If you are '''embedding our root store''', you need to know that we have imposed some restrictions that on certain CAs or certificates which are not encoded in certdata.txt. These are [[CA/Additional_Trust_Changes|documented]] on a best-efforts basis.
<br /><br />
<big>[https://www.ccadb.org/rootstores/usage#ccadb-data-usage-terms CCADB Data Usage Terms]</big>
* [https://ccadb-public.secure.force.com/mozilla/PEMOnlyCSV?TrustBitsInclude=Websites PEM of Root Certificates in Mozilla's Root Store with the Websites (TLS/SSL) Trust Bit Enabled] (CSV)
* [https://ccadb-public.secure.force.com/mozilla/PEMOnlyCSV?TrustBitsInclude=Email PEM of Root Certificates in Mozilla's Root Store with the Email (S/MIME) Trust Bit Enabled] (CSV)
* [https://ccadb-public.secure.force.com/mozilla/IncludedCACertificateReport Included CA Certificates] (HTML)
* [https://ccadb-public.secure.force.com/mozilla/IncludedCACertificateReportCSVFormat Included CA Certificates] (CSV)
* [https://ccadb-public.secure.force.com/mozilla/IncludedCACertificateReportPEMCSV Included CA Certificates] (CSV with PEM of raw certificate data)