source: https://hg.mozilla.org/projects/nss/raw-file/NSS_3_131_1_RTM/lib/ckfw/builtins/certdata.txt
nss_tag: NSS_3_131_1_RTM
nss_date: 2026-10-20
certdata_sha256: 3ec2b4d240dc12c747eaf450061db84af757c483bbda302f9e29ceb5d70be510
roots_sha256: 55ea3e569ca074fb3ab0ae1b65248cb3e78bc354ffcb3fa1fa06b3cfbae93500
count: 116
excluded: Izenpe.com: server distrust after 2026-04-15
excluded: e-Szigno TLS Root CA 2023: a P-521 key, which x509 does not support
