3c42f9
This directory /etc/pki/ca-trust/extracted/openssl/ contains 
3c42f9
CA certificate bundle files which are automatically created
3c42f9
based on the information found in the
3c42f9
/usr/share/pki/ca-trust-source/ and /etc/pki/ca-trust/source/
3c42f9
directories.
3c42f9
3c42f9
All files are in the BEGIN/END TRUSTED CERTIFICATE file format, 
3c42f9
as described in the x509(1) manual page.
3c42f9
3c42f9
If your application isn't able to load the PKCS#11 module p11-kit-trust.so,
3c42f9
then you can use these files in your application to load a list of global
3c42f9
root CA certificates.
3c42f9
3c42f9
Please never manually edit the files stored in this directory,
3c42f9
because your changes will be lost and the files automatically overwritten,
3c42f9
each time the update-ca-trust command gets executed.
3c42f9
3c42f9
Please refer to the update-ca-trust(8) manual page for additional information.