source: https://hg.mozilla.org/projects/nss/raw-file/NSS_3_130_RTM/lib/ckfw/builtins/certdata.txt
nss_tag: NSS_3_130_RTM
nss_date: 2026-09-23
certdata_sha256: beb7e6dfe6499926e52c075c27bcfbe4c957f8609c575b3860273ae2806f63eb
roots_sha256: 8aaf322d66fca621ce70d4fe7b588b9aca39286713d6c51d6581876481ccd24e
count: 119
excluded: Izenpe.com: server distrust after 2026-04-15
excluded: e-Szigno TLS Root CA 2023: a P-521 key, which x509 does not support
