From 2f26647a795e74e712b3aebc2655bca60b2686f9 Mon Sep 17 00:00:00 2001
From: Gopher Robot <gobot@golang.org>
Date: Mon, 9 Feb 2026 21:14:04 +0000
Subject: [PATCH] x509roots/fallback: update bundle

This is an automated CL which updates the NSS root bundle.

[git-generate]
go generate ./x509roots

Change-Id: I3665d29edabaef0efb634031b2b7d20d32774eec
Reviewed-on: https://go-review.googlesource.com/c/crypto/+/743540
Reviewed-by: Dmitri Shuralyov <dmitshur@google.com>
Auto-Submit: Gopher Robot <gobot@golang.org>
LUCI-TryBot-Result: Go LUCI <golang-scoped@luci-project-accounts.iam.gserviceaccount.com>
Reviewed-by: Roland Shoemaker <roland@golang.org>
---
 x509roots/fallback/bundle/bundle.der | Bin 152908 -> 153631 bytes
 x509roots/fallback/bundle/bundle.go  |  30 ++++++++++++++++-----------
 2 files changed, 18 insertions(+), 12 deletions(-)

diff --git a/x509roots/fallback/bundle/bundle.der b/x509roots/fallback/bundle/bundle.der
index ae76992db012033be578a5cfd3b6d9d3268ec74a..2d89b349f295eb9c0512e17f71070f63e8502b0a 100644
GIT binary patch
delta 563
zcmX@JigW%3&W0AoElf(P>gNrbm<$&%GchtT@iM%~m#DsGnLWeHa|V|I7aNCGo5wj@
z7G@TM(&-1S7%it?P-c>JRWeXuV-96u=8;U*4X(;e&&yW`@d;K4%Fi!RaCTHMGB7eW
zkQ3(xlIDiyh9(9;5GBrQY=Oi@Hm{x-^BQLx2(Yn(ox{Y)#;V=O!l2CD*v7!Zkima{
zQH{;2l8!{K-a|f18I?q?d`~EMn!{z0u&^iHZgcX>UlTWUdq1<h&veLuF^FOR{hqgx
zYmHJ@b4CVil{}Oo<HYcQHU3tBn#|!fEJ{bMeBZwek1$(&P%>D6>*87a_ui&b&izip
zK09@!=Ik@rcI4h2@3~Kw*qqk8x%U43TF(1=lm0K9KJgo)*mQxlj8gTHElf#KZWUi+
z@APvCXei&gdhNHXfjlt0WR+PY48$5luqr?bYUajn27|_SCMQPSTkF2+RcuS!F@IY@
zeOk%+H+?n#4lq{EIv2$B{P0Dds@&6C<KBrcnSGn3?473Oi}k<Pt_ceGa$Wmcd5gf_
zqn9)?Oqd)^%c4p@Pio`%x=D`fTPpXhvg1Mjx#b!Plnf3V-<EjWa=rV_+siAG8@Gnl
ixE~KQn37SPeMxWS&YL<intOS6?M&_7F0aa@YXAUd*VUr{

delta 19
bcmbQgf%D8N&W0AoElf(P+rO$aX&C?jP%Z}v

diff --git a/x509roots/fallback/bundle/bundle.go b/x509roots/fallback/bundle/bundle.go
index 3f52221..2baedec 100644
--- a/x509roots/fallback/bundle/bundle.go
+++ b/x509roots/fallback/bundle/bundle.go
@@ -797,77 +797,83 @@ var unparsedCertificates = []unparsedCertificate{
 		certStartOff: 139995,
 		certLength:   580,
 	},
+	{
+		cn:           "CN=e-Szigno TLS Root CA 2023,O=Microsec Ltd.,L=Budapest,C=HU,2.5.4.97=#130e56415448552d3233353834343937",
+		sha256Hash:   "b49141502d00663d740f2e7ec340c52800962666121a36d09cf7dd2b90384fb4",
+		certStartOff: 140575,
+		certLength:   723,
+	},
 	{
 		cn:           "CN=emSign ECC Root CA - C3,OU=emSign PKI,O=eMudhra Inc,C=US",
 		sha256Hash:   "bc4d809b15189d78db3e1d8cf4f9726a795da1643ca5f1358e1ddb0edc0d7eb3",
-		certStartOff: 140575,
+		certStartOff: 141298,
 		certLength:   559,
 	},
 	{
 		cn:           "CN=emSign ECC Root CA - G3,OU=emSign PKI,O=eMudhra Technologies Limited,C=IN",
 		sha256Hash:   "86a1ecba089c4a8d3bbe2734c612ba341d813e043cf9e8a862cd5c57a36bbe6b",
-		certStartOff: 141134,
+		certStartOff: 141857,
 		certLength:   594,
 	},
 	{
 		cn:           "CN=emSign Root CA - C1,OU=emSign PKI,O=eMudhra Inc,C=US",
 		sha256Hash:   "125609aa301da0a249b97a8239cb6a34216f44dcac9f3954b14292f2e8c8608f",
-		certStartOff: 141728,
+		certStartOff: 142451,
 		certLength:   887,
 	},
 	{
 		cn:           "CN=emSign Root CA - G1,OU=emSign PKI,O=eMudhra Technologies Limited,C=IN",
 		sha256Hash:   "40f6af0346a99aa1cd1d555a4e9cce62c7f9634603ee406615833dc8c8d00367",
-		certStartOff: 142615,
+		certStartOff: 143338,
 		certLength:   920,
 	},
 	{
 		cn:           "CN=vTrus ECC Root CA,O=iTrusChina Co.\\,Ltd.,C=CN",
 		sha256Hash:   "30fbba2c32238e2a98547af97931e550428b9b3f1c8eeb6633dcfa86c5b27dd3",
-		certStartOff: 143535,
+		certStartOff: 144258,
 		certLength:   531,
 	},
 	{
 		cn:           "CN=vTrus Root CA,O=iTrusChina Co.\\,Ltd.,C=CN",
 		sha256Hash:   "8a71de6559336f426c26e53880d00d88a18da4c6a91f0dcb6194e206c5c96387",
-		certStartOff: 144066,
+		certStartOff: 144789,
 		certLength:   1370,
 	},
 	{
 		cn:           "OU=AC RAIZ FNMT-RCM,O=FNMT-RCM,C=ES",
 		sha256Hash:   "ebc5570c29018c4d67b1aa127baf12f703b4611ebc17b7dab5573894179b93fa",
-		certStartOff: 145436,
+		certStartOff: 146159,
 		certLength:   1415,
 	},
 	{
 		cn:           "OU=Security Communication RootCA2,O=SECOM Trust Systems CO.\\,LTD.,C=JP",
 		sha256Hash:   "513b2cecb810d4cde5dd85391adfc6c2dd60d87bb736d2b521484aa47a0ebef6",
-		certStartOff: 146851,
+		certStartOff: 147574,
 		certLength:   891,
 	},
 	{
 		cn:           "OU=certSIGN ROOT CA G2,O=CERTSIGN SA,C=RO",
 		sha256Hash:   "657cfe2fa73faa38462571f332a2363a46fce7020951710702cdfbb6eeda3305",
-		certStartOff: 147742,
+		certStartOff: 148465,
 		certLength:   1355,
 	},
 	{
 		cn:           "OU=certSIGN ROOT CA,O=certSIGN,C=RO",
 		sha256Hash:   "eaa962c4fa4a6bafebe415196d351ccd888d4f53f3fa8ae6d7c466a94e6042bb",
-		certStartOff: 149097,
+		certStartOff: 149820,
 		certLength:   828,
 	},
 	{
 		cn:            "OU=ePKI Root Certification Authority,O=Chunghwa Telecom Co.\\, Ltd.,C=TW",
 		sha256Hash:    "c0a6f4dc63a24bfdcf54ef2a6a082a0a72de35803e2ff5ff527ae5d87206dfd5",
-		certStartOff:  149925,
+		certStartOff:  150648,
 		certLength:    1460,
 		distrustAfter: "2025-04-15T23:59:59Z",
 	},
 	{
 		cn:           "SERIALNUMBER=G63287510,CN=ANF Secure Server Root CA,OU=ANF CA Raiz,O=ANF Autoridad de Certificacion,C=ES",
 		sha256Hash:   "fb8fec759169b9106b1e511644c618c51304373f6c0643088d8beffd1b997599",
-		certStartOff: 151385,
+		certStartOff: 152108,
 		certLength:   1523,
 	},
 }