# Remove CNNIC Root certificate (temporarily)
# http://googleonlinesecurity.blogspot.com/2015/03/maintaining-digital-certificate-security.html
--- a/certdata.txt
+++ b/certdata.txt
@@ -14889 +14889 @@
-CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_TRUSTED_DELEGATOR
+CKA_TRUST_SERVER_AUTH TRUST_UNKNOWN