4f058b
This directory /etc/pki/ca-trust/extracted/pem/ contains 
4f058b
CA certificate bundle files which are automatically created
4f058b
based on the information found in the
4f058b
/usr/share/pki/ca-trust-source/ and /etc/pki/ca-trust/source/
4f058b
directories.
4f058b
4f058b
All files are in the BEGIN/END CERTIFICATE file format, 
4f058b
as described in the x509(1) manual page.
4f058b
4f058b
Distrust information cannot be represented in this file format,
4f058b
and distrusted certificates are missing from these files.
4f058b
4f058b
If your application isn't able to load the PKCS#11 module p11-kit-trust.so,
4f058b
then you can use these files in your application to load a list of global
4f058b
root CA certificates.
4f058b
4f058b
Please never manually edit the files stored in this directory,
4f058b
because your changes will be lost and the files automatically overwritten,
4f058b
each time the update-ca-trust command gets executed.
4f058b
4f058b
Please refer to the update-ca-trust(8) manual page for additional information.