Software: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/5.4.16. PHP/5.4.16 

uname -a: Linux roko-bkp 3.10.0-1160.102.1.el7.x86_64 #1 SMP Tue Oct 17 15:42:21 UTC 2023 x86_64 

uid=48(apache) gid=48(apache) groups=48(apache),1003(webmaster) 

Safe-mode: OFF (not secure)

/etc/pki/ca-trust/   drwxr-xr-x
Free 9.35 GB of 93.48 GB (10%)
                            Encoder    Tools    Proc.    FTP brute    Sec.    SQL    PHP-code    Update    Feedback    Self remove    Logout    

Viewing file:     ca-legacy.conf (980 B)      -rw-r--r--

# The upstream Mozilla.org project tests all changes to the root CA
# list with the NSS (Network Security Services) library.
#
# Occassionally, changes might cause compatibility issues with
# other cryptographic libraries, such as openssl or gnutls.
#
# The package maintainers of the CA certificates package might decide
# to temporarily keep certain (legacy) root CA certificates trusted,
# until incompatibility issues can be resolved.
# 
# Using this configuration file it is possible to opt-out of the
# compatibility choices made by the package maintainer.
#
# legacy=default :
#   This configuration uses the choices made by the package maintainer.
#   It may keep root CA certificate as trusted, which the upstream 
#   Mozilla.org project has already marked as no longer trusted.
#   The set of CA certificates that are being kept enabled may change
#   between package versions.
#
# legacy=disable :
#   Follow all removal decisions made by Mozilla.org
#
legacy=default