCert Inc, C=US
 trust_anchors {
   sha256_hex: "31ad6648f8104138c738f39ea4320133393e3a18cc02296ef97c2ac9ef6731d0"
 }
 
-# DigiCert Assured ID Root CA
+# CN=DigiCert Assured ID Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US
 trust_anchors {
   sha256_hex: "3e9099b5015e8f486c00bcea9d111ee721faba355a89bcf1df69561e3dc6325c"
 }
 
-# DigiCert Global Root CA
+# CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US
 trust_anchors {
   sha256_hex: "4348a0e9444c78cb265e058d5e8944b4d84f9662bd26db257f8934a443c70161"
 }
 
-# DigiCert Trusted Root G4
+# CN=DigiCert Trusted Root G4, OU=www.digicert.com, O=DigiCert Inc, C=US
 trust_anchors {
   sha256_hex: "552f7bdcf1a7af9e6ce672017f4f12abf77240c78e761ac203d1d9d20ac89988"
 }
 
-# DigiCert High Assurance EV Root CA
+# CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US
 trust_anchors {
   sha256_hex: "7431e5f4c3c1ce4690774f0b61e05440883ba9a01ed00ba6abd7806ed3b118cf"
 }
 
-# DigiCert Assured ID Root G2
+# CN=DigiCert Assured ID Root G2, OU=www.digicert.com, O=DigiCert Inc, C=US
 trust_anchors {
   sha256_hex: "7d05ebb682339f8c9451ee094eebfefa7953a114edb2f44949452fab7d2fc185"
 }
 
-# DigiCert Assured ID Root G3
+# CN=DigiCert Assured ID Root G3, OU=www.digicert.com, O=DigiCert Inc, C=US
 trust_anchors {
   sha256_hex: "7e37cb8b4c47090cab36551ba6f45db840680fba166a952db100717f43053fc2"
 }
 
-# DigiCert Global Root G2
+# CN=DigiCert Global Root G2, OU=www.digicert.com, O=DigiCert Inc, C=US
 trust_anchors {
   sha256_hex: "cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f"
 }
 
-# CA Disig Root R2
+# CN=CA Disig Root R2, O=Disig a.s., L=Bratislava, C=SK
 trust_anchors {
   sha256_hex: "e23d4a036d7b70e9f595b1422079d2b91edfbb1fb651a0633eaa8a9dc5f80703"
 }
 
-# E-Tugra Certification Authority
+# CN=E-Tugra Certification Authority, OU=E-Tugra Sertifikasyon Merkezi, O=E-Tuğra EBG Bilişim Teknolojileri ve Hizmetleri A.Ş., L=Ankara, C=TR
 trust_anchors {
   sha256_hex: "b0bfd52bb0d7d9bd92bf5d4dc13da255c02c542f378365ea893911f55e55f23c"
 }
 
-# emSign Root CA - C1
+# CN=emSign Root CA - C1, O=eMudhra Inc, OU=emSign PKI, C=US
 trust_anchors {
   sha256_hex: "125609aa301da0a249b97a8239cb6a34216f44dcac9f3954b14292f2e8c8608f"
 }
 
-# emSign Root CA - G1
+# CN=emSign Root CA - G1, O=eMudhra Technologies Limited, OU=emSign PKI, C=IN
 trust_anchors {
   sha256_hex: "40f6af0346a99aa1cd1d555a4e9cce62c7f9634603ee406615833dc8c8d00367"
 }
 
-# emSign ECC Root CA - G3
+# CN=emSign ECC Root CA - G3, O=eMudhra Technologies Limited, OU=emSign PKI, C=IN
 trust_anchors {
   sha256_hex: "86a1ecba089c4a8d3bbe2734c612ba341d813e043cf9e8a862cd5c57a36bbe6b"
 }
 
-# emSign ECC Root CA - C3
+# CN=emSign ECC Root CA - C3, O=eMudhra Inc, OU=emSign PKI, C=US
 trust_anchors {
   sha256_hex: "bc4d809b15189d78db3e1d8cf4f9726a795da1643ca5f1358e1ddb0edc0d7eb3"
 }
 
-# Entrust Root Certification Authority - EC1
+# CN=Entrust Root Certification Authority - EC1, OU=(c) 2012 Entrust, Inc. - for authorized use only, OU=See www.entrust.net/legal-terms, O=Entrust, Inc., C=US
 trust_anchors {
   sha256_hex: "02ed0eb28c14da45165c566791700d6451d7fb56f0b2ab1d3b8eb070e56edff5"
 }
 
-# AffirmTrust Commercial
+# CN=AffirmTrust Commercial, O=AffirmTrust, C=US
 trust_anchors {
   sha256_hex: "0376ab1d54c5f9803ce4b2e201a0ee7eef7b57b636e8a93c9b8d4860c96f5fa7"
 }
 
-# AffirmTrust Networking
+# CN=AffirmTrust Networking, O=AffirmTrust, C=US
 trust_anchors {
   sha256_hex: "0a81ec5a929777f145904af38d5d509f66b5e2c58fcdb531058b0e17f3f0b41b"
 }
 
-# Entrust Root Certification Authority - G2
+# CN=Entrust Root Certification Authority - G2, OU=(c) 2009 Entrust, Inc. - for authorized use only, OU=See www.entrust.net/legal-terms, O=Entrust, Inc., C=US
 trust_anchors {
   sha256_hex: "43df5774b03e7fef5fe40d931a7bedf1bb2e6b42738c4e6d3841103d3aa7f339"
 }
 
-# Entrust.net Certification Authority (2048)
+# CN=Entrust.net Certification Authority (2048), OU=(c) 1999 Entrust.net Limited, OU=www.entrust.net/CPS_2048 incorp. by ref. (limits liab.), O=Entrust.net
 trust_anchors {
   sha256_hex: "6dc47172e01cbcb0bf62580d895fe2b8ac9ad4f873801e0c10b9c837d21eb177"
 }
 
-# AffirmTrust Premium
+# CN=AffirmTrust Premium, O=AffirmTrust, C=US
 trust_anchors {
   sha256_hex: "70a73f7f376b60074248904534b11482d5bf0e698ecc498df52577ebf2e93b9a"
 }
 
-# Entrust Root Certification Authority
+# CN=Entrust Root Certification Authority, OU=(c) 2006 Entrust, Inc., OU=www.entrust.net/CPS is incorporated by reference, O=Entrust, Inc., C=US
 trust_anchors {
   sha256_hex: "73c176434f1bc6d5adf45b0e76e727287c8de57616c1e6e6141a2b2cbc7d8e4c"
 }
 
-# AffirmTrust Premium ECC
+# CN=AffirmTrust Premium ECC, O=AffirmTrust, C=US
 trust_anchors {
   sha256_hex: "bd71fdf6da97e4cf62d1647add2581b07d79adf8397eb4ecba9c5e8488821423"
 }
 
-# Entrust Root Certification Authority - G4
+# CN=Entrust Root Certification Authority - G4, OU=(c) 2015 Entrust, Inc. - for authorized use only, OU=See www.entrust.net/legal-terms, O=Entrust, Inc., C=US
 trust_anchors {
   sha256_hex: "db3517d1f6732a2d5ab97c533ec70779ee3270a62fb4ac4238372460e6f01e88"
 }
 
-# GDCA TrustAUTH R5 ROOT
+# CN=GDCA TrustAUTH R5 ROOT, O=GUANG DONG CERTIFICATE AUTHORITY CO.,LTD., C=CN
 trust_anchors {
   sha256_hex: "bfff8fd04433487d6a8aa60c1a29767a9fc2bbb05e420f713a13b992891d3893"
 }
 
-# GlobalSign
+# CN=GlobalSign, O=GlobalSign, OU=GlobalSign ECC Root CA - R5
 trust_anchors {
   sha256_hex: "179fbc148a3dd00fd24ea13458cc43bfa7f59c8182d783a513f6ebec100c8924"
 }
 
-# GlobalSign
+# CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R6
 trust_anchors {
   sha256_hex: "2cabeafe37d06ca22aba7391c0033d25982952c453647349763a3ab5ad6ccf69"
 }
 
-# GlobalSign
+# CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R3
 trust_anchors {
   sha256_hex: "cbb522d7b7f127ad6a0113865bdf1cd4102e7d0759af635a7cf4720dc963c53b"
 }
 
-# GlobalSign Root CA
+# CN=GlobalSign Root CA, OU=Root CA, O=GlobalSign nv-sa, C=BE
 trust_anchors {
   sha256_hex: "ebd41040e4bb3ec742c9e381d31ef2a41a48b6685c96e7cef3c1df6cd4331c99"
 }
 
-# Starfield Class 2 CA
+# OU=Starfield Class 2 Certification Authority, O=Starfield Technologies, Inc., C=US
 trust_anchors {
   sha256_hex: "1465fa205397b876faa6f0a9958e5590e40fcc7faa4fb7c2c8677521fb5fb658"
 }
 
-# Starfield Root Certificate Authority - G2
+# CN=Starfield Root Certificate Authority - G2, O=Starfield Technologies, Inc., L=Scottsdale, ST=Arizona, C=US
 trust_anchors {
   sha256_hex: "2ce1cb0bf9d2f9e102993fbe215152c3b2dd0cabde1c68e5319b839154dbb7f5"
 }
 
-# Go Daddy Root Certificate Authority - G2
+# CN=Go Daddy Root Certificate Authority - G2, O=GoDaddy.com, Inc., L=Scottsdale, ST=Arizona, C=US
 trust_anchors {
   sha256_hex: "45140b3247eb9cc8c5b4f0d7b53091f73292089e6e5a63e2749dd3aca9198eda"
 }
 
-# Go Daddy Class 2 CA
+# OU=Go Daddy Class 2 Certification Authority, O=The Go Daddy Group, Inc., C=US
 trust_anchors {
   sha256_hex: "c3846bf24b9e93ca64274c0ec67c1ecc5e024ffcacd2d74019350e81fe546ae4"
 }
 
-# GTS Root R3
+# CN=GTS Root R3, O=Google Trust Services LLC, C=US
 trust_anchors {
   sha256_hex: "15d5b8774619ea7d54ce1ca6d0b0c403e037a917f131e8a04e1e6b7a71babce5"
 }
 
-# GTS Root R1
+# CN=GTS Root R1, O=Google Trust Services LLC, C=US
 trust_anchors {
   sha256_hex: "2a575471e31340bc21581cbd2cf13e158463203ece94bcf9d3cc196bf09a5472"
 }
 
-# GTS Root R4
+# CN=GTS Root R4, O=Google Trust Services LLC, C=US
 trust_anchors {
   sha256_hex: "71cca5391f9e794b04802530b363e121da8a3043bb26662fea4dca7fc951a4bd"
 }
 
-# GlobalSign
+# CN=GlobalSign, O=GlobalSign, OU=GlobalSign ECC Root CA - R4
 trust_anchors {
   sha256_hex: "bec94911c2955676db6c0a550986d76e3ba005667c442c9762b4fbb773de228c"
 }
 
-# GTS Root R2
+# CN=GTS Root R2, O=Google Trust Services LLC, C=US
 trust_anchors {
   sha256_hex: "c45d7bb08e6d67e62e4235110b564e5f78fd92ef058c840aea4e6455d7585c60"
 }
 
-# Hongkong Post Root CA 3
+# CN=Hongkong Post Root CA 3, O=Hongkong Post, L=Hong Kong, ST=Hong Kong, C=HK
 trust_anchors {
   sha256_hex: "5a2fc03f0c83b090bbfa40604b0988446c7636183df9846e17101a447fb8efd6"
 }
 
-# Hongkong Post Root CA 1
+# CN=Hongkong Post Root CA 1, O=Hongkong Post, C=HK
 trust_anchors {
   sha256_hex: "f9e67d336c51002ac054c632022d66dda2e7e3fff10ad061ed31d8bbb410cfb2"
 }
 
-# ACCVRAIZ1
+# C=ES, O=ACCV, OU=PKIACCV, CN=ACCVRAIZ1
 trust_anchors {
   sha256_hex: "9a6ec012e1a7da9dbe34194d478ad7c0db1822fb071df12981496ed104384113"
 }
 
-# FNMT-RCM - SHA256
+# OU=AC RAIZ FNMT-RCM, O=FNMT-RCM, C=ES
 trust_anchors {
   sha256_hex: "ebc5570c29018c4d67b1aa127baf12f703b4611ebc17b7dab5573894179b93fa"
 }
 
-# Staat der Nederlanden Root CA - G3
-trust_anchors {
-  sha256_hex: "3c4fb0b95ab8b30032f432b86f535fe172c185d0fd39865837cf36187fa6f428"
-}
-
-# Staat der Nederlanden EV Root CA
+# CN=Staat der Nederlanden EV Root CA, O=Staat der Nederlanden, C=NL
 trust_anchors {
   sha256_hex: "4d2491414cfe956746ec4cefa6cf6f72e28a1329432f9d8a907ac4cb5dadc15a"
 }
 
-# TUBITAK Kamu SM SSL Kok Sertifikasi - Surum 1
+# CN=TUBITAK Kamu SM SSL Kok Sertifikasi - Surum 1, OU=Kamu Sertifikasyon Merkezi - Kamu SM, O=Turkiye Bilimsel ve Teknolojik Arastirma Kurumu - TUBITAK, L=Gebze - Kocaeli, C=TR
 trust_anchors {
   sha256_hex: "46edc3689046d53a453fb3104ab80dcaec658b2660ea1629dd7e867990648716"
 }
 
-# Hellenic Academic and Research Institutions ECC RootCA 2015
+# CN=Hellenic Academic and Research Institutions ECC RootCA 2015, O=Hellenic Academic and Research Institutions Cert. Authority, L=Athens, C=GR
 trust_anchors {
   sha256_hex: "44b545aa8a25e65a73ca15dc27fc36d24c1cb9953a066539b11582dc487b4833"
 }
 
-# Hellenic Academic and Research Institutions RootCA 2015
+# CN=Hellenic Academic and Research Institutions RootCA 2015, O=Hellenic Academic and Research Institutions Cert. Authority, L=Athens, C=GR
 trust_anchors {
   sha256_hex: "a040929a02ce53b4acf4f2ffc6981ce4496f755e6d45fe0b2a692bcd52523f36"
 }
 
-# Hellenic Academic and Research Institutions RootCA 2011
-trust_anchors {
-  sha256_hex: "bc104f15a48be709dca542a7e1d4b9df6f054527e802eaa92d595444258afe71"
-}
-
-# IdenTrust Public Sector Root CA 1
+# CN=IdenTrust Public Sector Root CA 1, O=IdenTrust, C=US
 trust_anchors {
   sha256_hex: "30d0895a9a448a262091635522d1f52010b5867acae12c78ef958fd4f4389f2f"
 }
 
-# IdenTrust Commercial Root CA 1
+# CN=IdenTrust Commercial Root CA 1, O=IdenTrust, C=US
 trust_anchors {
   sha256_hex: "5d56499be4d2e08bcfcad08a3e38723d50503bde706948e42f55603019e528ae"
 }
 
-# ISRG Root X1
+# CN=ISRG Root X1, O=Internet Security Research Group, C=US
 trust_anchors {
   sha256_hex: "96bcec06264976f37460779acf28c5a7cfe8a3c0aae11a8ffcee05c0bddf08c6"
 }
 
-# Izenpe.com
+# CN=Izenpe.com, O=IZENPE S.A., C=ES
 trust_anchors {
   sha256_hex: "2530cc8e98321502bad96f9b1fba1b099e2d299e0f4548bb914f363bc0d4531f"
 }
 
-# SZAFIR ROOT CA2
+# CN=SZAFIR ROOT CA2, O=Krajowa Izba Rozliczeniowa S.A., C=PL
 trust_anchors {
   sha256_hex: "a1339d33281a0b56e557d3d32b1ce7f9367eb094bd5fa72a7e5004c8ded7cafe"
 }
 
-# Microsec e-Szigno Root CA 2009
+# emailAddress=info@e-szigno.hu, CN=Microsec e-Szigno Root CA 2009, O=Microsec Ltd., L=Budapest, C=HU
 trust_anchors {
   sha256_hex: "3c5f81fea5fab82c64bfa2eaecafcde8e077fc8620a7cae537163df36edbf378"
 }
 
-# e-Szigno Root CA 2017
+# CN=e-Szigno Root CA 2017, organizationIdentifier=VATHU-23584497, O=Microsec Ltd., L=Budapest, C=HU
 trust_anchors {
   sha256_hex: "beb00b30839b9bc32c32e4447905950641f26421b15ed089198b518ae2ea1b99"
 }
 
-# Microsoft ECC Root Certificate Authority 2017
+# CN=Microsoft ECC Root Certificate Authority 2017, O=Microsoft Corporation, C=US
 trust_anchors {
   sha256_hex: "358df39d764af9e1b766e9c972df352ee15cfac227af6ad1d70e8e4a6edcba02"
 }
 
-# Microsoft RSA Root Certificate Authority 2017
+# CN=Microsoft RSA Root Certificate Authority 2017, O=Microsoft Corporation, C=US
 trust_anchors {
   sha256_hex: "c741f70f4b2a8d88bf2e71c14122ef53ef10eba0cfa5e64cfa20f418853073e0"
 }
 
-# NetLock Arany (Class Gold) Főtanúsítvány
+# CN=NetLock Arany (Class Gold) Főtanúsítvány, OU=Tanúsítványkiadók (Certification Services), O=NetLock Kft., L=Budapest, C=HU
 trust_anchors {
   sha256_hex: "6c61dac3a2def031506be036d2a6fe401994fbd13df9c8d466599274c446ec98"
 }
 
-# OISTE WISeKey Global Root GB CA
+# CN=OISTE WISeKey Global Root GB CA, OU=OISTE Foundation Endorsed, O=WISeKey, C=CH
 trust_anchors {
   sha256_hex: "6b9c08e86eb0f767cfad65cd98b62149e5494a67f5845e7bd1ed019f27b86bd6"
 }
 
-# OISTE WISeKey Global Root GC CA
+# CN=OISTE WISeKey Global Root GC CA, OU=OISTE Foundation Endorsed, O=WISeKey, C=CH
 trust_anchors {
   sha256_hex: "8560f91c3624daba9570b5fea0dbe36ff11a8323be9486854fb3f34a5571198d"
 }
 
-# QuoVadis Root CA 3
+# CN=QuoVadis Root CA 3, O=QuoVadis Limited, C=BM
 trust_anchors {
   sha256_hex: "18f1fc7f205df8adddeb7fe007dd57e3af375a9c4d8d73546bf4f1fed1e18d35"
 }
 
-# QuoVadis Root CA 2
+# CN=QuoVadis Root CA 2, O=QuoVadis Limited, C=BM
 trust_anchors {
   sha256_hex: "85a0dd7dd720adb7ff05f83d542b209dc7ff4528f7d677b18389fea5e5c49e86"
 }
 
-# QuoVadis Root CA 3 G3
+# CN=QuoVadis Root CA 3 G3, O=QuoVadis Limited, C=BM
 trust_anchors {
   sha256_hex: "88ef81de202eb018452e43f864725cea5fbd1fc2d9d205730709c5d8b8690f46"
 }
 
-# QuoVadis Root CA 1 G3
+# CN=QuoVadis Root CA 1 G3, O=QuoVadis Limited, C=BM
 trust_anchors {
   sha256_hex: "8a866fd1b276b57e578e921c65828a2bed58e9f2f288054134b7f1f4bfc9cc74"
 }
 
-# QuoVadis Root CA 2 G3
+# CN=QuoVadis Root CA 2 G3, O=QuoVadis Limited, C=BM
 trust_anchors {
   sha256_hex: "8fe4fb0af93a4d0d67db0bebb23e37c71bf325dcbcdd240ea04daf58b47e1840"
 }
 
-# Security Communication RootCA2
+# OU=Security Communication RootCA2, O=SECOM Trust Systems CO.,LTD., C=JP
 trust_anchors {
   sha256_hex: "513b2cecb810d4cde5dd85391adfc6c2dd60d87bb736d2b521484aa47a0ebef6"
 }
 
-# SECOM Trust.net - Security Communication RootCA1
+# OU=Security Communication RootCA1, O=SECOM Trust.net, C=JP
 trust_anchors {
   sha256_hex: "e75e72ed9f560eec6eb4800073a43fc3ad19195a392282017895974a99026b6c"
 }
 
-# COMODO Certification Authority
+# CN=COMODO Certification Authority, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB
 trust_anchors {
   sha256_hex: "0c2cd63df7806fa399ede809116b575bf87989f06518f9808c860503178baf66"
 }
 
-# COMODO ECC Certification Authority
+# CN=COMODO ECC Certification Authority, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB
 trust_anchors {
   sha256_hex: "1793927a0614549789adce2f8f34f7f0b66d0f3ae3a3b84d21ec15dbba4fadc7"
 }
 
-# USERTrust ECC Certification Authority
+# CN=USERTrust ECC Certification Authority, O=The USERTRUST Network, L=Jersey City, ST=New Jersey, C=US
 trust_anchors {
   sha256_hex: "4ff460d54b9c86dabfbcfc5712e0400d2bed3fbc4d4fbdaa86e06adcd2a9ad7a"
 }
 
-# COMODO RSA Certification Authority
+# CN=COMODO RSA Certification Authority, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB
 trust_anchors {
   sha256_hex: "52f0e1c4e58ec629291b60317f074671b85d7ea80d5b07273463534b32b40234"
 }
 
-# AAA Certificate Services
+# CN=AAA Certificate Services, O=Comodo CA Limited, L=Salford, ST=Greater Manchester, C=GB
 trust_anchors {
   sha256_hex: "d7a7a0fb5d7e2731d771e9484ebcdef71d5f0c3e0a2948782bc83ee0ea699ef4"
 }
 
-# USERTrust RSA Certification Authority
+# CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, ST=New Jersey, C=US
 trust_anchors {
   sha256_hex: "e793c9b02fd8aa13e21c31228accb08119643b749c898964b1746d46c3d4cbd2"
 }
 
-# Secure Global CA
+# CN=Secure Global CA, O=SecureTrust Corporation, C=US
 trust_anchors {
   sha256_hex: "4200f5043ac8590ebb527d209ed1503029fbcbd41ca1b506ec27f15ade7dac69"
 }
 
-# Trustwave Global ECC P384 Certification Authority
+# CN=Trustwave Global ECC P384 Certification Authority, O=Trustwave Holdings, Inc., L=Chicago, ST=Illinois, C=US
 trust_anchors {
   sha256_hex: "55903859c8c0c3ebb8759ece4e2557225ff5758bbd38ebd48276601e1bd58097"
 }
 
-# Trustwave Global ECC P256 Certification Authority
+# CN=Trustwave Global ECC P256 Certification Authority, O=Trustwave Holdings, Inc., L=Chicago, ST=Illinois, C=US
 trust_anchors {
   sha256_hex: "945bbc825ea554f489d1fd51a73ddf2ea624ac7019a05205225c22a78ccfa8b4"
 }
 
-# Trustwave Global Certification Authority
+# CN=Trustwave Global Certification Authority, O=Trustwave Holdings, Inc., L=Chicago, ST=Illinois, C=US
 trust_anchors {
   sha256_hex: "97552015f5ddfc3c8788c006944555408894450084f100867086bc1a2bb58dc8"
 }
 
-# XRamp Global Certification Authority
+# CN=XRamp Global Certification Authority, O=XRamp Security Services Inc, OU=www.xrampsecurity.com, C=US
 trust_anchors {
   sha256_hex: "cecddc905099d8dadfc5b1d209b737cbe2c18cfb2c10c0ff0bcf0d3286fc1aa2"
 }
 
-# SecureTrust CA
+# CN=SecureTrust CA, O=SecureTrust Corporation, C=US
 trust_anchors {
   sha256_hex: "f1c1b50ae5a20dd8030ec9f6bc24823dd367b5255759b4e71b61fce9f7375d73"
 }
 
-# UCA Global G2 Root
+# CN=UCA Global G2 Root, O=UniTrust, C=CN
 trust_anchors {
   sha256_hex: "9bea11c976fe014764c1be56a6f914b5a560317abd9988393382e5161aa0493c"
 }
 
-# UCA Extended Validation Root
+# CN=UCA Extended Validation Root, O=UniTrust, C=CN
 trust_anchors {
   sha256_hex: "d43af9b35473755c9684fc06d7d8cb70ee5c28e773fb294eb41ee71722924d24"
 }
 
-# SSL.com EV Root Certification Authority ECC
+# CN=SSL.com EV Root Certification Authority ECC, O=SSL Corporation, L=Houston, ST=Texas, C=US
 trust_anchors {
   sha256_hex: "22a2c1f7bded704cc1e701b5f408c310880fe956b5de2a4a44f99c873a25a7c8"
 }
 
-# SSL.com EV Root Certification Authority RSA R2
+# CN=SSL.com EV Root Certification Authority RSA R2, O=SSL Corporation, L=Houston, ST=Texas, C=US
 trust_anchors {
   sha256_hex: "2e7bf16cc22485a7bbe2aa8696750761b0ae39be3b2fe9d0cc6d4ef73491425c"
 }
 
-# SSL.com Root Certification Authority ECC
+# CN=SSL.com Root Certification Authority ECC, O=SSL Corporation, L=Houston, ST=Texas, C=US
 trust_anchors {
   sha256_hex: "3417bb06cc6007da1b961c920b8ab4ce3fad820e4aa30b9acbc4a74ebdcebc65"
 }
 
-# SSL.com Root Certification Authority RSA
+# CN=SSL.com Root Certification Authority RSA, O=SSL Corporation, L=Houston, ST=Texas, C=US
 trust_anchors {
   sha256_hex: "85666a562ee0be5ce925c1d8890a6f76a87ec16d4d7d5f29ea7419cf20123b69"
 }
 
-# SwissSign Gold CA - G2
+# CN=SwissSign Gold CA - G2, O=SwissSign AG, C=CH
 trust_anchors {
   sha256_hex: "62dd0be9b9f50a163ea0f8e75c053b1eca57ea55c8688f647c6881f2c8357b95"
 }
 
-# SwissSign Silver CA - G2
+# CN=SwissSign Silver CA - G2, O=SwissSign AG, C=CH
 trust_anchors {
   sha256_hex: "be6c4da2bbb9ba59b6f3939768374246c3c005993fa98f020d1dedbed48a81d5"
 }
 
-# TWCA Global Root CA
+# CN=TWCA Global Root CA, OU=Root CA, O=TAIWAN-CA, C=TW
 trust_anchors {
   sha256_hex: "59769007f7685d0fcd50872f9f95d5755a5b2b457d81f3692b610a98672f0e1b"
 }
 
-# TWCA Root Certification Authority
+# CN=TWCA Root Certification Authority, OU=Root CA, O=TAIWAN-CA, C=TW
 trust_anchors {
   sha256_hex: "bfd88fe1101c41ae3e801bf8be56350ee9bad1a6b9bd515edc5c6d5b8711ac44"
 }
 
-# TeliaSonera Root CA v1
+# CN=TeliaSonera Root CA v1, O=TeliaSonera
 trust_anchors {
   sha256_hex: "dd6936fe21f8f077c123a1a521c12224f72255b73e03a7260693e8a24b0fa389"
 }
 
-# TrustCor RootCert CA-2
+# CN=TrustCor RootCert CA-2, OU=TrustCor Certificate Authority, O=TrustCor Systems S. de R.L., L=Panama City, ST=Panama, C=PA
 trust_anchors {
   sha256_hex: "0753e940378c1bd5e3836e395daea5cb839e5046f1bd0eae1951cf10fec7c965"
 }
 
-# TrustCor ECA-1
+# CN=TrustCor ECA-1, OU=TrustCor Certificate Authority, O=TrustCor Systems S. de R.L., L=Panama City, ST=Panama, C=PA
 trust_anchors {
   sha256_hex: "5a885db19c01d912c5759388938cafbbdf031ab2d48e91ee15589b42971d039c"
 }
 
-# TrustCor RootCert CA-1
+# CN=TrustCor RootCert CA-1, OU=TrustCor Certificate Authority, O=TrustCor Systems S. de R.L., L=Panama City, ST=Panama, C=PA
 trust_anchors {
   sha256_hex: "d40e9c86cd8fe468c1776959f49ea774fa548684b6c406f3909261f4dce2575c"
 }
 
-# Network Solutions Certificate Authority
+# CN=Network Solutions Certificate Authority, O=Network Solutions L.L.C., C=US
 trust_anchors {
   sha256_hex: "15f0ba00a3ac7af3ac884c072b1011a077bd77c097f40164b2f8598abd83860c"
 }