curl - Extract CA Certs from MozillaMissing Name Constraints The converted PEM file only contains the digital signatures for CAs. Several of those CAs have constraints in Firefox (and other browsers) to only be allowed for certain domains and other similar additional conditions. Those constraints are thus not brought along in this cacert file! CA certificate store license The PEM file is only a converted version of the original one
