From a8e9237a216b050e1b11e041863825104a6811db Mon Sep 17 00:00:00 2001
From: Gopher Robot <gobot@golang.org>
Date: Mon, 13 Apr 2026 16:01:00 +0000
Subject: [PATCH] x509roots/fallback: update bundle

This is an automated CL which updates the NSS root bundle.

[git-generate]
go generate ./x509roots

Change-Id: I9bad7b49959a336a125bdc3aa340c94292b26899
Reviewed-on: https://go-review.googlesource.com/c/crypto/+/766500
LUCI-TryBot-Result: golang-scoped@luci-project-accounts.iam.gserviceaccount.com <golang-scoped@luci-project-accounts.iam.gserviceaccount.com>
Reviewed-by: Dmitri Shuralyov <dmitshur@google.com>
Auto-Submit: Gopher Robot <gobot@golang.org>
Reviewed-by: Roland Shoemaker <roland@golang.org>
---
 x509roots/fallback/bundle/bundle.der | Bin 153631 -> 128416 bytes
 x509roots/fallback/bundle/bundle.go  | 385 ++++++++-------------------
 2 files changed, 117 insertions(+), 268 deletions(-)

diff --git a/x509roots/fallback/bundle/bundle.der b/x509roots/fallback/bundle/bundle.der
index 2d89b349f295eb9c0512e17f71070f63e8502b0a..c913aa88ef5d7e4e0bd8a55ce55f12f25065380b 100644
GIT binary patch
delta 107
zcmV-x0F?iqunC~+2e1nev-cgQI<vl94i>X`c3CU4jHToSvm>w61+&1o8x6A>&6NbR
zE!2$#vq0Zk1+(?(DSx-wZUJKjx7~UH2PC(oq5%>Mw{o!o5em0K!2$0mw`}hLyAQVt
N3Ia4gw|Yzhr3*V9Eu#Pc

delta 22181
zcmd431yG#Lnl{Yf?!n!i!QEYgySrO(A1pY*HMo-y2o~Ie6CeZ&?(PnO0N+H;*}Uhx
zyWej8`&WHbMf#zi?yl+UzHXoV1Gv2R2=9^5u@!+KkevBYkN`+XcrPzlTAGR)|Mcoq
z01-%2oedj^2@9nOjfjjSW@TmT>ZsxB;pWap3MBsV6bc#VkEdi3&W?_juI9F;4nPuI
z6gD7`jh&B;6UYtZ*26{N0FOA>eh-0?Y)C+aA4|YuLH?(^kp17bNoI>92VD~?Tf;FH
zJiCIW_(Te*-EfnFm6T&@m7~U<8S80$%cR^d#-5^mhgqhNx*ktT5{_T?rh&QH7$y2+
z^-C@vcIH+hGoJGreR-kb(HF*h;vFfwgUjD2WG(u)-u5#(zJocvn@0MawRNge93vo8
zLaFcTd&?oxbds6ALDoG(7X|v9a^Ea<v>}R%G39=W#J0{zWA|E7yQ-2*xJAkr=A!+z
z?X#)?B{K6~E>C_q$RVDG0h#07Gf!f-XXoj~4THWubK-9pK?aXwG|EL*!CcjnEgB?5
zKz7TVZNX$C6(!#d{wb#sg8Oe1JXKT-Z?&N)=uqT5K#g?s9-Xf?7EvL6*pgoWv9WWK
z`_*HNhO0&LNYJ)2Q`@MnQ{t0NI4RQeasfz5s4yS^079qo5*l^13*`y%VX6hkn7-Z5
zCR0alqMn%NIfynu8rD#vKb%F_t(GQ0Il1CPFGJQ_@^tK)<=Dx$QO{=Wsiw|ws%DD~
zra-E%j_?3A$>!~Cx28c^xiw?rF6$Kmu+#yx1&_{$btF{t8w#2P5CUBF0&`ytfe*o0
zQRkqKu#896y|0EOY7Ok4MM1WieOEef;CNH(Jc(GSvT-f2%Od%4!HTznLreC|k&q(}
zC04|QCueflF_1G5CC}9}hA_|dL5)jH3NnqAs5Z+@j=V-rMoOms#EuhV=y}$NZsQDO
zuAY)*LrN9l3jKSWvrdRyIDTA<2IvM#@=QcfszAE`2`~iePq_OlL-P?$WikU%U=bL?
zWy5b!000;mi2oiu{~n!6mhN88uJ*Q0)_)NKULAJMKc#>dJpA9;=BE(UhmCOHve>6M
z*qf^59~6D|Nm1NN3CjGWX(4GDZ*8#-yJ5g1cg^}bER2Nt+$0C6G!pi5o#``4?j!eG
z4lgdrS*|n!A?{sY)Y)m70z2E7x$mv~RX%#tmoqO~vl1xnvl=7aBalgqn{%1(-l{V$
zwt5ODE5gIak`z)BP1(HzQM6<NSR5@sbx>JpQYnZ^))0PO`}neJ8C^u^sOkIJ8KwGS
zr)9eH+&9q|aRKeAQ)3<ZMzoa652fQYs1WoAg3_l#CY>TG6N@xrs=3%a;?PAd+U0~1
zN6dGA$FYbT6;@IBpTxc`NphQhUiXq747k2b3g&)T;5>5;yg<fjhpd10QwZQlCw8*u
zKROkP*1z{vL056_9c=%n5TwV(0^mVW+O;^o<sTnr=3c+%{Fq(Oj{Ur>c;&F8tm9T<
zA(3aSo}EQSlYmRfQ{n~LNwSyHGZ&VKo^E2t#ZL{iQ%qW4)YSPUC)@^m31KYt%#yN?
z#p2i&b~yKS$)^FnUoDy}_(q40s*e<)WXtk10YQtFMch@Ey0Xe43WJts+QeHRT^2+U
zhuJSzTL|?I8W4!9&z?tkI5z5}=`A@<K;&P(mhI@_DQ@9j^^bU&PVlU7nWa#_y&CUZ
zg373i?k%mg%%_2TIR1byOok5l{8kMC4~fnpH68HD3)nJeg**dNxq<^;)fVN+E7!K6
zAtvW?;+#i%5E?IuaJZ9@4em<cfjSp}A%I8lpO?QW-#wi=dO*Zi1BeI<50-&3A!sNl
zpwxehpMfO5v;gj(T0q6s($Ut#kxWWL;!g=+2mTZQ4bI<s;OF>%X`kdZbvzIX(1`F^
z4%B#o4_70<V3P0fGon$mi)<PLIH4_#yP}y9%>7Gj<K0*IZ&_Jnw=3}^yer3fdfID8
znYLxt3AW9fgjiU;dzBY1(TZ&pHC^pfiIwogQ@uxc1QXX^TQbrYi33G{sy$*<XdGzl
ztZI7SE(|U%8dV@fkKLmv^mNsXAQ)>bAZrMq1tbs`;UXeZMX!3WOT1IY_{za9e6^R>
zeUn%HD-4K`bEBWNZWuw3C+F)<ll0j`!TJkGptx>?#FXkv%OnE3-dJRywotaQxcwCz
zbHiy!@;6=QDvLXvtr(IG^Nxn#QD?|lA7BWKG?>p=e&3^GEVgt_DdI8cPclOWlbP6m
z=PrqW1i$VQ>u>Jz&wFG8a{N%||G37V!@q37{h#Xd|8kFHfD<{W7jvb;_)%<W=_)UJ
z<GON9&^xPb_7vos&%v-5N2XuJ?7Wja$L(Tg^ZAu((Mx@6=zMf4XG6M>?sV;0S$eDw
zYaNNtS6(8k<7JUh6)MM{7QRIKbV(1IDAqZqc|P=}+%IeHj(1s7``OlQ?BJa2ItmUg
zG09-)OX|j!H=1H2ASen2=ES&|?Wk(2fxRcjJ;BQPiMpOOo9w7tUkI(`OU+b=`xc8O
zvzQemFZKho5t^*mt#8ai73*PrfrIp&N3hS+n~8ea7^jWf)G=|hGqvfhyiCd2;8>{T
za`4WNFBo6MHni};$$5Q0VM$7WiDPE<@;i~}<Z8{D{pME21UetrKBiNmF^*5LL11mV
zU4-3Z$r4sA`$Ex+SjH>sQ1|UA;BC0}M$61gZ?6`KeOb`;YzL(yN#_@C2OWd6<6?Xb
zf-9&A&+WC?cEP$yS%vk%TToKDr*yWsrEoDxHyo6nG;>q>MdNg>CizLrq9R24J$5QB
zN9V4DjPwM2CJ4twAS-ZU`-pe{5I`a*t0jjppvVJ}8;RQGw&rZL=PCmfM&Ck$8p;xf
zaOg`3H0_OE0fi7C>GtZfd)2j>*lO`T)WiBQ%~){HwaXrbkp`Af#4|LBUxqYJsV8_V
zF%vulJ4=2Q0Jx`#uR^S|*zflpyH>V#KJLFMzg@hph4zX5VExOQ>9Q_GrkJC-l6qTe
zsfIy2D^+R!4<g3`)oDLRH&f!@tlV!Rs%EDgtdrAI&Gw{=^Le8!jXQm%cHJns3oqG;
z7dC+uG}?#x0HFzE8X>mWK$R=lJ3DyqlFRCy7D~pw?2l%P6<OlJodI9kzfw82p)=Dc
zyxekez$rRg7<}a|!a7~@eXelI2pSdl-J{s)R;}xuWC({iXqQ>%Ml04#q(%IFHnKq=
zizSVLx-vwqcVGcZCUaa9@vFk#_YWrHz~Wbf&}J3AM_kLk=|`x%MoFy6E+rM&&Se2u
z#DV?rvNcB52dePYd)w6ZYV?WO6MSy)+RK@+_4+yJuxlS7%A1JfArZ01yTyj@W4Xu!
zLU_+BG!pT-K*=eNcKm&{<E>HQ$-A$I(D=)In+i_7rSHD;ux>?%U93Dp&lT9@vr?@i
zq{2?84zE$A9r#}-!?Yf`?J<Ax;QP8mwJ@t>ED@hOj?LGp=^~q{%~qd%ES~|D1|&6s
zJtm}l3^t)8kTH8%GJ?+;<Xl%tu#tD_C;M(1FlYUt0_2*!&urCD+q5YpSbL%vyMF-J
z`Iak7GrSG2w4vOnKGeb9R&+9N@vO(zzIn|N;qvT_iYKCPfG=)=W}0{=8^V$aMjQ+<
zaQl_?mmKW*0o+ZPwAfy%2ExzSaJ8bhMY&?(ZP4TPX@d+woDZERutiHceJ_QC;~#VB
zS3fi%*g)eG;YrlNqgU{=LKA}-5at&HqALY6M~7IhB0(Mtb3saP3H?cgKdido;N&HF
zU36L?^-rq9B9Tyjt}LmX-rWiyA_a1@u>-+A%a0#0zkxj$u)D&}!NteLr}tmIiJy)e
z10Vy9i^jybZX^=ksCE--Kxa%=barn?8wy0+w?>YkY_N*Jrkxhjt7KL!2oz|)cUOHe
zdL*9sT<o!8aMmu|OR`nhDqY2>eu~LO^7A}Ts<^Enu=hos+9~<-g4q^6f1=zXs+{vs
zoQyX({t~aB={Ht!CO%G?(cnpEi5zr)J4?_89aQ?F#4NZ1?X0F(rHfn^ZRVb!Wuv^7
z8}{z49mV$A_}ba$%plKd%7vVGve#MHCkts}`kOQ*BG)K|OD3rJ>}1|TOcm5sP(PxG
zlo7W~s&*q4&sXxEXsS@bSV|{zDl^Bu>z^XWpLjJ4WBLNlO=c?^AG00$`Iu66iEL#n
z6U_}I6aWHH6#NPp9P@{oL;~xqe#K`z#iA9!3i1vaZauB1^h9g`Me;juVrFw^M`sIX
zb5j=Ze^`IrhJ>Z7yRDV2xv9IYvy+&IyN$D}t-BA4xvN8ZP%Ho&B%G1^`kHX>D_^5`
z6|pOx++@V2M96{2(3`9Bh7(PHay83u(<o~Wm%_2hZiy_Ay-IK|oV((AP2tN)f)Tq|
z$ymi=5*KBq+RplyTRiPK1|gW)q!o{Laz00<JaKes?NWu)G|lqzt}xgyVU7%l$lxj#
zeuPa!m|1uf5tJ5N0qLx3p$Q6f6D4!a@v2oG4<51rl~TCssYn&PZRgJ+c}G&!l22Wz
zb+gH=dyl`xXq#Rpc?O7t#c4L~ZdFd7UEyn$>fI+0RVN>85lvaA8$zRYAcdCVhBgB+
z^ZPiS!8D`X55RbC%*w}o=fo}QC#UNG8%ZPs-W@uoyp;m$kO0fNYI$@VTBvfc+n(?X
z`3Mk?iyHv6A=#&Yg*<0+ydDK71`zF+a)<x<=~_FP{?O<^9w0Xu=3HzXK&~H%|8ofZ
z`6A}OzxdPJ7_>PXnwhEN^q>hLIjry4H&~-N!jLgtEA+?l7A4;_$<-S)U+b+&OM1d{
zw542QG`m?^=VncWYnJ_tdg$|kX@^t61)jP{FoF>OJQxm*HvxYV<1xJc{EHC@N!n<T
z!<YbD@`v;M@rqQ;fRd~c`@t}+XpV{<if8ILrz5zBAZ_ElLc|P&<qhL(=SA6#mq^d_
zN?Y<OWj7FNZ!X!FjW|1qybZ<m$51KapC^0`V8^RNVzTReC4!9+MTY8y-5`_#A8|uX
zGF@u|ap=rINA1KQjAxEZEg~#QhI36bNL>XZU%z9{bP<cA9%yinK>*(^ZI(yTboMdM
zcJYp12L*QJH`v>N!Oh8QQA7d+M~`BB3H4OE9e{JSX{l>HzC{e61^7cJri3;G>IY%}
z-Gl<(V(wobwCKNo&>??ZD(a7g&;WoZXlQVl1{R0`i(nEi3kbgz2LOINf`I!a8!w?q
zl3rYkSFaVB<{n&hp`DjZ&8Ke9bl7kU1v-%`MxT5^BX=|^Q8ORIyggx<cRt{G#DX07
zBp^&-KX1wcnsOCd0<MuLisHwjea-$73iQj+T@2`NMy6LR;3zz>=C=%+Oj|$llyZr0
zU|jx2IV0yJh~3bi$3>zt-W_k}0+NI@`&312BUbiCdsqDp+yw0PG&U?!B9sS{gKL9n
zY8FaNGs@1@ipJ>j_UsG-e7gBoH_Q7*Nt!O2u4+wSuD~=m13vVn0m;*6rpBl7hX_%O
zX$;C%*)H;mVmjuBXSeT_7%zeP<liw8IXlEo{BqJgp3+mh(sWq&Tcy9YZbHtn)U})F
zGtxJLMI-OGQb68W-NK!fevIET`A&EW<ok<+B#Xsb6HAEwlm>1#w%_#sga5&ys-MGT
zg9JNB39+BBe~0>PY*Ql0peEv?(d63;%#x}_nv}>lmt$9Cd~`Y{$hSfB70*)HO$8fj
z=)$6-7xNI2LvelM6Dp&3eAErt!Wgd6GT6C2N0yfa%L`BJ?#a*9Ojq*AzLKuj%st{+
zOknC8f78L^YLgi);QnS0ntIPG+)daM%P}|0iuXu|2C6Fyo#}Cs>@wv_!+F%rj`4K-
zdRC}_!uW*bI-hGY{wjg1-&-?+tl;yOBjTW(KU)Te1I1p%IJ;h93swlm5g%?&CckUJ
z_FeJZG%lM*)yn{iDiMHm_%)r+V9ordHg0bq5$gN;q*ATA_S*ELH)W@dedQvlIO9(R
zX$SDect~E#zhG|;G)=~+W#W=LD6GCr`V_*(tQu2RMxJxwIEV%${RMhFAWjhW-%a?1
z)I!v@mGz_34Ocf`i<HhASF2g}O>qyis)&R0>A7XCy1bDwY`SKYbQ1$iMV-w_p-?#~
zopdf+f^wOCt$v@kn6uWwVJjd6!IbSL8YZ%Kp*p&#8{;R6_4F{(J<F4b)s=2*xjMsx
zS_Fmznj`Oy01?KEMj9?h<0!xfIsH5U2<G)$A?ogt51@}{&f)!c7B&aL%qa)rjd!sm
zOJ-*sD%On-?H6aH_Q>3DI3OPX3Vlc4GfZid(66-69SURV9X-|zHW({GJIEYXomeQ?
zP8T3jb99osI6`Vihxn34Q$Wo`5lsR5i=21sJ>PmVRT~-M;Kx|DRcg!b5T#fPAy3ci
zp2hCKFjj++n*JN9@B*t^3F6W<1s--ox`_kwe?ck?MDm*?)Bg)rOOmYqfz@?^H4N9~
z^5V%N?Kdig@km|?Lxm;Bm}6=B00goTKysN9uu=U+qSqEeJ7+zPVkrVv6e1X5Y>Y6p
zb7fTEh4lK2)c{PLCoN9AUoJ^%z;UB&5&Zm2wJ$OstR+a^khBf=_HD;8-B)*zuXm>I
zOB*KxN_K@#rLJ8)#|@WGFA#d?cfj?_xpGN#9rg+jyy-869Wv{*c9&Tkw{q|%F;m9%
z{9&C1Z{!sNgg+}AJ9rx9EAS-dE>dhej$sqLvitNnT8C|cJD^XW%iei@d^d?CKJ~Uy
zjC~$?>f|<fx;0Kmq=9f(j;_#Uo(+2GrWWU15m5=Q{77ENr~y=z(1TP>`&X<&Evs;8
zeNk++IxSi!B<xAA75bw27p(r>gkM<wl+E)-77G*cZb>p*S?&GhN)_~#j}Lqi72bCR
z#;`8t=IMdQ%WhJgPfd>5zV162^lvd5HeB)xMinD7lVcNI*59HLbtG3jnNM%RnM@XS
z=IA4wO~2YuzkFqWCsMXhZ?$4(HS@(uEbg4SVc$zWFGpvcQMXH!@`#x(L`v8Pq>)6E
zu^J>>&U11)<70xeT)B%n>QpI-%gZV^za}Nj(9Es=nO_C=hGn-`Th76h9B&%>owpzp
ze~^9ILG?52z1gVlW?qN&M2F}ni)JrsZD1E6Rngkw-inNWLp>Ed4DgV-9jQ~QQ>D4$
z;vfTn`ED?>KZDaa4pFdwZ#p#<(s8-&TjEz37N|ZjSl|5yD`cesjUAHc>v$xe^D1d-
zuYUn6&>?vwR#b@*NDrn1XecZSNn2~%AI1lntgW>TnV6fKhpVZRxh0vD7MYr}vpd;;
zNy0yE@?T3b{ZE$s$=dxRTW;I;Q>|Of%<QErTfrhjqttRAUNH1br*K*qA`-nfwk;K{
z>20iyAI~VR5Yy$KTuhk}TyW<tmLGXe9daXIqK?UXd?DxfA~DeX!`o8hp5m}uWi!=|
z+rGmE-lPrKE%-#_UOF+&`%ijN&jMfUa&<m;MG)%X=T*`7Vj~2_)eTTdWtCMrLSXAb
zH@09Ms3K;FiBTw7nnnbRsg(K{L@ndXYfrOm8xpBA1!jyAz~U6!xQ%l{V;K~@nAG#v
zTrjd&<B0%jL2qHy(+6Rm`S3*+LSp#SS~W&CdY=y?mh-+vwD{O*WtbY)T|i9|VMw5Y
zM20yc*6M_$%G-pb@aeCTP$S%93w7Hm1DML7A%KTGF}Gms`HLj{-GpC~KtuqWzW6me
zPcYI77G9ftfn4U6!TL=n9=oR~x^{Q;h3_1O<twhc-0xBixpRta3QdW-5=^h^yvG(c
z)O}veY>}q`<~1X-s4T9dtwxr!c}B}QYiwUr4(57OFuF)=Xv(me;-7$hJys>)bv_#o
z<>1b`B@V}@P6EPwq1$02Pz+m)349bYGOU4GWA8V_j4#iO^DsO7xy^aoC5u6uG>nM7
z>9#0)vFlyv+D(I=n2DO_vbM8r43PS0l2c@C3zsb}G=>Q#xorx#2(0y=NF;2A;Ap!i
z3~u(xn{6<&1+zPIzXut-HXl8dc|%QWozHUt5fY&Bwc>V<1*^zw7m`%IZY-S`g&y)7
zSQ3JMNdgK)X^am&1o%f~Jn`FKf~dir$!jGvAUYt;4<SIpB2~AvB=hp}VzG2`|B*&x
zak6x0b+EKHbzpY4baixN;{)>inhB&crzZouqwHi-zos&g$vK&`kTH{4IlGdX{_=`^
zEiK4A+$_nQog93?Hay!eNn`l^#&5B*bWIK@#ij?pDJ8-7Gmgj3#?Hpe#>LL{Gmgi>
z^J~cUV+j0z=fp5SPn^7}j&Bl%H8kGhDCW2BFn*wEYz0X`b*Ud^E3?t`G2rYRvM(?H
zT7NnQ7C&5B9o-R*inbvCc3KACR54&UnReeD`NTO5;nDoi#gO}*wO7?pj=!cPf1$Z5
z>D7kWRD}$j@CaG*=Mx~P(R_zsDQ*wGR5P@A)lNms5<^_>&&!1R71cHMncWhXSs|)Y
z&&2)UOcb!ziIMUJD$-*!E~+@%OM2PS^aS$izF}qLQR(TiV!I3ysGs@uB@b+aAN<1s
zZH#=%x3#;nS2Xau{z*2DZnMrbmE@33nT<58V*1o3RpYV*$FRT<Xkl<rgXR~!pykzL
z>HZ{Fq#uEdj{lFq0`mR0fyE94{sI>L-vKMxdlZ?72gt+5!_LL^j|A6`A=i)L|3e2&
zPj?2;fLg*nxGv-(+plNt0Rd&6`|M4rVgy6;rb;@lpC7M7d^+7sVG&DcXX}h7rId(V
zXO!5_U8B)%Lh;A#f`TBVNZt?ZWOZU{(-IZgup&mZ+u5TUSzZu%O;5dyb0M#<W8aA>
zoDS!MtZAB%8QUC^>lG+lzSjuQ?l|3b`sh>34?@yhSINL($1-5`*6RM4Qg^PmNt=~N
z^|k+S{55sR#>mHBslM2BUs!tvjJyg&Cs_gKg((bt@tb(K&MS4}Y~f2>rfu6wC3ZzK
zuYGVlp_Q`@Kc*^Mb*C|~LA{29V$1Qfiy*<>`fKYCp_g$b)n<y%S9K~aI5DAaKg6Y&
zQ$ZHLNCxO|VcWUV_>PmD1ndads!ln?<t1QRy-fzhV1s<}h|~H%_=r%%MNCFOL7Ujw
zXR+u;xnWdFe7VAUisNJKI&W8YiLGGW$L&SZ$ekig%is_!e`i(*;rUkA)(Mt4u(w$<
zE~6TA%5(t{Us~qk;KsaL6h^dUqVcjJi@UQT(lZiT6PhtQ0z|+g7|2{gFgq1xG~8Y(
z<S^@4Jq^0>L>m=|<fX`QNY3gN>I@;Y6e&eBeDi&)_Sta5yZ$zz@vz-}Sl9Q@`PjWX
zg)y>`igU8aFHT=00lgQx7b7Gd+sw0u`#us44a7YOVCukce-JwKWm38iO&dcNw2jbk
zD|Y*s{G^Ir`Ah>a`yHkxssQ93nkDyjQOPe_);R`J>bh>PI2{@U=?f-!h~K6TTRQns
zb(A=WODv+mT1(OKPg(#v{gGUeQfK>};y^^kk_Hz`n7X(+TUok+16igHWa?sUV5jJZ
zESVysX^Ck_sWXdlvvYHR3nX~i{t=TzCXtp?dkzv)QB#(dQkPR!5>o`5Mr3Nr${NgK
zWZF{VKPa4?9r&ZFf)B{{D;2{7<ltcYJ^Wue5aYj{=s!QukKCJyjQTzkMzPlb!~VsL
zvEL+gqQPBcKSgsWx|vrP2lF0O<kTw1&5;+AyvhEi^E=1-TgB+&P150gWnOuf5I4pF
ztJjFJqS^k@*XMjDwacFln>L;IUmG^6C*ZMb_K`KFq_Y(QC^(YWB+Ly2b7p8S)DCfL
zE2^1pJa7L9HU8bNlV5OBniKmM`}IV5aI6VbNOel@?G-EyQQ$PnU?9zAwVVwixu~c^
zCc3=Ttsp7h-lt^Chk#^*cv!!!tHx<2aqCUn=mz4?25$GHFB2&@MX_=m$fDujL`WOb
zB$T}DYxYeMjwo-3s0*x!hrta2^S0eD)FA08wCmj~N9*5NZY5WQ5`n}t*eHSIKdv7U
zi@@?n<nu?Zj3t?)vy-hmIL7H@O(x@LCd-Bo#Qnv$=rW4R;$n&#YMSaAU|Rsp!#}Pb
z2xR{wO2G*Phpm5xtieHR;PXGQ_^;cs|IhdPnUSkv(RxQnbaI^<pYKJ;IB6aq_FSqE
zEl*$St*)Oc=eNU{Xz#uy`|9@Im1HTB&O~0MDpZ^uF}K@=)-O$}tDiyz+<2Y5qS18C
zX-3N!#x(Am*1P;=#!UQ0YTeGe@IOQ+MR1`c&=qbzgEkj#sXq2M8YzuYspY*9Ganv%
zvW*AXpr&$fjWow13@a?LC8Q0GkUnUoaW1?f+Gpx`$zs0rrXqFnfj$-MbTA`%ju}TL
z0VA}KpQ4aXyYS$#E0!+5G+>88Tp%RKyu_Rof5gAms{G@mBaicXAgt<~R2V7d7?qmE
zOC;GKrHC2|3gDZAs*Y92Rngt|;z3ZVZ|Va<ZzR7;m|hgx<3!077Zo!`L-u-K+C+D6
z`f}Ge6Q&V*$;C|#!MetOR^M2}eMu(2m_a+4NW&;YVhdNjT)4S8Wsg*6<Ud6fBtvg2
z;Iv!$AbK!+^x_5M`K}J}fmk|4AL$g|IBk5y2Hxdrg*3{QJAVkvxD!)i5u1U4^u8Z7
z2wlr4i1@0+ayR7rI$W%o)D_vXv`ctFTk<4{d#S^FrW+{aNaRmbuIk}!Cejxfb|23=
zCBC_kc@6W3`Dm({$LV9{_1W}B=2V^o-!>MprCYy?$3=4(a66((u^$Z08qea9gMM3s
zGw2{E$NaWnJT~cEOx}l_dcpkbhwQRIacJ9ne)Dv4G5}$+3Jz*|wK)KpYmtTYiz$!K
z=G*D%I?NX~LUuOU6n}9b{%%6@mrZO?;;A^Kjp%WYO_v7i%Ar|LPi}NR8{M1GSH)Us
znCRhJE$OZk8bJSd_|wET&iB~jvvH^w4PQz&AjORqccpdUxFCV6ZSL~j5)4lZ1mo|k
z9eN%<)m?!cp;&aaa+sO9Vryq4aG8=2KN;@EqA9pYjE6jxk8~ENbah0uM{gv9{QBcx
z<K)m<w)ysnhd3C(jaPI>nn><tyu>lSjUNV}k5Tu0Ga=0HOYfOviexKn2Of@(cVV7&
z^KEQh-Ok7_agN?QcPno|#AvN2-O$yFd%03t4~SqqtL=q?>1f69L+mVf+IiBE`25;B
zKM3vv@$fsxeKCwcX7}X#k8K^QAj!TH8*191jlujW%)_}79%3H<`o!V+shYIl6B`3h
zbh+xl5}u$MBDHpoV8!@vOO|ukqtVnlm+O6@B?t*q4%p@mqALeo-+OfeQLu3$G-#c)
zHeJG+9M~}fL)aubzApI}ysMgdONM!Z*n=J`m&Ub-<Y82!Jgv-$ia`eF0g{l~E5ews
zEXw@&!H0Ie`DAeYnv34o{jLub0%KN+xNlSIBLnMnu3i3&qyNTRUP#=}KJf8IdjHG8
ztCL6@{oU@l7l98JCr{Qgkvi0@!r^f3_vKq5<&`Cqwi2Ukk#b?`NnJI3gnXd@VDEXw
z-8fXcE02j5DYt(+U*eS`3UsI6*Q7ecYC{+T7;P|Biv0GVAfdLZ`r@Fe3EpB*ze%R4
z)&{UA2UgpF|Nc=EFb1v?x<5R`<`jg3)pO9j!RK1K>CVx7GdU_yoa}mnc;}dNefly;
zzd%+kkFT%sn6C2Vlcx=K^U6DbLndi21##Y^tJf-%e)T4Fr?P840cXZ8pUq(^wV!9f
zwr%rE{Pw8W$9G5E`)+Mdq3fRlx+liu>*8Q?W8{)oy7kAMKt`u5K$ej2cWw2!h_YLe
zulruxFTWqIhdQ0VOlY#SxG_+Cw;O0>l=-#kqwwH3R?fTQO)0-9&6{XaGqo_xx{spi
z8_}dPiKXs(6Sp<ybm&cW2u)gEqJ=aWKK+j?)W^bG`JgFNG*tybk=Xe)7x&qZHU;0h
zk@pJLL9LpCo*>v`JEf7NNZ|9Vc4Z{ltgwcRqUn3LZf(;gIxP>Zs)$!R$f^kF9+8S|
zao_v|rzm7e85R%hTP15galBxcu6`$f7Q5@tU%5j-;TALjyrC8!pb!wie3!=3-{T4Q
zhOCiGPJ1s&Zr2mXmCc$lEik%hAVrI!(@r4}KweA9z5?3Jl62J7H@t$#CwkrQogSC)
z^m_13eKm$EpV8dC^}A_(j2!kX!uIJF{gR<i)VAuHv<9og+@B&%?@1cRKON)TPnIe!
zCzVXCuUx@uEVJY&)F%Vq1dlBdEULPpD7)-!eZV2d_o>~ELh`T}o_^bg(2ZB{G^J7S
zQt$zr3aS=5VzRgqY_;MglhqPqw>}NOqRdmy99~$rDJ^+Mi%T+xnk<%s4I&*LTN>yn
z$eW{8L|Vknz_5#47TSKH<yxCdpp-q$m_cRu+TQOyM+idu3bpipM(zi~$56ouGt+M9
zqp{V#p+PJx&7E@dcd>qeM=#*on9XaLTg+o0wtO)uE;_^)#Z=0%i-I9=##V~~=#R*z
zbug*NYgNH$<+lUz&&w$xX+ZYGp=z3A4XhBuL87Z`?v*B25kWas+!l$3?``n*qfLjr
z%F}y?21>qbDqNg`nk|KBZN^9J@6>bF5($P33DO+dBaWcR1|i4vI_CBtYM=MA60R8g
zUfss@AG7gOt7=-uS+M)<<@SWMFfi|t)UV3I7Jj#`CZ&LMyC*}e&H-sC6pTKZ$h;RZ
zJR#I-PbW`fM*L!w!wV_n(0qAKN!^rhm&ND>f7e?>mq4QfFSs7~=Bto%3tJ>2%mHmf
zf!uMvl!o6ntz{+|d3jOWJziR?nltiIsH)<g?mC%C-$%=&kk|`!Qq<`54zCbLk$7Um
zHaXh%5oNTsG0$*l%05t6ET;a$LRdc4ne3B=|9FQ1&X<$ScU`3SpQ_q;DPU<V=I7H<
zMd+SMmMcRHpJt7GcDJh+7CcBjY?#!W4bI$?z~ecnYyF~QCU#*p5&y<JRfDWYkHwvF
z`b!6%ZCB-V@n^mk)i5Z_J+m&e$JytaY3t({ce0!qhq*^E#G8ZAGsNMa>MZLSL8Rd1
z57h7E4<ro2pRV(d8UU&EZVmvwFd-2Cmz9O7>fx+qYGLd4k1!<I)cTPd1!sfUIoWu@
zNzs2~gMJP<I5_lvuYvjRYa}CLGlH`4h80p!AegJ6=%Y{3f(NS<@m~_d=e?zue0jkd
z{EnR@LAtXjoQ8npF^~w4-yqurmx13slmi%Gs)6z8=<VwEL}B2Sy)#}TA`<h%p704`
ze;xYX;zw!RTf>Lq`KMetz3gp{ZK|{zkrsVMB44hLGuDr9tyE$h=}Z_;zM6n~29n$2
zxDzixw+k3pz1d!#-Bpc{cEP?CQlaZG+s#_tDLnDAFU%<paV_CeqZL--`}GjF-ftKi
z*<-v#{`T@fa_<(}?R@XiAS3q5t=hgmaCFK5l2MUwtu{54Sv=zFbX|f(qXX92^3rwh
zZIs9tkE^7f#OdhB@r1)g$K@!{N6Qy!F(^<E*`4}0l}QWxk3RnI4ytc(J}rz=Gj5UI
zXXUM{j_|7^%Wk8#57m3Zs%>Lny>vB)f?kE@W+cOh+;uM_{V=3ub?QOAXx)u!Y7$u|
z{H6SR(LC|{FEx}JE0Ug$M`E+xwG<!JiB`CX7Yn=?*fyE3wzd`qSD&_mKwpu}^Pe~h
z&{~+DJ=;&On<#APIFC&uA&4h-C^qG34tL}Dnx2+R84yye7`$HarN!Df6|RUD;}{3s
zuT4r`u@-vb?aA~5vg(+M9X#8&#Cha+3j?Sg{unY5r#NdN{+Y)B{m3Ds`w`Q{7!I#V
zNp>y-Gw387^x0fmnR@~94bbfYvHq`!Yw&wu@VlR>cVes`$y*p86!;$?5*T^JXungr
zKkDdz6%-PLnYGC(a!^B09gkl__2Nr^NwEhy{rEK{v^CHYoI?Ja2?cV+GJh$e6i*-J
z01$)z9h?7w?~s2N3#brC0E93i&htE2{qm|8hO98G*4tQ8p}pMK7hN>SC=D_ehPU;u
zL((Nsc(j^P-T|KbX`Dg0WQ#kYw{hR$n&yq4vsl-LJ<Lgd_fiSo_6OAup&+@c-+IEq
ziOHlP->-(yBx}Y#QjnTh`Wx@i)ZMTrWT;H>ywJQ(BKN*Y^|`xcrirl90(zD5cyp+s
z>r{!DzB;$7Il&8**EJuGE7Y1UV{OwS{mj?BeverGj49x`uX(>ix}@NQbB{bO;%&l&
zb|JoM33IyGJe+cc$~-6`E=77x_%!7K9fJ2tU{`dl-bssqY{Xe7?ubPyer7LOWT%E{
zg@1-3b}_7#!g>65v!8DdI#RHw<v`QdF({Mj$^meHoBlpU|KMT5`OM1(h0B7nvPrW5
z>dSL+{KZ=jU9F;T<#Il^)u_!F`TmV|N1WpyXv}yCB9L!)A6P(>2_U#c2I84OgO{P1
z?|I=x_Kd!9!EFwiIcbB+R8ntR248Q#Dg^Y+SatfCUI-GcHHR1&=J)K)%C_SdVqoJt
z)rJ$=2+Q&iL^c|x8D$Tg(3-)oC*m7SoRKfJ;EIQ&zX(=mtH`?!Fza+(D@rCFiKfv*
z;2j_PiV}oV?_I*nAE6i*T{115e$Is6+@?X%1yHe-$i1vRalAd8KijA|SxJo7U_heo
zror!3Lx-`P4ng1l$TrH-7{>vyf+2&=0Y@Q!7YIYb^#9LEl;aN)<pWbG$M2Lnm_+%2
z+??Rh;4dQnI}%0PWdx0Ai{ofyZ)Z$SK0kgu8pxC2leetf#fjuxK+#Qf|D4nWE&2{p
zf$eQuT%ye^87cu_oxo2C*Kj?$Q6!UK^uYA(N6S*u#>V!>`0o!c@ksgB9e_gJ&o8#o
z=sllmw0xu(NppQQc8ln_Y>ENOXvHi%Cxo3F@#y8QZ*{bHG{QlHLl^q<O!J1XoCJ%6
z=kG(dmd*`oVK|(lxyQz_l%6`}kvSDhd&t{WpfwL_T66BDNGzT$YXV{+JsUn1h=|*^
zv9{Yt;AllL@R%k(lvXKqeZsa(;ZaC}J%Jt{%#K_@@(Zr65n|}I<oEt?yckq7F`1do
ze{8R3Ul-RnJ(dmn*ioXuic^zoBLM4M6_9tkd^kd1mQh44!FqCLOtTjG{MN|n>m0Td
zK8J0YKv-0Auev5yfvUIYZPQTUv0satcxW#65saFiu2xz4_Z$&K`q@S0L{zM{<<#Pp
zn9PpK*Bp^24Z+of{S@kh*8|7t*zf!Nz10R!$DF)O!b<l*44!01IsjZ?@*Y9Vs+;+o
zT~dmiQvEymm%T+4!0!l0HWY59k;t0lI(=*Wc??U#YYD4!Zf_lens$*alJm1;@t^7@
zkPj1SBBJXG*IeS65VuAhZB!5DMPNWN?Aurd_K(J*>lB0a^%lxAEdjE^<+jLQTf<)r
zxiyIh<WMVs=AT3levxPhAQfD!p7`%H8oc&{8_A%9=YYX8z~D((1V&f@G@wHV0ty)1
z2MkVzg$F-?fq{dB1O|r_1c!<_`TWY4SdqEgfEE6KRGL|mnL9hVx!byXxLdlBnVOq}
zEM44xrYD_$%(W!@HzR@LFK??jJJ_20kg@*p5FGO(Q*kvlcee${c+}lZ-7Ou#SsxZ4
z^FL1oz#+GBcX#1uW&M#7dg0;h`NIscc5pT`b<qD=5NGb<_Ma(>^DeB_5DDS?V^(YS
zG%kaMrcaRLe^C~HH{qAE_-O$BR|<jytRVhX<bNs%<#+i^ig#V-&No(?Zz(yCcj)JP
z^gp~0of{utC%?ZiDHAX>QKv0@eGN~+u+y3Ex|L03$5xZzOS=$;5k*_-rN{fVvoieq
zv0-Q%2)6%=mpz&z6{~`;Lm6D!@J3kPyT};gw>WY7R=9IGmoY&TOSiS2J>Pk;-XJfF
z+cG*`2p$B{E?kvLqU7mm>LN{}sLA$K<(;zz_3g8(aABsibgw;~QAVor=ABz<dG4U8
zrkAK8KbKQY<reBJR6s^24$oA4bK#1Syt#k<8Z=*SSoXXz7qZF?VsM@kYWLedzPlMj
z$|nl4j+8Rph7h}sOdsEhb9pMY8~2A6rR{QJNT(W<Aj$5kNlG5$)|dW_Ni4g8B{55x
zYn`;t%!Y6LA|4T!6u!T@qS<tE5qIJ^WXttS?%o`-B@pVeSE6t{eyj7me_X7aabFoT
z!U%LAHS2Jd0XdmJs~HWOiC>uS^#zz)IpT2~diCCn@3VvUy5dA45~>FsVOHk@fyCLc
z*S$czX_GA-jySZD3j-1PZ2Vd~r9QK}XwsZHK8o9tZJU`)+p0Tb?Lk0?7-2(~bYB6*
zCu5~<x};^imT3mMR*V?j<cv&{6a&i7dbGUhMo2KQ$vh+iw%i95xu(SN?DMaXXWWJT
z5UAz>UNXG`qnxpsSHo-6rX01pgzHXUd9**ERAA0Gp78<@s6cJt_;~T}_&A&vMe*)b
zbky@ptijXU{gQvx7V>|DCBeM`WWTyb5V3I8EzLb#Eq`_tf_n#DU7THi7JdE^0{u0E
zOy;Lh{81xd0ZuXTak8`X{<Bh-jgN~R+-C^<U)=0x^*}Wj%WS2CrY-D?Ei4<VI_23B
zaMJtCgf}V*YOj6YNLn3X(cnsN_eP2V@_^0sD?Nwe*nmGGPas+gd&U}ZdUgE3;t+4z
z#R9>1)gzn!ai?N`sxMXIgJ~+}EUS+mj~QjgaxAGEd>j_9NQ#XUCaeW(=N`qHHOmlQ
zxx$ddEP*6nhKP^LbrGAKe!*o*J-9CEPAcmASO#x`Vgikx=97!Vxn1$$j#`Ruki_y^
z^3|I&wZ+T~p^|U{WG;?7g%W7kXGCm4CvWiVKl**0AN$5ZHhtA@$H5#7egEEID!XXi
zfOw-q+{4Ik%Ikzrqh$yYj}S9cjx|!@LB;Hg+fF>auf%U#HU}7-1;qMIvLQU!kkGIs
z&=3+3V!tUWS*)8vzFHFcqgbG9=z<a-<l$kM@AlYGF_7~IPm@A31Hq*m`Ly}e;gr95
z4_wpB;`S2*ztZ79ih$K+B*cCe``)1fNPcx}nG?W^1{52qqj=5wR*|A0sp3GL;Q0@3
zRNLt!W1A$_hAl=ab?`;=Uu=g&83K6f-cl7mLrvn+lb1A7(!TQ;Bb6Pqx)c<pNy=~_
zJf@OH#;sE;Stv<N{LC}yyh97muY^y^U#4S#``Je%X0vRPhBAi+O~>}TOknMJTugE&
zh+bL3*4@)u;WJ$9HsnpiTD?Sr0yB2rw?!J1&Qck7*xAT0{Pe)Eu?fB)Gs5x#ZMil(
zO;zh>@*QA<Z`vb+#|MbLK%e8#XFDRJSqQutF#vt+$sn><!U;O?^|q8MgdnI!M$xq3
zlx<3CKC4%uKUbzCop-1tm0Vk*^j6h}9KdP3F#tS60zox_r7r)s)FGd~GJwY^c_$7!
zJ)p(Y9sgIUll`Ac9WL-0_@cnII;ek<%YPO}0!_g(2QG{JQ|35<TwHp<|Fx}tO5EGx
z;H}irt8466AC-rv*1c18vc=X=GDWFy`4Ty-_Bz%=tIZ6ezI><BH?3R6zz`!Mb~<fp
zy<IK~ZYh=R&m(T{cvT@L+>~-ePcZdr0*V;w#1X}sNc$`7yWzpBN7QO7YFX$sB*UT>
zoE~`PFVeTz2IqrDfK11S$dT~!Zf6jixPzLo&8G`|&Xv{(Jgp#_-tomQ=auFBkBK<>
z78nYWZ6wz_cjn7hm7c{fiVnF`Y<#_nYj#jsgMHT<T*FTa?PE^S7AAE?T3p*Csj@fR
z>TasFS;c8`D%@Kj)Xo(~)%|6VxL=}LRluj?aB6p3-2`nMxo8X|ud>iR(~Y2SY5ku_
zoH+XjoIB`;M?(eQo`)MnQDQxb>i?m{Y5beS0gsgB*L3*RT=g4Di!AX<TU7<T_Hy<o
z^9)v{Ed5Z1_19fgYExjatK<ga#NaU9QUZ}F$sgL#K_=*Wu2&hTm50rsC0}R5NutZA
zNElo33YZszjg>UJEcLN=PcIgmYF0Aa{K+*KH+2eIwdt#JD~j-G&@x%z-=93#e$FHS
zA;fKz<uML%bNW%$c`K&k7Q@nze6UdCHa4-I%kG15N7}KboPhrxxmOhfS_5A41U~e$
z&ok#r0)Y<4aLW^%-zT0#uN5w>q+vBm&)E^pX@K^xzbwYcw5&Bxn~fLdUs}U>)0-1G
zL(kmyD;8zd@YKg`(J2t;GJR~aX*+_1JZ5V|v;klt(zJkMNrk@z4gsQ7lt|*rNcsK0
zN*dUcaRpF||Dzok3rF3{*3C`b*4l|o#@WH*NB)+XOy(b9B_KN&ke36<@uTFP1Dw43
z=kSL|1YYN#P4EBNIzNNr)tkqGF;u9SP8BN5IFbTMNe07BhG9wKSPX5J+99IC+Ek+|
zG1Lr=&fiZ8$Gb=&spPTJ;wiDV>2x59WCmc%!YCPA+tV09nj<mY+N7vvmS{^tTG4Lv
zRe_Ez!9;=Lv1D9x63@f#!WPt+E>LN`knB4#SY5sISZ0N{@p$w=46fhi%@UGQhe@;d
z>I4}-T>!8;^*(nuAeyu<HDp?-H|3|*Ij_@rCC09rp+n|zq7_dkai}hL#I=O^nh4r0
z<S`yDF9SrJo^Ppyf2yxOk`(P5){C8=VDv9P?kL?te1lrD0;ATbIY42^ZkL{Jj<qnf
z;KS|rl3%`0E$SN;XeY<3BIHSvsN{t$;}=M(^E#R-`*~>1t!~5tM<7oE!)7ivhY=30
zW}kk;C(fv(vmBcE0=TLET5pvFWMm|Nq*$@9&3j9+kvB!pYuQI;apy-H$E<Ru9*mya
z(}n3hb^^=HbgHR2OT-3*+E7%6p`g&<^+;3Qyv;hRU9oLZK_y#IsNSz==)_Oqkj%)?
zt@)(yDxgN7d3~);$U+-p<+WZVLVSN^5V9PZ-?MJx6cBeJxMX>0SgCqK6;$;`E8Y3q
zyMTF9kqj@vlEe>0u{86Rg$Rz_>lz!)!-|SQ@m_u=StKhT&SgnZTa+{$Ggj9M2@1Vb
zKKGg@9m?S69H4F6k9Gg1iArE_#jlQ<Q#VAAKDA$3v88HY6W>Lbx0TT@|IX?0Uy^fw
zJ3;!FD<uLH0t$e83tqYdbODe60FVX9^oPGf_FHeeTDmy9{YYB-u(<tzx*HhkKOGhz
z3g|C=^gq1@+LnzJ|Ff#DW!&wp+372d_o0`qqed`(%6T4E)q=ZPf!|%dd7<VQ%?Kfy
zZ}&__N5)j62UOUc*5m{6SZ#Gb2w4O(ZiI$yQ$)N9SUrZ!G;JceY+{VW#0mSzmdu;R
zR@y9}F49Altfg<8bO`F}Zsmp8IK-`JS{(2Pgyyl!w5U;V60`dvXqEX>b5{r{%y)%2
zBer4=Mkvr?d?R5VNEXRmFs89rn`4PS!|s=idsfld*}hy#a9qWFFYAT-*m_uvcg3K3
z$`_WN>fl7!!`SO?;zRu&k#=RpXoByvRDig`N*xnPU%%n7CO;@Y+cqnH{-pN3U|xg+
zCZnaxGc`5>s?W}Blq#gL%JGyv?qcRdn&sF_!mFw(pU((^TBu3yLtf5?exk5wV{W3J
z)+lU(-G7%<OqJgq-XM=<C-a#FNh?+3(^%GmU43cof*5=_t=ElRzPJMt@7Pxl751c$
zD~v!2+3{&HUTQ;7@t$E`e~QPr)B`YGB0k|Q;y}2YiM%cIa*6j>*m=8L1z|6KGAs(f
zc&AOSxrsg3b0o)>0->(tRS;#J<~vtvCFySyI4AEdx&gU+!})d@sGny|&ROM}HpSO?
zxo|EAos@5awRT&IIw-5F9-N_8Aq9Y*cZ7~&p8+*{O+!{VmkTr({Kf9)a#Z?5@5i;f
z?}UBV(uW!eTmk2FAYL$?lKrAn42aYYoctRW=`%mR5ZAky(X@Z1Rh~b-dql(1!PZpW
z*~!w?^pEcz`Qzz7qnn;TiyXo30T5i|2(Fgk`We0l*Gzzi!oSAgU;f9pn*6cG|83=T
z3^xD;I5KlUdrDq(VN0VKnA4|;lW6d8Lf)w!<jXvf7;DaUdPsHJQ!?S|kM4NM)3~+m
z@3SA<5E4@*`=JtI(bD6P;kj{l#1)w(V{o~Qa1>=K5GMh&s|_c+gJ0DtWnIHV2+Q!e
z{H-z|^xmjtGd|tAL*Z4N1)MgorY$G85SHu-NO^tIilq26L8B2j$5cIRJ09S{D@+AK
z>MGW7m$EJJk!$Tp#jgSwhd+t%%EsETQ!pJ*y_MdqZ`jDSdmwFUfjPgP)E4S+e_iDa
zS@5*-LY?`P=<3LUkIyX#XHe}u<>;#L;*y|Dek)h>dWKC*$5yB7@x)!p5$4hN47>^&
zkmn+u0y-JdBnZcg`N%owMy^#Irq$49U~13<M<hxw<_1@0O7UzW%18LQP)51wGC#@0
ztr65}_YhI+WZd(~RPH(+V{`M@9N4GKH1_KLQL*eFoeqV_A^3(0Y}QpmS>E$AUU27E
zvTiz?epE%^6OK`DZnd6YRB!gw<<61V0+Fo>v75Z4P;DIGXkB{7TI^j4=NBx^4IRGZ
z!!?k~B=Einmut(7wBA7XWPTsr($9Aslvh{Jz$4%i^IE@|vGK506*FC(UT^9Y6Maz`
zvK2Fl)oe<{R>B`;=DUsuATmb>M`5`o;YkJ%1#5S0T$^B52U!Xk*;ywO$S^m32eR?z
zdj5-ff3W3`zPkTTaQ`%3mlvY$Dn2U>dHUea?+xxQ7UsVI{wG;>Y#Nv;QC%X#Kb=k@
z+iWJwQHV&=I=4D5hgyx5kDz?N0%gH&d0{6W<cRrYGK6hCeJAfWJl!PKZuF=qFovXg
z`Z{o<w5)u4LnPhht1QYy!F7sXGj4Cq^uBzxOO%J}I?TXeqgveiv1|xMWgjKX^IG*J
zRK4H#2~|suCEj-id7D;a<2j;<tJ!EG+)PR5V5a?1FaGvhMGW3PXSQ`GInbbpXAlh(
z4gD(j^);FL2CfSyZjQMPiTz>E^YA7tAgiG?ij2fG;Tv7lW`j6b*>~;{#slBkG{msh
z2gp%#S4mLTy8I+wCiF$?^jji&YoGU1q5<Z}6qeEMlU{l-7`Vkb`cWqiA4^riDnN`(
z*66Ct^G6EMOGq1~Gir>fJA>lnchc@UU!aP|_&?C)kIN3v_XaDr7P=+V3?3lQ&_sUd
zqWaw0u7BVWum}GtoP){73&FM|>U*6_LWF1hBt@(ESi2h%84bhuYatgBDu>Ys&kEeM
z#?L58_pk6OGUUGGKAK3nk~iZYeY|2j<CBd{pz_ebc{g@>Ym05ccVA@I)Z!vKKugrw
ztEGNtZaIEIgo<-zAFlHpZ)y|eRY{J1;-V*&iby}h{aj;q!_4;h+%A61vlp`O8uw>)
zBc~ENaq8ywDs@dY28mjRyNB1B$rR)HlcP%VM>;33J&HZj9JLw|UIRMNK=WX-{P>G3
zkzsC7!{_BLq`6pHYX5}I&tl-nzj}JVTM6Nj;pH40Y@M8K-Pq89KRO7Z;gI1ZY`~qh
z*3N9?KWzf=*E-?-48M4pdRmgnf{j&h8JgR#T602h`y1<zx1f;e{$tLsNX(CpX<`r$
zkQdw{&BwvX#tyb+Iobah0)zkmIn<wLLi<rd|MTGgaVY%c*GgodW<ymv1wo#qFCk;?
z#O<R?O>aLV3a=S%Exti$)`k?`HaA^4M+-5pD!Qq3`{KV-hg1y@fuIW-rDuptj=;qW
zI*P2V|A0=)JY%d`h-LVt{{U7iD)O<CJ?Fuo2WG(OI6SH)5-P`)JUpQ)9;#$9FOu$4
zQIZ_m;W*m5qoi^W$gXy3Cm&HA(DEuh(bK8z`?NjxwrJ#xAFDCUE|Vk1#ZGNUlBD89
zdhz3gYp?`d_8x}tRSbb{0I7}65;O!;+J!`2U<SVXT(;XBUWeEKr_bD_*++@yI@<RX
zpS}sH4FF~8hJ>5!)^~P;U5vzIlxa#H`9G35wcg^q8bz+C2N61WqOa-rNDFI>1(j<f
z@X!-xV#Om5&M*<(!|cMR3Ry}o9*^3tKaY=~Q{qGt{)|1>y7WOM>z&sW{>(f<<e(BE
zt;cLF{8?2fuo(k&G~zTY?wPB9!O6&Zq-o2gZ7Xstl7}{QlM(|qix3(S345s-_p#MF
zMH7suIXcA!2Z-3+HJa&)k3N5LhcGCNxld^0dCdcXbBiUMfX<<~6wUqYJhf}@HAD@C
zPy2?yu9<u`jI+?#_Kb{qW<Qm)E9PJ&D4`xH(Pg)B8wdRb?$|P{vaDDDmwZvw`H+I2
z7>1*DBYcM976yKmc+lc~0?gE{%5cZ#yMd1>UvYA_aiQa@x$l$LsHm|sSMjY;%oaTB
z=7pN{cOS$j*ia*qfxJ|p3^$kc_mf9_hl(b16`0|;Bx&Qj8gv2{%;crFIa*kDvO>xO
z!t@J{I-wdu5doAiQ=3GKyS$d+eI8|c3tTYmUdyfYJfbjgJt=B=!xl?tgp7;Qi0F`P
z5ArrBa25&MBv%Xt<*kB---_UoFp$qgn9)<5AJ;h}LT5g25pp?#CZN{dqm<{rk){pd
zE_?O?zEoU8`$MMQI+9PqS8YsHF8oL_8|o<@+^}c&0N2ITWi=YI44QS%D_Z9}2myK1
zIh0ST$qWxTuxVwKS(LJms_h?o-`8l2Ejx(4!?6xrc;Fpv=2fcgHu;o;yP}ipYgS7W
z@1FX4Q=fPOZ7GB3HAuIaa*{2-^oe)rGnw+9juyXl&zI}W%$yeP4?(PvGRondlKerN
zJVd1}`{@}N<6&kp79?+uMLRibvg4K3&Xbf$UtQ#;FJF}U*hRfiR-na|eLTEWK~t6s
z7?Ij&_Z96ETQt?8g|*#s6$_sH0Eo(G<#+XY<Og<&9S)cYCxR3P=GZ*NzugF$AJW9S
zAqNl;@0a^W{GY8jq+avT*pdJI`9BN`lp5xFEzf7z;OM$t=~RZtQKv=g?#h08kmtu5
zvGKqJF|8%G0uKB7laiZP&S|REWqR3cP;*-S<X^coh7Ed`74`d!#d2o66<EQ3?abu!
zw=ZVOJUMmp!L~Us&lMKl%c-{)TLL^jhbaMw*`Y-&Z&o~qy+({(;MDuENGrU7b4L@g
zm#@N@<*P78`6`UHeANJL<}tJ~umG2@!iMPOE9mSbg#aT{Gt`3C)DYB|g%`9SE-hS#
z?l=jwf)>SflJ$|mQDJuQ!BN1i>5vnom>Jobofuf^e&;+>eq3zCaVp_i@SI&Gy%HNL
zCImIywK(7<dvV2?$xEiQS)Ae(O*+=csFgZ*)qRtRdW{F47*8@h@|V+Unf=<u&IXQ{
zEi7=83%nVgm6@5Ht)2mC3HV}1wlx!SFM7Q$UFsz;bMwZ9-Cp03Ba_)3c(xmp0{gR&
zTYL+mHmwt!-+px4|IB-;`+h9g&hgphoYs8~MILh|1zk1f1+06sFMf;pk$R>rck>(*
zkK`84qrK%)kIu|_SW*p4IKU}#CY1%u^`LVTc{ujAPS2UCzN8_;-5SY4;7la-Qx9tV
zNa095#ug^1smII&Gzkw+Js>XaU1u1AJ@r6cCpnqhN4!4!7H_F3hoL*`I@g(@9|eW=
zynYB6Dle{UzFe=tVWlQzb$)u2e8YBi&i;#i21mGN^R0<sS^eFtc8c<n*<4-St6%@M
zR89LB_pfJNuVdw0&V+LsD=&BDe!k{<<<pE7i_`@K(osDNI3XdYqtKNtotF+8?Ugv4
zvy9#E#PhlPnkFDeD|9!QIpd`1u0nMSKHII8v?{v$C15hM&_0(-{*Fs}=FF8}{O!=B
z=N=;e{AMqm7{2b9dC_hrgLGA{jXZJhRwhr%e>#EtUz*Y>_rEe-hToh2RqYqpC!sCZ
z|4mbFO62=KMf1~vGnVFgZ$Gk%(cHeC8Q67Zf_9zR6xdkB3Yd`FfuNOb)=0%vkiQ|c
z8OSBfkqq2+8|>-s2b)*p78ZaBfj5@G=hc7*f|vj|av2zaH*y&wae>1^6qpVk*57Wt
zv+jhdSKrp#TQsCsg->{KQR#BZuFI2OTv^kW=#Z5Vo)OaGyC*AziS_^e*|W6P#j^K%
z9oDFS|6BW4<;UY|KL`Y?Oz2KKxuRqB`l!VWFZb<odly|?ts~yl7?-58kSTTZ-lN(K
zbw~a%8;A40ee~;Gtm`$4v!>fN9lS87(QDO{`b~^6vi<Qhk8E6fyF>By1dgVL&jyQ~
zpG|057pmd;Hv0NX0Smr={XWsN-Cj9<-M~?D_(F&AwwmiD_wTe^bml9yT&U`x@v7o9
zpN^j8+@9_{F&TZeCV@wfQ>SpT9EkfK8~sDz(S==A-oNjeGcZU+YdpR*r`XP@ea6C*
zf%@0)tubcW>_7RSlcvHkq|)j^&+OZ(o|`|`v|Zce)Xse&d%?{okd3x>mt;EiO#l2S
zz5A>_wc|^X&q<x@Mt+~~N>;k>?X!-a%pc&XBAhM4R`j0p^1_9W9a>I4moO@^@yO$!
z?|tRF+~vt_DIwF7ivq5Op8usVnQ77N!^)HW#6rs!6jbJ(Rg^!kue(R`afjiLNU287
z6VsQK98WkBeI~qbQ|Vu6CeGWD_4!4UGrt=;UhA;f-@a+DSmn=EPxf`F-c3|jmf32^
z&SJJjYQo+HC4~W<xqCz&^S7=0xZ3Xc0?spwJuW`Do$`Fr*7NI&oC~^t9&WJ_UR5_~
zc6jjQUj>II@)`b|ogVvgnnhgv=3>7N(e!)s$^?=W_Jw9nb!M>i{q}A{l%J<dNJKo7
NQ}gzpFBz9}0{}(R$Grdm

diff --git a/x509roots/fallback/bundle/bundle.go b/x509roots/fallback/bundle/bundle.go
index 2baedec..10f20dc 100644
--- a/x509roots/fallback/bundle/bundle.go
+++ b/x509roots/fallback/bundle/bundle.go
@@ -21,859 +21,708 @@ var unparsedCertificates = []unparsedCertificate{
 		certStartOff: 2633,
 		certLength:   1471,
 	},
-	{
-		cn:            "CN=AffirmTrust Commercial,O=AffirmTrust,C=US",
-		sha256Hash:    "0376ab1d54c5f9803ce4b2e201a0ee7eef7b57b636e8a93c9b8d4860c96f5fa7",
-		certStartOff:  4104,
-		certLength:    848,
-		distrustAfter: "2024-11-30T23:59:59Z",
-	},
-	{
-		cn:            "CN=AffirmTrust Networking,O=AffirmTrust,C=US",
-		sha256Hash:    "0a81ec5a929777f145904af38d5d509f66b5e2c58fcdb531058b0e17f3f0b41b",
-		certStartOff:  4952,
-		certLength:    848,
-		distrustAfter: "2024-11-30T23:59:59Z",
-	},
-	{
-		cn:            "CN=AffirmTrust Premium ECC,O=AffirmTrust,C=US",
-		sha256Hash:    "bd71fdf6da97e4cf62d1647add2581b07d79adf8397eb4ecba9c5e8488821423",
-		certStartOff:  5800,
-		certLength:    514,
-		distrustAfter: "2024-11-30T23:59:59Z",
-	},
-	{
-		cn:            "CN=AffirmTrust Premium,O=AffirmTrust,C=US",
-		sha256Hash:    "70a73f7f376b60074248904534b11482d5bf0e698ecc498df52577ebf2e93b9a",
-		certStartOff:  6314,
-		certLength:    1354,
-		distrustAfter: "2024-11-30T23:59:59Z",
-	},
 	{
 		cn:           "CN=Amazon Root CA 1,O=Amazon,C=US",
 		sha256Hash:   "8ecde6884f3d87b1125ba31ac3fcb13d7016de7f57cc904fe1cb97c6ae98196e",
-		certStartOff: 7668,
+		certStartOff: 4104,
 		certLength:   837,
 	},
 	{
 		cn:           "CN=Amazon Root CA 2,O=Amazon,C=US",
 		sha256Hash:   "1ba5b2aa8c65401a82960118f80bec4f62304d83cec4713a19c39c011ea46db4",
-		certStartOff: 8505,
+		certStartOff: 4941,
 		certLength:   1349,
 	},
 	{
 		cn:           "CN=Amazon Root CA 3,O=Amazon,C=US",
 		sha256Hash:   "18ce6cfe7bf14e60b2e347b8dfe868cb31d02ebb3ada271569f50343b46db3a4",
-		certStartOff: 9854,
+		certStartOff: 6290,
 		certLength:   442,
 	},
 	{
 		cn:           "CN=Amazon Root CA 4,O=Amazon,C=US",
 		sha256Hash:   "e35d28419ed02025cfa69038cd623962458da5c695fbdea3c22b0bfb25897092",
-		certStartOff: 10296,
+		certStartOff: 6732,
 		certLength:   502,
 	},
 	{
 		cn:           "CN=Atos TrustedRoot 2011,O=Atos,C=DE",
 		sha256Hash:   "f356bea244b7a91eb35d53ca9ad7864ace018e2d35d5f8f96ddf68a6f41aa474",
-		certStartOff: 10798,
+		certStartOff: 7234,
 		certLength:   891,
 	},
 	{
 		cn:           "CN=Atos TrustedRoot Root CA ECC TLS 2021,O=Atos,C=DE",
 		sha256Hash:   "b2fae53e14ccd7ab9212064701ae279c1d8988facb775fa8a008914e663988a8",
-		certStartOff: 11689,
+		certStartOff: 8125,
 		certLength:   537,
 	},
 	{
 		cn:           "CN=Atos TrustedRoot Root CA RSA TLS 2021,O=Atos,C=DE",
 		sha256Hash:   "81a9088ea59fb364c548a6f85559099b6f0405efbf18e5324ec9f457ba00112f",
-		certStartOff: 12226,
+		certStartOff: 8662,
 		certLength:   1384,
 	},
 	{
 		cn:           "CN=Autoridad de Certificacion Firmaprofesional CIF A62634068,C=ES",
 		sha256Hash:   "57de0583efd2b26e0361da99da9df4648def7ee8441c3b728afa9bcde0f9b26a",
-		certStartOff: 13610,
+		certStartOff: 10046,
 		certLength:   1560,
 	},
 	{
 		cn:           "CN=BJCA Global Root CA1,O=BEIJING CERTIFICATE AUTHORITY,C=CN",
 		sha256Hash:   "f3896f88fe7c0a882766a7fa6ad2749fb57a7f3e98fb769c1fa7b09c2c44d5ae",
-		certStartOff: 15170,
+		certStartOff: 11606,
 		certLength:   1400,
 	},
 	{
 		cn:           "CN=BJCA Global Root CA2,O=BEIJING CERTIFICATE AUTHORITY,C=CN",
 		sha256Hash:   "574df6931e278039667b720afdc1600fc27eb66dd3092979fb73856487212882",
-		certStartOff: 16570,
+		certStartOff: 13006,
 		certLength:   553,
 	},
 	{
 		cn:           "CN=Buypass Class 2 Root CA,O=Buypass AS-983163327,C=NO",
 		sha256Hash:   "9a114025197c5bb95d94e63d55cd43790847b646b23cdf11ada4a00eff15fb48",
-		certStartOff: 17123,
+		certStartOff: 13559,
 		certLength:   1373,
 	},
 	{
 		cn:           "CN=Buypass Class 3 Root CA,O=Buypass AS-983163327,C=NO",
 		sha256Hash:   "edf7ebbca27a2a384d387b7d4010c666e2edb4843e4c29b4ae1d5b9332e6b24d",
-		certStartOff: 18496,
+		certStartOff: 14932,
 		certLength:   1373,
 	},
 	{
 		cn:           "CN=CA Disig Root R2,O=Disig a.s.,L=Bratislava,C=SK",
 		sha256Hash:   "e23d4a036d7b70e9f595b1422079d2b91edfbb1fb651a0633eaa8a9dc5f80703",
-		certStartOff: 19869,
+		certStartOff: 16305,
 		certLength:   1389,
 	},
 	{
 		cn:           "CN=CFCA EV ROOT,O=China Financial Certification Authority,C=CN",
 		sha256Hash:   "5cc3d78e4e1d5e45547a04e6873e64f90cf9536d1ccc2ef800f355c4c5fd70fd",
-		certStartOff: 21258,
+		certStartOff: 17694,
 		certLength:   1425,
 	},
-	{
-		cn:           "CN=COMODO Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB",
-		sha256Hash:   "0c2cd63df7806fa399ede809116b575bf87989f06518f9808c860503178baf66",
-		certStartOff: 22683,
-		certLength:   1057,
-	},
 	{
 		cn:           "CN=COMODO ECC Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB",
 		sha256Hash:   "1793927a0614549789adce2f8f34f7f0b66d0f3ae3a3b84d21ec15dbba4fadc7",
-		certStartOff: 23740,
+		certStartOff: 19119,
 		certLength:   653,
 	},
 	{
 		cn:           "CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB",
 		sha256Hash:   "52f0e1c4e58ec629291b60317f074671b85d7ea80d5b07273463534b32b40234",
-		certStartOff: 24393,
+		certStartOff: 19772,
 		certLength:   1500,
 	},
 	{
 		cn:           "CN=Certainly Root E1,O=Certainly,C=US",
 		sha256Hash:   "b4585f22e4ac756a4e8612a1361c5d9d031a93fd84febb778fa3068b0fc42dc2",
-		certStartOff: 25893,
+		certStartOff: 21272,
 		certLength:   507,
 	},
 	{
 		cn:           "CN=Certainly Root R1,O=Certainly,C=US",
 		sha256Hash:   "77b82cd8644c4305f7acc5cb156b45675004033d51c60c6202a8e0c33467d3a0",
-		certStartOff: 26400,
+		certStartOff: 21779,
 		certLength:   1355,
 	},
 	{
 		cn:           "CN=Certigna Root CA,OU=0002 48146308100036,O=Dhimyotis,C=FR",
 		sha256Hash:   "d48d3d23eedb50a459e55197601c27774b9d7b18c94d5a059511a10250b93168",
-		certStartOff: 27755,
+		certStartOff: 23134,
 		certLength:   1631,
 	},
-	{
-		cn:           "CN=Certigna,O=Dhimyotis,C=FR",
-		sha256Hash:   "e3b6a2db2ed7ce48842f7ac53241c7b71d54144bfb40c11f3f1d0b42f5eea12d",
-		certStartOff: 29386,
-		certLength:   940,
-	},
 	{
 		cn:           "CN=Certum EC-384 CA,OU=Certum Certification Authority,O=Asseco Data Systems S.A.,C=PL",
 		sha256Hash:   "6b328085625318aa50d173c98d8bda09d57e27413d114cf787a0f5d06c030cf6",
-		certStartOff: 30326,
+		certStartOff: 24765,
 		certLength:   617,
 	},
 	{
 		cn:           "CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL",
 		sha256Hash:   "b676f2eddae8775cd36cb0f63cd1d4603961f49e6265ba013a2f0307b6d0b804",
-		certStartOff: 30943,
+		certStartOff: 25382,
 		certLength:   1494,
 	},
 	{
 		cn:           "CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL",
 		sha256Hash:   "5c58468d55f58e497e743982d2b50010b6d165374acf83a7d4a32db768c4408e",
-		certStartOff: 32437,
+		certStartOff: 26876,
 		certLength:   959,
 	},
 	{
 		cn:           "CN=Certum Trusted Root CA,OU=Certum Certification Authority,O=Asseco Data Systems S.A.,C=PL",
 		sha256Hash:   "fe7696573855773e37a95e7ad4d9cc96c30157c15d31765ba9b15704e1ae78fd",
-		certStartOff: 33396,
+		certStartOff: 27835,
 		certLength:   1476,
 	},
 	{
 		cn:           "CN=D-TRUST BR Root CA 1 2020,O=D-Trust GmbH,C=DE",
 		sha256Hash:   "e59aaa816009c22bff5b25bad37df306f049797c1f81d85ab089e657bd8f0044",
-		certStartOff: 34872,
+		certStartOff: 29311,
 		certLength:   735,
 	},
 	{
 		cn:           "CN=D-TRUST BR Root CA 2 2023,O=D-Trust GmbH,C=DE",
 		sha256Hash:   "0552e6f83fdf65e8fa9670e666df28a4e21340b510cbe52566f97c4fb94b2bd1",
-		certStartOff: 35607,
+		certStartOff: 30046,
 		certLength:   1453,
 	},
 	{
 		cn:           "CN=D-TRUST EV Root CA 1 2020,O=D-Trust GmbH,C=DE",
 		sha256Hash:   "08170d1aa36453901a2f959245e347db0c8d37abaabc56b81aa100dc958970db",
-		certStartOff: 37060,
+		certStartOff: 31499,
 		certLength:   735,
 	},
 	{
 		cn:           "CN=D-TRUST EV Root CA 2 2023,O=D-Trust GmbH,C=DE",
 		sha256Hash:   "8e8221b2e7d4007836a1672f0dcc299c33bc07d316f132fa1a206d587150f1ce",
-		certStartOff: 37795,
+		certStartOff: 32234,
 		certLength:   1453,
 	},
 	{
 		cn:           "CN=D-TRUST Root Class 3 CA 2 2009,O=D-Trust GmbH,C=DE",
 		sha256Hash:   "49e7a442acf0ea6287050054b52564b650e4f49e42e348d6aa38e039e957b1c1",
-		certStartOff: 39248,
+		certStartOff: 33687,
 		certLength:   1079,
 	},
 	{
 		cn:           "CN=D-TRUST Root Class 3 CA 2 EV 2009,O=D-Trust GmbH,C=DE",
 		sha256Hash:   "eec5496b988ce98625b934092eec2908bed0b0f316c2d4730c84eaf1f3d34881",
-		certStartOff: 40327,
+		certStartOff: 34766,
 		certLength:   1095,
 	},
-	{
-		cn:           "CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US",
-		sha256Hash:   "3e9099b5015e8f486c00bcea9d111ee721faba355a89bcf1df69561e3dc6325c",
-		certStartOff: 41422,
-		certLength:   955,
-	},
 	{
 		cn:           "CN=DigiCert Assured ID Root G2,OU=www.digicert.com,O=DigiCert Inc,C=US",
 		sha256Hash:   "7d05ebb682339f8c9451ee094eebfefa7953a114edb2f44949452fab7d2fc185",
-		certStartOff: 42377,
+		certStartOff: 35861,
 		certLength:   922,
 	},
 	{
 		cn:           "CN=DigiCert Assured ID Root G3,OU=www.digicert.com,O=DigiCert Inc,C=US",
 		sha256Hash:   "7e37cb8b4c47090cab36551ba6f45db840680fba166a952db100717f43053fc2",
-		certStartOff: 43299,
+		certStartOff: 36783,
 		certLength:   586,
 	},
-	{
-		cn:           "CN=DigiCert Global Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US",
-		sha256Hash:   "4348a0e9444c78cb265e058d5e8944b4d84f9662bd26db257f8934a443c70161",
-		certStartOff: 43885,
-		certLength:   947,
-	},
 	{
 		cn:           "CN=DigiCert Global Root G2,OU=www.digicert.com,O=DigiCert Inc,C=US",
 		sha256Hash:   "cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f",
-		certStartOff: 44832,
+		certStartOff: 37369,
 		certLength:   914,
 	},
 	{
 		cn:           "CN=DigiCert Global Root G3,OU=www.digicert.com,O=DigiCert Inc,C=US",
 		sha256Hash:   "31ad6648f8104138c738f39ea4320133393e3a18cc02296ef97c2ac9ef6731d0",
-		certStartOff: 45746,
+		certStartOff: 38283,
 		certLength:   579,
 	},
-	{
-		cn:           "CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US",
-		sha256Hash:   "7431e5f4c3c1ce4690774f0b61e05440883ba9a01ed00ba6abd7806ed3b118cf",
-		certStartOff: 46325,
-		certLength:   969,
-	},
 	{
 		cn:           "CN=DigiCert TLS ECC P384 Root G5,O=DigiCert\\, Inc.,C=US",
 		sha256Hash:   "018e13f0772532cf809bd1b17281867283fc48c6e13be9c69812854a490c1b05",
-		certStartOff: 47294,
+		certStartOff: 38862,
 		certLength:   541,
 	},
 	{
 		cn:           "CN=DigiCert TLS RSA4096 Root G5,O=DigiCert\\, Inc.,C=US",
 		sha256Hash:   "371a00dc0533b3721a7eeb40e8419e70799d2b0a0f2c1d80693165f7cec4ad75",
-		certStartOff: 47835,
+		certStartOff: 39403,
 		certLength:   1386,
 	},
 	{
 		cn:           "CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US",
 		sha256Hash:   "552f7bdcf1a7af9e6ce672017f4f12abf77240c78e761ac203d1d9d20ac89988",
-		certStartOff: 49221,
+		certStartOff: 40789,
 		certLength:   1428,
 	},
-	{
-		cn:            "CN=Entrust Root Certification Authority - EC1,OU=See www.entrust.net/legal-terms+OU=(c) 2012 Entrust\\, Inc. - for authorized use only,O=Entrust\\, Inc.,C=US",
-		sha256Hash:    "02ed0eb28c14da45165c566791700d6451d7fb56f0b2ab1d3b8eb070e56edff5",
-		certStartOff:  50649,
-		certLength:    765,
-		distrustAfter: "2024-11-30T23:59:59Z",
-	},
-	{
-		cn:            "CN=Entrust Root Certification Authority - G2,OU=See www.entrust.net/legal-terms+OU=(c) 2009 Entrust\\, Inc. - for authorized use only,O=Entrust\\, Inc.,C=US",
-		sha256Hash:    "43df5774b03e7fef5fe40d931a7bedf1bb2e6b42738c4e6d3841103d3aa7f339",
-		certStartOff:  51414,
-		certLength:    1090,
-		distrustAfter: "2024-11-30T23:59:59Z",
-	},
 	{
 		cn:            "CN=Entrust Root Certification Authority,OU=www.entrust.net/CPS is incorporated by reference+OU=(c) 2006 Entrust\\, Inc.,O=Entrust\\, Inc.,C=US",
 		sha256Hash:    "73c176434f1bc6d5adf45b0e76e727287c8de57616c1e6e6141a2b2cbc7d8e4c",
-		certStartOff:  52504,
+		certStartOff:  42217,
 		certLength:    1173,
 		distrustAfter: "2024-11-30T23:59:59Z",
 	},
-	{
-		cn:           "CN=FIRMAPROFESIONAL CA ROOT-A WEB,O=Firmaprofesional SA,C=ES,2.5.4.97=#130f56415445532d413632363334303638",
-		sha256Hash:   "bef256daf26e9c69bdec1602359798f3caf71821a03e018257c53c65617f3d4a",
-		certStartOff: 53677,
-		certLength:   638,
-	},
 	{
 		cn:           "CN=GDCA TrustAUTH R5 ROOT,O=GUANG DONG CERTIFICATE AUTHORITY CO.\\,LTD.,C=CN",
 		sha256Hash:   "bfff8fd04433487d6a8aa60c1a29767a9fc2bbb05e420f713a13b992891d3893",
-		certStartOff: 54315,
+		certStartOff: 43390,
 		certLength:   1420,
 	},
-	{
-		cn:            "CN=GLOBALTRUST 2020,O=e-commerce monitoring GmbH,C=AT",
-		sha256Hash:    "9a296a5182d1d451a2e37f439b74daafa267523329f90f9a0d2007c334e23c9a",
-		certStartOff:  55735,
-		certLength:    1414,
-		distrustAfter: "2024-06-30T00:00:00Z",
-	},
 	{
 		cn:           "CN=GTS Root R1,O=Google Trust Services LLC,C=US",
 		sha256Hash:   "d947432abde7b7fa90fc2e6b59101b1280e0e1c7e4e40fa3c6887fff57a7f4cf",
-		certStartOff: 57149,
-		certLength:   1371,
-	},
-	{
-		cn:           "CN=GTS Root R2,O=Google Trust Services LLC,C=US",
-		sha256Hash:   "8d25cd97229dbf70356bda4eb3cc734031e24cf00fafcfd32dc76eb5841c7ea8",
-		certStartOff: 58520,
+		certStartOff: 44810,
 		certLength:   1371,
 	},
 	{
 		cn:           "CN=GTS Root R3,O=Google Trust Services LLC,C=US",
 		sha256Hash:   "34d8a73ee208d9bcdb0d956520934b4e40e69482596e8b6f73c8426b010a6f48",
-		certStartOff: 59891,
+		certStartOff: 46181,
 		certLength:   525,
 	},
 	{
 		cn:           "CN=GTS Root R4,O=Google Trust Services LLC,C=US",
 		sha256Hash:   "349dfa4058c5e263123b398ae795573c4e1313c83fe68f93556cd5e8031b3c7d",
-		certStartOff: 60416,
+		certStartOff: 46706,
 		certLength:   525,
 	},
 	{
 		cn:           "CN=GlobalSign Root E46,O=GlobalSign nv-sa,C=BE",
 		sha256Hash:   "cbb9c44d84b8043e1050ea31a69f514955d7bfd2e2c6b49301019ad61d9f5058",
-		certStartOff: 60941,
+		certStartOff: 47231,
 		certLength:   527,
 	},
 	{
 		cn:           "CN=GlobalSign Root R46,O=GlobalSign nv-sa,C=BE",
 		sha256Hash:   "4fa3126d8d3a11d1c4855a4f807cbad6cf919d3a5a88b03bea2c6372d93c40c9",
-		certStartOff: 61468,
+		certStartOff: 47758,
 		certLength:   1374,
 	},
 	{
 		cn:           "CN=GlobalSign,OU=GlobalSign ECC Root CA - R4,O=GlobalSign",
 		sha256Hash:   "b085d70b964f191a73e4af0d54ae7a0e07aafdaf9b71dd0862138ab7325a24a2",
-		certStartOff: 62842,
+		certStartOff: 49132,
 		certLength:   480,
 	},
 	{
 		cn:           "CN=GlobalSign,OU=GlobalSign ECC Root CA - R5,O=GlobalSign",
 		sha256Hash:   "179fbc148a3dd00fd24ea13458cc43bfa7f59c8182d783a513f6ebec100c8924",
-		certStartOff: 63322,
+		certStartOff: 49612,
 		certLength:   546,
 	},
 	{
 		cn:           "CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign",
 		sha256Hash:   "cbb522d7b7f127ad6a0113865bdf1cd4102e7d0759af635a7cf4720dc963c53b",
-		certStartOff: 63868,
+		certStartOff: 50158,
 		certLength:   867,
 	},
 	{
 		cn:           "CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign",
 		sha256Hash:   "2cabeafe37d06ca22aba7391c0033d25982952c453647349763a3ab5ad6ccf69",
-		certStartOff: 64735,
+		certStartOff: 51025,
 		certLength:   1415,
 	},
 	{
 		cn:           "CN=Go Daddy Root Certificate Authority - G2,O=GoDaddy.com\\, Inc.,L=Scottsdale,ST=Arizona,C=US",
 		sha256Hash:   "45140b3247eb9cc8c5b4f0d7b53091f73292089e6e5a63e2749dd3aca9198eda",
-		certStartOff: 66150,
+		certStartOff: 52440,
 		certLength:   969,
 	},
 	{
 		cn:           "CN=HARICA TLS ECC Root CA 2021,O=Hellenic Academic and Research Institutions CA,C=GR",
 		sha256Hash:   "3f99cc474acfce4dfed58794665e478d1547739f2e780f1bb4ca9b133097d401",
-		certStartOff: 67119,
+		certStartOff: 53409,
 		certLength:   600,
 	},
 	{
 		cn:           "CN=HARICA TLS RSA Root CA 2021,O=Hellenic Academic and Research Institutions CA,C=GR",
 		sha256Hash:   "d95d0e8eda79525bf9beb11b14d2100d3294985f0c62d9fabd9cd999eccb7b1d",
-		certStartOff: 67719,
+		certStartOff: 54009,
 		certLength:   1448,
 	},
 	{
 		cn:           "CN=Hellenic Academic and Research Institutions ECC RootCA 2015,O=Hellenic Academic and Research Institutions Cert. Authority,L=Athens,C=GR",
 		sha256Hash:   "44b545aa8a25e65a73ca15dc27fc36d24c1cb9953a066539b11582dc487b4833",
-		certStartOff: 69167,
+		certStartOff: 55457,
 		certLength:   711,
 	},
 	{
 		cn:           "CN=Hellenic Academic and Research Institutions RootCA 2015,O=Hellenic Academic and Research Institutions Cert. Authority,L=Athens,C=GR",
 		sha256Hash:   "a040929a02ce53b4acf4f2ffc6981ce4496f755e6d45fe0b2a692bcd52523f36",
-		certStartOff: 69878,
+		certStartOff: 56168,
 		certLength:   1551,
 	},
 	{
 		cn:           "CN=HiPKI Root CA - G1,O=Chunghwa Telecom Co.\\, Ltd.,C=TW",
 		sha256Hash:   "f015ce3cc239bfef064be9f1d2c417e1a0264a0a94be1f0c8d121864eb6949cc",
-		certStartOff: 71429,
+		certStartOff: 57719,
 		certLength:   1390,
 	},
 	{
 		cn:           "CN=Hongkong Post Root CA 3,O=Hongkong Post,L=Hong Kong,ST=Hong Kong,C=HK",
 		sha256Hash:   "5a2fc03f0c83b090bbfa40604b0988446c7636183df9846e17101a447fb8efd6",
-		certStartOff: 72819,
+		certStartOff: 59109,
 		certLength:   1491,
 	},
 	{
 		cn:           "CN=ISRG Root X1,O=Internet Security Research Group,C=US",
 		sha256Hash:   "96bcec06264976f37460779acf28c5a7cfe8a3c0aae11a8ffcee05c0bddf08c6",
-		certStartOff: 74310,
+		certStartOff: 60600,
 		certLength:   1391,
 	},
 	{
 		cn:           "CN=ISRG Root X2,O=Internet Security Research Group,C=US",
 		sha256Hash:   "69729b8e15a86efc177a57afb7171dfc64add28c2fca8cf1507e34453ccb1470",
-		certStartOff: 75701,
+		certStartOff: 61991,
 		certLength:   543,
 	},
 	{
 		cn:           "CN=IdenTrust Commercial Root CA 1,O=IdenTrust,C=US",
 		sha256Hash:   "5d56499be4d2e08bcfcad08a3e38723d50503bde706948e42f55603019e528ae",
-		certStartOff: 76244,
+		certStartOff: 62534,
 		certLength:   1380,
 	},
 	{
 		cn:           "CN=IdenTrust Public Sector Root CA 1,O=IdenTrust,C=US",
 		sha256Hash:   "30d0895a9a448a262091635522d1f52010b5867acae12c78ef958fd4f4389f2f",
-		certStartOff: 77624,
+		certStartOff: 63914,
 		certLength:   1386,
 	},
 	{
 		cn:           "CN=Izenpe.com,O=IZENPE S.A.,C=ES",
 		sha256Hash:   "2530cc8e98321502bad96f9b1fba1b099e2d299e0f4548bb914f363bc0d4531f",
-		certStartOff: 79010,
+		certStartOff: 65300,
 		certLength:   1525,
 	},
 	{
 		cn:           "CN=Microsec e-Szigno Root CA 2009,O=Microsec Ltd.,L=Budapest,C=HU,1.2.840.113549.1.9.1=#0c10696e666f40652d737a69676e6f2e6875",
 		sha256Hash:   "3c5f81fea5fab82c64bfa2eaecafcde8e077fc8620a7cae537163df36edbf378",
-		certStartOff: 80535,
+		certStartOff: 66825,
 		certLength:   1038,
 	},
 	{
 		cn:           "CN=Microsoft ECC Root Certificate Authority 2017,O=Microsoft Corporation,C=US",
 		sha256Hash:   "358df39d764af9e1b766e9c972df352ee15cfac227af6ad1d70e8e4a6edcba02",
-		certStartOff: 81573,
+		certStartOff: 67863,
 		certLength:   605,
 	},
 	{
 		cn:           "CN=Microsoft RSA Root Certificate Authority 2017,O=Microsoft Corporation,C=US",
 		sha256Hash:   "c741f70f4b2a8d88bf2e71c14122ef53ef10eba0cfa5e64cfa20f418853073e0",
-		certStartOff: 82178,
+		certStartOff: 68468,
 		certLength:   1452,
 	},
 	{
 		cn:           "CN=NAVER Global Root Certification Authority,O=NAVER BUSINESS PLATFORM Corp.,C=KR",
 		sha256Hash:   "88f438dcf8ffd1fa8f429115ffe5f82ae1e06e0c70c375faad717b34a49e7265",
-		certStartOff: 83630,
+		certStartOff: 69920,
 		certLength:   1446,
 	},
 	{
 		cn:           "CN=NetLock Arany (Class Gold) Főtanúsítvány,OU=Tanúsítványkiadók (Certification Services),O=NetLock Kft.,L=Budapest,C=HU",
 		sha256Hash:   "6c61dac3a2def031506be036d2a6fe401994fbd13df9c8d466599274c446ec98",
-		certStartOff: 85076,
+		certStartOff: 71366,
 		certLength:   1049,
 	},
 	{
 		cn:           "CN=OISTE Server Root ECC G1,O=OISTE Foundation,C=CH",
 		sha256Hash:   "eec997c0c30f216f7e3b8b307d2bae42412d753fc8219dafd1520b2572850f49",
-		certStartOff: 86125,
+		certStartOff: 72415,
 		certLength:   569,
 	},
 	{
 		cn:           "CN=OISTE Server Root RSA G1,O=OISTE Foundation,C=CH",
 		sha256Hash:   "9ae36232a5189ffddb353dfd26520c015395d22777dac59db57b98c089a651e6",
-		certStartOff: 86694,
+		certStartOff: 72984,
 		certLength:   1415,
 	},
 	{
 		cn:           "CN=OISTE WISeKey Global Root GB CA,OU=OISTE Foundation Endorsed,O=WISeKey,C=CH",
 		sha256Hash:   "6b9c08e86eb0f767cfad65cd98b62149e5494a67f5845e7bd1ed019f27b86bd6",
-		certStartOff: 88109,
+		certStartOff: 74399,
 		certLength:   953,
 	},
 	{
 		cn:           "CN=OISTE WISeKey Global Root GC CA,OU=OISTE Foundation Endorsed,O=WISeKey,C=CH",
 		sha256Hash:   "8560f91c3624daba9570b5fea0dbe36ff11a8323be9486854fb3f34a5571198d",
-		certStartOff: 89062,
+		certStartOff: 75352,
 		certLength:   621,
 	},
 	{
 		cn:           "CN=QuoVadis Root CA 1 G3,O=QuoVadis Limited,C=BM",
 		sha256Hash:   "8a866fd1b276b57e578e921c65828a2bed58e9f2f288054134b7f1f4bfc9cc74",
-		certStartOff: 89683,
+		certStartOff: 75973,
 		certLength:   1380,
 	},
 	{
 		cn:           "CN=QuoVadis Root CA 2 G3,O=QuoVadis Limited,C=BM",
 		sha256Hash:   "8fe4fb0af93a4d0d67db0bebb23e37c71bf325dcbcdd240ea04daf58b47e1840",
-		certStartOff: 91063,
+		certStartOff: 77353,
 		certLength:   1380,
 	},
-	{
-		cn:           "CN=QuoVadis Root CA 2,O=QuoVadis Limited,C=BM",
-		sha256Hash:   "85a0dd7dd720adb7ff05f83d542b209dc7ff4528f7d677b18389fea5e5c49e86",
-		certStartOff: 92443,
-		certLength:   1467,
-	},
 	{
 		cn:           "CN=QuoVadis Root CA 3 G3,O=QuoVadis Limited,C=BM",
 		sha256Hash:   "88ef81de202eb018452e43f864725cea5fbd1fc2d9d205730709c5d8b8690f46",
-		certStartOff: 93910,
+		certStartOff: 78733,
 		certLength:   1380,
 	},
-	{
-		cn:           "CN=QuoVadis Root CA 3,O=QuoVadis Limited,C=BM",
-		sha256Hash:   "18f1fc7f205df8adddeb7fe007dd57e3af375a9c4d8d73546bf4f1fed1e18d35",
-		certStartOff: 95290,
-		certLength:   1697,
-	},
 	{
 		cn:           "CN=SSL.com EV Root Certification Authority ECC,O=SSL Corporation,L=Houston,ST=Texas,C=US",
 		sha256Hash:   "22a2c1f7bded704cc1e701b5f408c310880fe956b5de2a4a44f99c873a25a7c8",
-		certStartOff: 96987,
+		certStartOff: 80113,
 		certLength:   664,
 	},
 	{
 		cn:           "CN=SSL.com EV Root Certification Authority RSA R2,O=SSL Corporation,L=Houston,ST=Texas,C=US",
 		sha256Hash:   "2e7bf16cc22485a7bbe2aa8696750761b0ae39be3b2fe9d0cc6d4ef73491425c",
-		certStartOff: 97651,
+		certStartOff: 80777,
 		certLength:   1519,
 	},
 	{
 		cn:           "CN=SSL.com Root Certification Authority ECC,O=SSL Corporation,L=Houston,ST=Texas,C=US",
 		sha256Hash:   "3417bb06cc6007da1b961c920b8ab4ce3fad820e4aa30b9acbc4a74ebdcebc65",
-		certStartOff: 99170,
+		certStartOff: 82296,
 		certLength:   657,
 	},
 	{
 		cn:           "CN=SSL.com Root Certification Authority RSA,O=SSL Corporation,L=Houston,ST=Texas,C=US",
 		sha256Hash:   "85666a562ee0be5ce925c1d8890a6f76a87ec16d4d7d5f29ea7419cf20123b69",
-		certStartOff: 99827,
+		certStartOff: 82953,
 		certLength:   1505,
 	},
 	{
 		cn:           "CN=SSL.com TLS ECC Root CA 2022,O=SSL Corporation,C=US",
 		sha256Hash:   "c32ffd9f46f936d16c3673990959434b9ad60aafbb9e7cf33654f144cc1ba143",
-		certStartOff: 101332,
+		certStartOff: 84458,
 		certLength:   574,
 	},
 	{
 		cn:           "CN=SSL.com TLS RSA Root CA 2022,O=SSL Corporation,C=US",
 		sha256Hash:   "8faf7d2e2cb4709bb8e0b33666bf75a5dd45b5de480f8ea8d4bfe6bebc17f2ed",
-		certStartOff: 101906,
+		certStartOff: 85032,
 		certLength:   1421,
 	},
 	{
 		cn:           "CN=SZAFIR ROOT CA2,O=Krajowa Izba Rozliczeniowa S.A.,C=PL",
 		sha256Hash:   "a1339d33281a0b56e557d3d32b1ce7f9367eb094bd5fa72a7e5004c8ded7cafe",
-		certStartOff: 103327,
+		certStartOff: 86453,
 		certLength:   886,
 	},
 	{
 		cn:           "CN=Sectigo Public Server Authentication Root E46,O=Sectigo Limited,C=GB",
 		sha256Hash:   "c90f26f0fb1b4018b22227519b5ca2b53e2ca5b3be5cf18efe1bef47380c5383",
-		certStartOff: 104213,
+		certStartOff: 87339,
 		certLength:   574,
 	},
 	{
 		cn:           "CN=Sectigo Public Server Authentication Root R46,O=Sectigo Limited,C=GB",
 		sha256Hash:   "7bb647a62aeeac88bf257aa522d01ffea395e0ab45c73f93f65654ec38f25a06",
-		certStartOff: 104787,
+		certStartOff: 87913,
 		certLength:   1422,
 	},
-	{
-		cn:           "CN=Secure Global CA,O=SecureTrust Corporation,C=US",
-		sha256Hash:   "4200f5043ac8590ebb527d209ed1503029fbcbd41ca1b506ec27f15ade7dac69",
-		certStartOff: 106209,
-		certLength:   960,
-	},
 	{
 		cn:           "CN=SecureSign Root CA12,O=Cybertrust Japan Co.\\, Ltd.,C=JP",
 		sha256Hash:   "3f034bb5704d44b2d08545a02057de93ebf3905fce721acbc730c06ddaee904e",
-		certStartOff: 107169,
+		certStartOff: 89335,
 		certLength:   886,
 	},
 	{
 		cn:           "CN=SecureSign Root CA14,O=Cybertrust Japan Co.\\, Ltd.,C=JP",
 		sha256Hash:   "4b009c1034494f9ab56bba3ba1d62731fc4d20d8955adcec10a925607261e338",
-		certStartOff: 108055,
+		certStartOff: 90221,
 		certLength:   1398,
 	},
 	{
 		cn:           "CN=SecureSign Root CA15,O=Cybertrust Japan Co.\\, Ltd.,C=JP",
 		sha256Hash:   "e778f0f095fe843729cd1a0082179e5314a9c291442805e1fb1d8fb6b8886c3a",
-		certStartOff: 109453,
+		certStartOff: 91619,
 		certLength:   551,
 	},
-	{
-		cn:           "CN=SecureTrust CA,O=SecureTrust Corporation,C=US",
-		sha256Hash:   "f1c1b50ae5a20dd8030ec9f6bc24823dd367b5255759b4e71b61fce9f7375d73",
-		certStartOff: 110004,
-		certLength:   956,
-	},
 	{
 		cn:           "CN=Security Communication ECC RootCA1,O=SECOM Trust Systems CO.\\,LTD.,C=JP",
 		sha256Hash:   "e74fbda55bd564c473a36b441aa799c8a68e077440e8288b9fa1e50e4bbaca11",
-		certStartOff: 110960,
+		certStartOff: 92170,
 		certLength:   572,
 	},
 	{
 		cn:           "CN=Starfield Root Certificate Authority - G2,O=Starfield Technologies\\, Inc.,L=Scottsdale,ST=Arizona,C=US",
 		sha256Hash:   "2ce1cb0bf9d2f9e102993fbe215152c3b2dd0cabde1c68e5319b839154dbb7f5",
-		certStartOff: 111532,
+		certStartOff: 92742,
 		certLength:   993,
 	},
 	{
 		cn:           "CN=Starfield Services Root Certificate Authority - G2,O=Starfield Technologies\\, Inc.,L=Scottsdale,ST=Arizona,C=US",
 		sha256Hash:   "568d6905a2c88708a4b3025190edcfedb1974a606a13c6e5290fcb2ae63edab5",
-		certStartOff: 112525,
+		certStartOff: 93735,
 		certLength:   1011,
 	},
-	{
-		cn:           "CN=SwissSign Gold CA - G2,O=SwissSign AG,C=CH",
-		sha256Hash:   "62dd0be9b9f50a163ea0f8e75c053b1eca57ea55c8688f647c6881f2c8357b95",
-		certStartOff: 113536,
-		certLength:   1470,
-	},
 	{
 		cn:           "CN=SwissSign RSA TLS Root CA 2022 - 1,O=SwissSign AG,C=CH",
 		sha256Hash:   "193144f431e0fddb740717d4de926a571133884b4360d30e272913cbe660ce41",
-		certStartOff: 115006,
+		certStartOff: 94746,
 		certLength:   1431,
 	},
 	{
 		cn:           "CN=T-TeleSec GlobalRoot Class 2,OU=T-Systems Trust Center,O=T-Systems Enterprise Services GmbH,C=DE",
 		sha256Hash:   "91e2f5788d5810eba7ba58737de1548a8ecacd014598bc0b143e041b17052552",
-		certStartOff: 116437,
+		certStartOff: 96177,
 		certLength:   967,
 	},
 	{
 		cn:           "CN=T-TeleSec GlobalRoot Class 3,OU=T-Systems Trust Center,O=T-Systems Enterprise Services GmbH,C=DE",
 		sha256Hash:   "fd73dad31c644ff1b43bef0ccdda96710b9cd9875eca7e31707af3e96d522bbd",
-		certStartOff: 117404,
+		certStartOff: 97144,
 		certLength:   967,
 	},
 	{
 		cn:           "CN=TWCA CYBER Root CA,OU=Root CA,O=TAIWAN-CA,C=TW",
 		sha256Hash:   "3f63bb2814be174ec8b6439cf08d6d56f0b7c405883a5648a334424d6b3ec558",
-		certStartOff: 118371,
+		certStartOff: 98111,
 		certLength:   1425,
 	},
 	{
 		cn:           "CN=TWCA Global Root CA,OU=Root CA,O=TAIWAN-CA,C=TW",
 		sha256Hash:   "59769007f7685d0fcd50872f9f95d5755a5b2b457d81f3692b610a98672f0e1b",
-		certStartOff: 119796,
+		certStartOff: 99536,
 		certLength:   1349,
 	},
 	{
 		cn:           "CN=TWCA Root Certification Authority,OU=Root CA,O=TAIWAN-CA,C=TW",
 		sha256Hash:   "bfd88fe1101c41ae3e801bf8be56350ee9bad1a6b9bd515edc5c6d5b8711ac44",
-		certStartOff: 121145,
+		certStartOff: 100885,
 		certLength:   895,
 	},
 	{
 		cn:           "CN=Telekom Security TLS ECC Root 2020,O=Deutsche Telekom Security GmbH,C=DE",
 		sha256Hash:   "578af4ded0853f4e5998db4aeaf9cbea8d945f60b620a38d1a3c13b2bc7ba8e1",
-		certStartOff: 122040,
+		certStartOff: 101780,
 		certLength:   582,
 	},
 	{
 		cn:           "CN=Telekom Security TLS RSA Root 2023,O=Deutsche Telekom Security GmbH,C=DE",
 		sha256Hash:   "efc65cadbb59adb6efe84da22311b35624b71b3b1ea0da8b6655174ec8978646",
-		certStartOff: 122622,
+		certStartOff: 102362,
 		certLength:   1463,
 	},
 	{
 		cn:           "CN=Telia Root CA v2,O=Telia Finland Oyj,C=FI",
 		sha256Hash:   "242b69742fcb1e5b2abf98898b94572187544e5b4d9911786573621f6a74b82c",
-		certStartOff: 124085,
+		certStartOff: 103825,
 		certLength:   1400,
 	},
-	{
-		cn:           "CN=TeliaSonera Root CA v1,O=TeliaSonera",
-		sha256Hash:   "dd6936fe21f8f077c123a1a521c12224f72255b73e03a7260693e8a24b0fa389",
-		certStartOff: 125485,
-		certLength:   1340,
-	},
 	{
 		cn:           "CN=TrustAsia Global Root CA G3,O=TrustAsia Technologies\\, Inc.,C=CN",
 		sha256Hash:   "e0d3226aeb1163c2e48ff9be3b50b4c6431be7bb1eacc5c36b5d5ec509039a08",
-		certStartOff: 126825,
+		certStartOff: 105225,
 		certLength:   1449,
 	},
 	{
 		cn:           "CN=TrustAsia Global Root CA G4,O=TrustAsia Technologies\\, Inc.,C=CN",
 		sha256Hash:   "be4b56cb5056c0136a526df444508daa36a0b54f42e4ac38f72af470e479654c",
-		certStartOff: 128274,
+		certStartOff: 106674,
 		certLength:   601,
 	},
 	{
 		cn:           "CN=TrustAsia TLS ECC Root CA,O=TrustAsia Technologies\\, Inc.,C=CN",
 		sha256Hash:   "c0076b9ef0531fb1a656d67c4ebe97cd5dbaa41ef44598acc2489878c92d8711",
-		certStartOff: 128875,
+		certStartOff: 107275,
 		certLength:   565,
 	},
 	{
 		cn:           "CN=TrustAsia TLS RSA Root CA,O=TrustAsia Technologies\\, Inc.,C=CN",
 		sha256Hash:   "06c08d7dafd876971eb1124fe67f847ec0c7a158d3ea53cbe940e2ea9791f4c3",
-		certStartOff: 129440,
+		certStartOff: 107840,
 		certLength:   1412,
 	},
-	{
-		cn:           "CN=Trustwave Global Certification Authority,O=Trustwave Holdings\\, Inc.,L=Chicago,ST=Illinois,C=US",
-		sha256Hash:   "97552015f5ddfc3c8788c006944555408894450084f100867086bc1a2bb58dc8",
-		certStartOff: 130852,
-		certLength:   1502,
-	},
-	{
-		cn:           "CN=Trustwave Global ECC P256 Certification Authority,O=Trustwave Holdings\\, Inc.,L=Chicago,ST=Illinois,C=US",
-		sha256Hash:   "945bbc825ea554f489d1fd51a73ddf2ea624ac7019a05205225c22a78ccfa8b4",
-		certStartOff: 132354,
-		certLength:   612,
-	},
-	{
-		cn:           "CN=Trustwave Global ECC P384 Certification Authority,O=Trustwave Holdings\\, Inc.,L=Chicago,ST=Illinois,C=US",
-		sha256Hash:   "55903859c8c0c3ebb8759ece4e2557225ff5758bbd38ebd48276601e1bd58097",
-		certStartOff: 132966,
-		certLength:   673,
-	},
 	{
 		cn:           "CN=TunTrust Root CA,O=Agence Nationale de Certification Electronique,C=TN",
 		sha256Hash:   "2e44102ab58cb85419451c8e19d9acf3662cafbc614b6a53960a30f7d0e2eb41",
-		certStartOff: 133639,
+		certStartOff: 109252,
 		certLength:   1463,
 	},
 	{
 		cn:           "CN=UCA Extended Validation Root,O=UniTrust,C=CN",
 		sha256Hash:   "d43af9b35473755c9684fc06d7d8cb70ee5c28e773fb294eb41ee71722924d24",
-		certStartOff: 135102,
+		certStartOff: 110715,
 		certLength:   1374,
 	},
 	{
 		cn:           "CN=UCA Global G2 Root,O=UniTrust,C=CN",
 		sha256Hash:   "9bea11c976fe014764c1be56a6f914b5a560317abd9988393382e5161aa0493c",
-		certStartOff: 136476,
+		certStartOff: 112089,
 		certLength:   1354,
 	},
 	{
 		cn:           "CN=USERTrust ECC Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US",
 		sha256Hash:   "4ff460d54b9c86dabfbcfc5712e0400d2bed3fbc4d4fbdaa86e06adcd2a9ad7a",
-		certStartOff: 137830,
+		certStartOff: 113443,
 		certLength:   659,
 	},
 	{
 		cn:           "CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US",
 		sha256Hash:   "e793c9b02fd8aa13e21c31228accb08119643b749c898964b1746d46c3d4cbd2",
-		certStartOff: 138489,
+		certStartOff: 114102,
 		certLength:   1506,
 	},
 	{
 		cn:           "CN=e-Szigno Root CA 2017,O=Microsec Ltd.,L=Budapest,C=HU,2.5.4.97=#130e56415448552d3233353834343937",
 		sha256Hash:   "beb00b30839b9bc32c32e4447905950641f26421b15ed089198b518ae2ea1b99",
-		certStartOff: 139995,
+		certStartOff: 115608,
 		certLength:   580,
 	},
 	{
 		cn:           "CN=e-Szigno TLS Root CA 2023,O=Microsec Ltd.,L=Budapest,C=HU,2.5.4.97=#130e56415448552d3233353834343937",
 		sha256Hash:   "b49141502d00663d740f2e7ec340c52800962666121a36d09cf7dd2b90384fb4",
-		certStartOff: 140575,
+		certStartOff: 116188,
 		certLength:   723,
 	},
 	{
 		cn:           "CN=emSign ECC Root CA - C3,OU=emSign PKI,O=eMudhra Inc,C=US",
 		sha256Hash:   "bc4d809b15189d78db3e1d8cf4f9726a795da1643ca5f1358e1ddb0edc0d7eb3",
-		certStartOff: 141298,
+		certStartOff: 116911,
 		certLength:   559,
 	},
 	{
 		cn:           "CN=emSign ECC Root CA - G3,OU=emSign PKI,O=eMudhra Technologies Limited,C=IN",
 		sha256Hash:   "86a1ecba089c4a8d3bbe2734c612ba341d813e043cf9e8a862cd5c57a36bbe6b",
-		certStartOff: 141857,
+		certStartOff: 117470,
 		certLength:   594,
 	},
 	{
 		cn:           "CN=emSign Root CA - C1,OU=emSign PKI,O=eMudhra Inc,C=US",
 		sha256Hash:   "125609aa301da0a249b97a8239cb6a34216f44dcac9f3954b14292f2e8c8608f",
-		certStartOff: 142451,
+		certStartOff: 118064,
 		certLength:   887,
 	},
 	{
 		cn:           "CN=emSign Root CA - G1,OU=emSign PKI,O=eMudhra Technologies Limited,C=IN",
 		sha256Hash:   "40f6af0346a99aa1cd1d555a4e9cce62c7f9634603ee406615833dc8c8d00367",
-		certStartOff: 143338,
+		certStartOff: 118951,
 		certLength:   920,
 	},
 	{
 		cn:           "CN=vTrus ECC Root CA,O=iTrusChina Co.\\,Ltd.,C=CN",
 		sha256Hash:   "30fbba2c32238e2a98547af97931e550428b9b3f1c8eeb6633dcfa86c5b27dd3",
-		certStartOff: 144258,
+		certStartOff: 119871,
 		certLength:   531,
 	},
 	{
 		cn:           "CN=vTrus Root CA,O=iTrusChina Co.\\,Ltd.,C=CN",
 		sha256Hash:   "8a71de6559336f426c26e53880d00d88a18da4c6a91f0dcb6194e206c5c96387",
-		certStartOff: 144789,
+		certStartOff: 120402,
 		certLength:   1370,
 	},
 	{
 		cn:           "OU=AC RAIZ FNMT-RCM,O=FNMT-RCM,C=ES",
 		sha256Hash:   "ebc5570c29018c4d67b1aa127baf12f703b4611ebc17b7dab5573894179b93fa",
-		certStartOff: 146159,
+		certStartOff: 121772,
 		certLength:   1415,
 	},
 	{
 		cn:           "OU=Security Communication RootCA2,O=SECOM Trust Systems CO.\\,LTD.,C=JP",
 		sha256Hash:   "513b2cecb810d4cde5dd85391adfc6c2dd60d87bb736d2b521484aa47a0ebef6",
-		certStartOff: 147574,
+		certStartOff: 123187,
 		certLength:   891,
 	},
 	{
 		cn:           "OU=certSIGN ROOT CA G2,O=CERTSIGN SA,C=RO",
 		sha256Hash:   "657cfe2fa73faa38462571f332a2363a46fce7020951710702cdfbb6eeda3305",
-		certStartOff: 148465,
+		certStartOff: 124078,
 		certLength:   1355,
 	},
-	{
-		cn:           "OU=certSIGN ROOT CA,O=certSIGN,C=RO",
-		sha256Hash:   "eaa962c4fa4a6bafebe415196d351ccd888d4f53f3fa8ae6d7c466a94e6042bb",
-		certStartOff: 149820,
-		certLength:   828,
-	},
 	{
 		cn:            "OU=ePKI Root Certification Authority,O=Chunghwa Telecom Co.\\, Ltd.,C=TW",
 		sha256Hash:    "c0a6f4dc63a24bfdcf54ef2a6a082a0a72de35803e2ff5ff527ae5d87206dfd5",
-		certStartOff:  150648,
+		certStartOff:  125433,
 		certLength:    1460,
 		distrustAfter: "2025-04-15T23:59:59Z",
 	},
 	{
 		cn:           "SERIALNUMBER=G63287510,CN=ANF Secure Server Root CA,OU=ANF CA Raiz,O=ANF Autoridad de Certificacion,C=ES",
 		sha256Hash:   "fb8fec759169b9106b1e511644c618c51304373f6c0643088d8beffd1b997599",
-		certStartOff: 152108,
+		certStartOff: 126893,
 		certLength:   1523,
 	},
 }