The Mozilla CA Certificate Program's list of included root certificates is stored in a file called [https://hg.mozilla.org/mozilla-central/raw-file/tip/security/nss/lib/ckfw/builtins/certdata.txt certdata.txt] in the Mozilla source code management system.
The Common If you are '''choosing a CA Databasefor your website''', which we use have a list of [https://mozillacaprogram.secure.force.com/CA/CACertificatesInFirefoxReport all CAs that Firefox trusts for SSL/TLS], together with contact information and geographical focus for each CA. If you are '''embedding our root store''', you need to manage the program, can also produce useful lists of know that we have imposed some restrictions that on certain CAs or certificates with their metadatawhich are not encoded in certdata.txt. These are [[CA:Root_Store_Trust_Mods|documented]] on a best-efforts basis.
* [https://mozillacaprogram.secure.force.com/CA/IncludedCACertificateReport Included CA Certificates] (HTML)
* [https://mozillacaprogram.secure.force.com/CA/IncludedCACertificateReportCSVFormat Included CA Certificates] (CSV)
* [https://mozillacaprogram.secure.force.com/CA/IncludedCACertificateReportPEMCSV Included CA Certificates] (CSV with PEM of raw certificate data)
* [https://mozillacaprogram.secure.force.com/CA/CACertificatesInFirefoxReport Included CA Certificates] in the latest version of Firefox
Restrictions that the root program has chosen to place on certain CAs or certificates and which are not encoded in the main root store file, [https://hg.mozilla.org/mozilla-central/raw-file/tip/security/nss/lib/ckfw/builtins/certdata.txt certdata.txt], are [[CA:Root_Store_Trust_Mods|documented]] on a best-efforts basis.
