Update to IGTF 1.124

• Updated contact meta-data for ArmeSFo authority (AM)
• Removed discontinued AEGIS authority (RS)
• Removed suspended KENET Root and issuing CAs (KE)
• Removed suspended SDG-G2 authority (CN)
• Removed suspended CNIC authority (CN)
• Removed all four discontinued DigitalTrust CAs operated by their issuer (AE)

Release v1.114.igtf.1.123-2

• Undo experimental change to EL9 certs

Release v1.114.igtf.1.123

Merge pull request #18 from mwestphall/SOFTWARE-5677-igtf-1.123

bump release for igtf 1.123

Update to IGTF 1.121

• Added accredited (classic) InCommon RSA IGTF Server CA 3 under the Sectigo USERTrust RSA root, for which namespaces have been updated (US)

Update to IGTF 1.120

• Added transitional CDP mirror URLs for retiring DigitalTrust CAs (AE)
• Removed discontinued NIIF-Root-CA-2 (HU)
• Removed expiring GermanGrid (GridKA CrossGrid) CA (DE)

Update to IGTF 1.119

• Updated UKeScience Root (2007) with consistent string encodings (UK)
• Removed obsolete SHA1 subordinates DigiCertGridTrustCA-Classic and DigiCertGridCA-1-Classic from DigiCert, reflected in RPDNC namespaces
• Experimental (non-accredited) new InCommon RSA IGTF Server CA 2 (ICA under Sectigo USERTrust RSA root, for which namespaces have been updated) (US)
• Updated GridCanada CA with re-issued SHA-2 based root (CA)
• Updated CILogon basic, silver, and openid with re-issued SHA-2 certs (US)
• Updated UKeScience Root (2007) re-issued with SHA-2, retired 2A ICA (UK)

Update to IGTF 1.117

• Add new intermediate ICA DigiCert Grid-TLS (US)
• Add new intermediate ICA DigiCert Grid-Client-RSA2048-SHA256-2022-CA1 (US)
• Removed discontinued NCSA-slcs-2013 following end of XSEDE (US)
• Removed discontinued PSC-Myproxy-CA following end of XSEDE (US)

Update to IGTF 1.114

• Extended validity for SlovakGrid issuing CA (SK)

Remove expired Let's Encrypt "DST Root X3 CA"

Merge pull request #9 from timtheisen/master

Remove expiring Let's Encrypt "DST Root X3 CA" (SOFTWARE-4836)

Add missing CA to the DST Root X3 signing policy

Add the missing ISRG Root X1 CA to the DST Root CA X3 signing policy (https://letsencrypt.org/images/isrg-hirarchy.png)