security/manager/ssl/StaticHPKPins.h

   1 /* This Source Code Form is subject to the terms of the Mozilla Public
   2  * License, v. 2.0. If a copy of the MPL was not distributed with this
   3  * file, You can obtain one at http://mozilla.org/MPL/2.0/. */
   4
   5 /*****************************************************************************/
   6 /* This is an automatically generated file. If you're not                    */
   7 /* PublicKeyPinningService.cpp, you shouldn't be #including it.              */
   8 /*****************************************************************************/
   9 #include <stdint.h>
  10 /* AffirmTrust Commercial */
  11 static const char kAffirmTrust_CommercialFingerprint[] =
  12   "bEZLmlsjOl6HTadlwm8EUBDS3c/0V5TwtMfkqvpQFJU=";
  13
  14 /* AffirmTrust Networking */
  15 static const char kAffirmTrust_NetworkingFingerprint[] =
  16   "lAcq0/WPcPkwmOWl9sBMlscQvYSdgxhJGa6Q64kK5AA=";
  17
  18 /* AffirmTrust Premium */
  19 static const char kAffirmTrust_PremiumFingerprint[] =
  20   "x/Q7TPW3FWgpT4IrU3YmBfbd0Vyt7Oc56eLDy6YenWc=";
  21
  22 /* AffirmTrust Premium ECC */
  23 static const char kAffirmTrust_Premium_ECCFingerprint[] =
  24   "MhmwkRT/SVo+tusAwu/qs0ACrl8KVsdnnqCHo/oDfk8=";
  25
  26 /* Baltimore CyberTrust Root */
  27 static const char kBaltimore_CyberTrust_RootFingerprint[] =
  28   "Y9mvm0exBk1JoQ57f9Vm28jKo5lFm/woKcVxrYxu80o=";
  29
  30 /* COMODO Certification Authority */
  31 static const char kCOMODO_Certification_AuthorityFingerprint[] =
  32   "AG1751Vd2CAmRCxPGieoDomhmJy4ezREjtIZTBgZbV4=";
  33
  34 /* COMODO ECC Certification Authority */
  35 static const char kCOMODO_ECC_Certification_AuthorityFingerprint[] =
  36   "58qRu/uxh4gFezqAcERupSkRYBlBAvfcw7mEjGPLnNU=";
  37
  38 /* COMODO RSA Certification Authority */
  39 static const char kCOMODO_RSA_Certification_AuthorityFingerprint[] =
  40   "grX4Ta9HpZx6tSHkmCrvpApTQGo67CYDnvprLg5yRME=";
  41
  42 /* Comodo AAA Services root */
  43 static const char kComodo_AAA_Services_rootFingerprint[] =
  44   "vRU+17BDT2iGsXvOi76E7TQMcTLXAqj0+jGPdW7L1vM=";
  45
  46 /* DigiCert Assured ID Root CA */
  47 static const char kDigiCert_Assured_ID_Root_CAFingerprint[] =
  48   "I/Lt/z7ekCWanjD0Cvj5EqXls2lOaThEA0H2Bg4BT/o=";
  49
  50 /* DigiCert Assured ID Root G2 */
  51 static const char kDigiCert_Assured_ID_Root_G2Fingerprint[] =
  52   "8ca6Zwz8iOTfUpc8rkIPCgid1HQUT+WAbEIAZOFZEik=";
  53
  54 /* DigiCert Assured ID Root G3 */
  55 static const char kDigiCert_Assured_ID_Root_G3Fingerprint[] =
  56   "Fe7TOVlLME+M+Ee0dzcdjW/sYfTbKwGvWJ58U7Ncrkw=";
  57
  58 /* DigiCert Global Root CA */
  59 static const char kDigiCert_Global_Root_CAFingerprint[] =
  60   "r/mIkG3eEpVdm+u/ko/cwxzOMo1bk4TyHIlByibiA5E=";
  61
  62 /* DigiCert Global Root G2 */
  63 static const char kDigiCert_Global_Root_G2Fingerprint[] =
  64   "i7WTqTvh0OioIruIfFR4kMPnBqrS2rdiVPl/s2uC/CY=";
  65
  66 /* DigiCert Global Root G3 */
  67 static const char kDigiCert_Global_Root_G3Fingerprint[] =
  68   "uUwZgwDOxcBXrQcntwu+kYFpkiVkOaezL0WYEZ3anJc=";
  69
  70 /* DigiCert High Assurance EV Root CA */
  71 static const char kDigiCert_High_Assurance_EV_Root_CAFingerprint[] =
  72   "WoiWRyIOVNa9ihaBciRSC7XHjliYS9VwUGOIud4PB18=";
  73
  74 /* DigiCert TLS ECC P384 Root G5 */
  75 static const char kDigiCert_TLS_ECC_P384_Root_G5Fingerprint[] =
  76   "oC+voZLIy4HLE0FVT5wFtxzKKokLDRKY1oNkfJYe+98=";
  77
  78 /* DigiCert TLS RSA4096 Root G5 */
  79 static const char kDigiCert_TLS_RSA4096_Root_G5Fingerprint[] =
  80   "ape1HIIZ6T5d7GS61YBs3rD4NVvkfnVwELcCRW4Bqv0=";
  81
  82 /* DigiCert Trusted Root G4 */
  83 static const char kDigiCert_Trusted_Root_G4Fingerprint[] =
  84   "Wd8xe/qfTwq3ylFNd3IpaqLHZbh2ZNCLluVzmeNkcpw=";
  85
  86 /* End Entity Test Cert */
  87 static const char kEnd_Entity_Test_CertFingerprint[] =
  88   "VCIlmPM9NkgFQtrs4Oa5TeFcDu6MWRTKSNdePEhOgD8=";
  89
  90 /* Entrust Root Certification Authority */
  91 static const char kEntrust_Root_Certification_AuthorityFingerprint[] =
  92   "bb+uANN7nNc/j7R95lkXrwDg3d9C286sIMF8AnXuIJU=";
  93
  94 /* Entrust Root Certification Authority - EC1 */
  95 static const char kEntrust_Root_Certification_Authority___EC1Fingerprint[] =
  96   "/qK31kX7pz11PB7Jp4cMQOH3sMVh6Se5hb9xGGbjbyI=";
  97
  98 /* Entrust Root Certification Authority - G2 */
  99 static const char kEntrust_Root_Certification_Authority___G2Fingerprint[] =
 100   "du6FkDdMcVQ3u8prumAo6t3i3G27uMP2EOhR8R0at/U=";
 101
 102 /* Entrust.net Premium 2048 Secure Server CA */
 103 static const char kEntrust_net_Premium_2048_Secure_Server_CAFingerprint[] =
 104   "HqPF5D7WbC2imDpCpKebHpBnhs6fG1hiFBmgBGOofTg=";
 105
 106 /* FacebookBackup */
 107 static const char kFacebookBackupFingerprint[] =
 108   "q4PO2G2cbkZhZ82+JgmRUyGMoAeozA+BSXVXQWB8XWQ=";
 109
 110 /* GOOGLE_PIN_DigiCertECCSecureServerCA */
 111 static const char kGOOGLE_PIN_DigiCertECCSecureServerCAFingerprint[] =
 112   "PZXN3lRAy+8tBKk2Ox6F7jIlnzr2Yzmwqc3JnyfXoCw=";
 113
 114 /* GOOGLE_PIN_SymantecClass3EVG3 */
 115 static const char kGOOGLE_PIN_SymantecClass3EVG3Fingerprint[] =
 116   "gMxWOrX4PMQesK9qFNbYBxjBfjUvlkn/vN1n+L9lE5E=";
 117
 118 /* GTS Root R1 */
 119 static const char kGTS_Root_R1Fingerprint[] =
 120   "hxqRlPTu1bMS/0DITB1SSu0vd4u/8l8TjPgfaAp63Gc=";
 121
 122 /* GTS Root R2 */
 123 static const char kGTS_Root_R2Fingerprint[] =
 124   "Vfd95BwDeSQo+NUYxVEEIlvkOlWY2SalKK1lPhzOx78=";
 125
 126 /* GTS Root R3 */
 127 static const char kGTS_Root_R3Fingerprint[] =
 128   "QXnt2YHvdHR3tJYmQIr0Paosp6t/nggsEGD4QJZ3Q0g=";
 129
 130 /* GTS Root R4 */
 131 static const char kGTS_Root_R4Fingerprint[] =
 132   "mEflZT5enoR1FuXLgYYGqnVEoZvmf9c2bVBpiOjYQ0c=";
 133
 134 /* GlobalSign ECC Root CA - R4 */
 135 static const char kGlobalSign_ECC_Root_CA___R4Fingerprint[] =
 136   "CLOmM1/OXvSPjw5UOYbAf9GKOxImEp9hhku9W90fHMk=";
 137
 138 /* GlobalSign ECC Root CA - R5 */
 139 static const char kGlobalSign_ECC_Root_CA___R5Fingerprint[] =
 140   "fg6tdrtoGdwvVFEahDVPboswe53YIFjqbABPAdndpd8=";
 141
 142 /* GlobalSign Root CA */
 143 static const char kGlobalSign_Root_CAFingerprint[] =
 144   "K87oWBWM9UZfyddvDfoxL+8lpNyoUB2ptGtn0fv6G2Q=";
 145
 146 /* GlobalSign Root CA - R3 */
 147 static const char kGlobalSign_Root_CA___R3Fingerprint[] =
 148   "cGuxAXyFXFkWm61cF4HPWX8S0srS9j0aSqN0k4AP+4A=";
 149
 150 /* GlobalSign Root CA - R6 */
 151 static const char kGlobalSign_Root_CA___R6Fingerprint[] =
 152   "aCdH+LpiG4fN07wpXtXKvOciocDANj0daLOJKNJ4fx4=";
 153
 154 /* GlobalSign Root R46 */
 155 static const char kGlobalSign_Root_R46Fingerprint[] =
 156   "rn+WLLnmp9v3uDP7GPqbcaiRdd+UnCMrap73yz3yu/w=";
 157
 158 /* Go Daddy Class 2 CA */
 159 static const char kGo_Daddy_Class_2_CAFingerprint[] =
 160   "VjLZe/p3W/PJnd6lL8JVNBCGQBZynFLdZSTIqcO0SJ8=";
 161
 162 /* Go Daddy Root Certificate Authority - G2 */
 163 static const char kGo_Daddy_Root_Certificate_Authority___G2Fingerprint[] =
 164   "Ko8tivDrEjiY90yGasP6ZpBU4jwXvHqVvQI0GS3GNdA=";
 165
 166 /* GoogleBackup2048 */
 167 static const char kGoogleBackup2048Fingerprint[] =
 168   "IPMbDAjLVSGntGO3WP53X/zilCVndez5YJ2+vJvhJsA=";
 169
 170 /* ISRG Root X1 */
 171 static const char kISRG_Root_X1Fingerprint[] =
 172   "C5+lpZ7tcVwmwQIMcRtPbsQtWLABXhQzejna0wHFr8M=";
 173
 174 /* ISRG Root X2 */
 175 static const char kISRG_Root_X2Fingerprint[] =
 176   "diGVwiVYbubAI3RW4hB9xU8e/CH2GnkuvVFZE8zmgzI=";
 177
 178 /* Starfield Class 2 CA */
 179 static const char kStarfield_Class_2_CAFingerprint[] =
 180   "FfFKxFycfaIz00eRZOgTf+Ne4POK6FgYPwhBDqgqxLQ=";
 181
 182 /* Starfield Root Certificate Authority - G2 */
 183 static const char kStarfield_Root_Certificate_Authority___G2Fingerprint[] =
 184   "gI1os/q0iEpflxrOfRBVDXqVoWN3Tz7Dav/7IT++THQ=";
 185
 186 /* TestSPKI */
 187 static const char kTestSPKIFingerprint[] =
 188   "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=";
 189
 190 /* USERTrust ECC Certification Authority */
 191 static const char kUSERTrust_ECC_Certification_AuthorityFingerprint[] =
 192   "ICGRfpgmOUXIWcQ/HXPLQTkFPEFPoDyjvH7ohhQpjzs=";
 193
 194 /* USERTrust RSA Certification Authority */
 195 static const char kUSERTrust_RSA_Certification_AuthorityFingerprint[] =
 196   "x4QzPSC810K5/cMjb05Qm4k3Bw5zBn4lTdO/nEW/Td4=";
 197
 198 /* Pinsets are each an ordered list by the actual value of the fingerprint */
 199 struct StaticFingerprints {
 200   // See bug 1338873 about making these fields const.
 201   size_t size;
 202   const char* const* data;
 203 };
 204
 205 /* PreloadedHPKPins.json pinsets */
 206 static const char* const kPinset_google_root_pems_Data[] = {
 207   kEntrust_Root_Certification_Authority___EC1Fingerprint,
 208   kCOMODO_ECC_Certification_AuthorityFingerprint,
 209   kDigiCert_Assured_ID_Root_G2Fingerprint,
 210   kCOMODO_Certification_AuthorityFingerprint,
 211   kGlobalSign_ECC_Root_CA___R4Fingerprint,
 212   kDigiCert_Assured_ID_Root_G3Fingerprint,
 213   kStarfield_Class_2_CAFingerprint,
 214   kEntrust_net_Premium_2048_Secure_Server_CAFingerprint,
 215   kDigiCert_Assured_ID_Root_CAFingerprint,
 216   kUSERTrust_ECC_Certification_AuthorityFingerprint,
 217   kGlobalSign_Root_CAFingerprint,
 218   kGo_Daddy_Root_Certificate_Authority___G2Fingerprint,
 219   kAffirmTrust_Premium_ECCFingerprint,
 220   kGTS_Root_R3Fingerprint,
 221   kGTS_Root_R2Fingerprint,
 222   kGo_Daddy_Class_2_CAFingerprint,
 223   kDigiCert_Trusted_Root_G4Fingerprint,
 224   kDigiCert_High_Assurance_EV_Root_CAFingerprint,
 225   kBaltimore_CyberTrust_RootFingerprint,
 226   kGlobalSign_Root_CA___R6Fingerprint,
 227   kAffirmTrust_CommercialFingerprint,
 228   kEntrust_Root_Certification_AuthorityFingerprint,
 229   kGlobalSign_Root_CA___R3Fingerprint,
 230   kEntrust_Root_Certification_Authority___G2Fingerprint,
 231   kGlobalSign_ECC_Root_CA___R5Fingerprint,
 232   kStarfield_Root_Certificate_Authority___G2Fingerprint,
 233   kCOMODO_RSA_Certification_AuthorityFingerprint,
 234   kGTS_Root_R1Fingerprint,
 235   kDigiCert_Global_Root_G2Fingerprint,
 236   kAffirmTrust_NetworkingFingerprint,
 237   kGTS_Root_R4Fingerprint,
 238   kDigiCert_Global_Root_CAFingerprint,
 239   kDigiCert_Global_Root_G3Fingerprint,
 240   kComodo_AAA_Services_rootFingerprint,
 241   kAffirmTrust_PremiumFingerprint,
 242   kUSERTrust_RSA_Certification_AuthorityFingerprint,
 243 };
 244 static const StaticFingerprints kPinset_google_root_pems = {
 245   sizeof(kPinset_google_root_pems_Data) / sizeof(const char*),
 246   kPinset_google_root_pems_Data
 247 };
 248
 249 static const char* const kPinset_mozilla_services_Data[] = {
 250   kISRG_Root_X1Fingerprint,
 251   kDigiCert_High_Assurance_EV_Root_CAFingerprint,
 252   kDigiCert_TLS_RSA4096_Root_G5Fingerprint,
 253   kDigiCert_Global_Root_G2Fingerprint,
 254   kDigiCert_TLS_ECC_P384_Root_G5Fingerprint,
 255   kDigiCert_Global_Root_CAFingerprint,
 256 };
 257 static const StaticFingerprints kPinset_mozilla_services = {
 258   sizeof(kPinset_mozilla_services_Data) / sizeof(const char*),
 259   kPinset_mozilla_services_Data
 260 };
 261
 262 static const char* const kPinset_mozilla_test_Data[] = {
 263   kEnd_Entity_Test_CertFingerprint,
 264 };
 265 static const StaticFingerprints kPinset_mozilla_test = {
 266   sizeof(kPinset_mozilla_test_Data) / sizeof(const char*),
 267   kPinset_mozilla_test_Data
 268 };
 269
 270 /* Chrome static pinsets */
 271 static const char* const kPinset_test_Data[] = {
 272   kTestSPKIFingerprint,
 273 };
 274 static const StaticFingerprints kPinset_test = {
 275   sizeof(kPinset_test_Data) / sizeof(const char*),
 276   kPinset_test_Data
 277 };
 278
 279 static const char* const kPinset_google_Data[] = {
 280   kGlobalSign_ECC_Root_CA___R4Fingerprint,
 281   kGoogleBackup2048Fingerprint,
 282   kGTS_Root_R3Fingerprint,
 283   kGTS_Root_R2Fingerprint,
 284   kGTS_Root_R1Fingerprint,
 285   kGTS_Root_R4Fingerprint,
 286 };
 287 static const StaticFingerprints kPinset_google = {
 288   sizeof(kPinset_google_Data) / sizeof(const char*),
 289   kPinset_google_Data
 290 };
 291
 292 static const char* const kPinset_facebook_Data[] = {
 293   kCOMODO_ECC_Certification_AuthorityFingerprint,
 294   kISRG_Root_X1Fingerprint,
 295   kUSERTrust_ECC_Certification_AuthorityFingerprint,
 296   kGlobalSign_Root_CAFingerprint,
 297   kGOOGLE_PIN_DigiCertECCSecureServerCAFingerprint,
 298   kDigiCert_Trusted_Root_G4Fingerprint,
 299   kDigiCert_High_Assurance_EV_Root_CAFingerprint,
 300   kGlobalSign_Root_CA___R6Fingerprint,
 301   kDigiCert_TLS_RSA4096_Root_G5Fingerprint,
 302   kGlobalSign_Root_CA___R3Fingerprint,
 303   kISRG_Root_X2Fingerprint,
 304   kGOOGLE_PIN_SymantecClass3EVG3Fingerprint,
 305   kCOMODO_RSA_Certification_AuthorityFingerprint,
 306   kDigiCert_Global_Root_G2Fingerprint,
 307   kDigiCert_TLS_ECC_P384_Root_G5Fingerprint,
 308   kFacebookBackupFingerprint,
 309   kDigiCert_Global_Root_CAFingerprint,
 310   kGlobalSign_Root_R46Fingerprint,
 311   kDigiCert_Global_Root_G3Fingerprint,
 312   kUSERTrust_RSA_Certification_AuthorityFingerprint,
 313 };
 314 static const StaticFingerprints kPinset_facebook = {
 315   sizeof(kPinset_facebook_Data) / sizeof(const char*),
 316   kPinset_facebook_Data
 317 };
 318
 319 /* Domainlist */
 320 struct TransportSecurityPreload {
 321   // See bug 1338873 about making these fields const.
 322   const char* mHost;
 323   bool mIncludeSubdomains;
 324   bool mTestMode;
 325   bool mIsMoz;
 326   int32_t mId;
 327   const StaticFingerprints* pinset;
 328 };
 329
 330 /* Sort hostnames for binary search. */
 331 static const TransportSecurityPreload kPublicKeyPinningPreloadList[] = {
 332   { "2mdn.net", true, false, false, -1, &kPinset_google_root_pems },
 333   { "accounts.firefox.com", true, false, true, 4, &kPinset_mozilla_services },
 334   { "accounts.google.com", true, false, false, -1, &kPinset_google_root_pems },
 335   { "addons.mozilla.net", true, false, true, 2, &kPinset_mozilla_services },
 336   { "addons.mozilla.org", true, false, true, 1, &kPinset_mozilla_services },
 337   { "admin.google.com", true, false, false, -1, &kPinset_google_root_pems },
 338   { "android.com", true, false, false, -1, &kPinset_google_root_pems },
 339   { "api.accounts.firefox.com", true, false, true, 5, &kPinset_mozilla_services },
 340   { "apis.google.com", true, false, false, -1, &kPinset_google_root_pems },
 341   { "appengine.google.com", true, false, false, -1, &kPinset_google_root_pems },
 342   { "apps.facebook.com", true, false, false, -1, &kPinset_facebook },
 343   { "appspot.com", true, false, false, -1, &kPinset_google_root_pems },
 344   { "aus4.mozilla.org", true, true, true, 3, &kPinset_mozilla_services },
 345   { "aus5.mozilla.org", true, true, true, 7, &kPinset_mozilla_services },
 346   { "blogger.com", true, false, false, -1, &kPinset_google_root_pems },
 347   { "blogspot.com", true, false, false, -1, &kPinset_google_root_pems },
 348   { "bugs.chromium.org", true, false, false, -1, &kPinset_google_root_pems },
 349   { "build.chromium.org", true, false, false, -1, &kPinset_google_root_pems },
 350   { "business.facebook.com", true, false, false, -1, &kPinset_facebook },
 351   { "calendar.google.com", true, false, false, -1, &kPinset_google_root_pems },
 352   { "cdn.ampproject.org", true, false, false, -1, &kPinset_google_root_pems },
 353   { "cdn.mozilla.net", true, false, true, 16, &kPinset_mozilla_services },
 354   { "cdn.mozilla.org", true, false, true, 17, &kPinset_mozilla_services },
 355   { "checkout.google.com", true, false, false, -1, &kPinset_google_root_pems },
 356   { "chrome-devtools-frontend.appspot.com", true, false, false, -1, &kPinset_google_root_pems },
 357   { "chrome.com", true, false, false, -1, &kPinset_google_root_pems },
 358   { "chrome.google.com", true, false, false, -1, &kPinset_google_root_pems },
 359   { "chromereporting-pa.googleapis.com", true, false, false, -1, &kPinset_google_root_pems },
 360   { "chromiumbugs.appspot.com", true, false, false, -1, &kPinset_google_root_pems },
 361   { "chromiumcodereview.appspot.com", true, false, false, -1, &kPinset_google_root_pems },
 362   { "classroom.google.com", true, false, false, -1, &kPinset_google_root_pems },
 363   { "cloud.google.com", true, false, false, -1, &kPinset_google_root_pems },
 364   { "code.facebook.com", true, false, false, -1, &kPinset_facebook },
 365   { "code.google.com", true, false, false, -1, &kPinset_google_root_pems },
 366   { "codereview.appspot.com", true, false, false, -1, &kPinset_google_root_pems },
 367   { "codereview.chromium.org", true, false, false, -1, &kPinset_google_root_pems },
 368   { "contributor.google.com", true, false, false, -1, &kPinset_google_root_pems },
 369   { "corp.goog", true, false, false, -1, &kPinset_google_root_pems },
 370   { "crash-reports-xpsp2.mozilla.com", false, false, true, 11, &kPinset_mozilla_services },
 371   { "crash-reports.mozilla.com", false, false, true, 10, &kPinset_mozilla_services },
 372   { "crash-stats.mozilla.org", false, false, true, 12, &kPinset_mozilla_services },
 373   { "crbug.com", true, false, false, -1, &kPinset_google_root_pems },
 374   { "crosbug.com", true, false, false, -1, &kPinset_google_root_pems },
 375   { "crrev.com", true, false, false, -1, &kPinset_google_root_pems },
 376   { "datastudio.google.com", true, false, false, -1, &kPinset_google_root_pems },
 377   { "developer.android.com", true, false, false, -1, &kPinset_google_root_pems },
 378   { "developers.facebook.com", true, false, false, -1, &kPinset_facebook },
 379   { "dl.google.com", true, false, false, -1, &kPinset_google_root_pems },
 380   { "dns.google.com", true, false, false, -1, &kPinset_google_root_pems },
 381   { "docs.google.com", true, false, false, -1, &kPinset_google_root_pems },
 382   { "domains.google.com", true, false, false, -1, &kPinset_google_root_pems },
 383   { "doubleclick.net", true, false, false, -1, &kPinset_google_root_pems },
 384   { "download.mozilla.org", false, false, true, 14, &kPinset_mozilla_services },
 385   { "drive.google.com", true, false, false, -1, &kPinset_google_root_pems },
 386   { "encrypted.google.com", true, false, false, -1, &kPinset_google_root_pems },
 387   { "example.test", true, true, false, -1, &kPinset_test },
 388   { "exclude-subdomains.pinning.example.com", false, false, false, -1, &kPinset_mozilla_test },
 389   { "facebook.com", true, false, false, -1, &kPinset_facebook },
 390   { "fi.google.com", true, false, false, -1, &kPinset_google_root_pems },
 391   { "firebaseio.com", true, false, false, -1, &kPinset_google_root_pems },
 392   { "firefox.com", true, true, true, 15, &kPinset_mozilla_services },
 393   { "g.co", false, false, false, -1, &kPinset_google_root_pems },
 394   { "g4w.co", true, false, false, -1, &kPinset_google_root_pems },
 395   { "ggpht.com", true, false, false, -1, &kPinset_google_root_pems },
 396   { "glass.google.com", true, false, false, -1, &kPinset_google_root_pems },
 397   { "gmail.com", false, false, false, -1, &kPinset_google_root_pems },
 398   { "goo.gl", true, false, false, -1, &kPinset_google_root_pems },
 399   { "google", true, false, false, -1, &kPinset_google_root_pems },
 400   { "google-analytics.com", true, false, false, -1, &kPinset_google_root_pems },
 401   { "google.ac", true, false, false, -1, &kPinset_google_root_pems },
 402   { "google.ad", true, false, false, -1, &kPinset_google_root_pems },
 403   { "google.ae", true, false, false, -1, &kPinset_google_root_pems },
 404   { "google.af", true, false, false, -1, &kPinset_google_root_pems },
 405   { "google.ag", true, false, false, -1, &kPinset_google_root_pems },
 406   { "google.am", true, false, false, -1, &kPinset_google_root_pems },
 407   { "google.as", true, false, false, -1, &kPinset_google_root_pems },
 408   { "google.at", true, false, false, -1, &kPinset_google_root_pems },
 409   { "google.az", true, false, false, -1, &kPinset_google_root_pems },
 410   { "google.ba", true, false, false, -1, &kPinset_google_root_pems },
 411   { "google.be", true, false, false, -1, &kPinset_google_root_pems },
 412   { "google.bf", true, false, false, -1, &kPinset_google_root_pems },
 413   { "google.bg", true, false, false, -1, &kPinset_google_root_pems },
 414   { "google.bi", true, false, false, -1, &kPinset_google_root_pems },
 415   { "google.bj", true, false, false, -1, &kPinset_google_root_pems },
 416   { "google.bs", true, false, false, -1, &kPinset_google_root_pems },
 417   { "google.by", true, false, false, -1, &kPinset_google_root_pems },
 418   { "google.ca", true, false, false, -1, &kPinset_google_root_pems },
 419   { "google.cat", true, false, false, -1, &kPinset_google_root_pems },
 420   { "google.cc", true, false, false, -1, &kPinset_google_root_pems },
 421   { "google.cd", true, false, false, -1, &kPinset_google_root_pems },
 422   { "google.cf", true, false, false, -1, &kPinset_google_root_pems },
 423   { "google.cg", true, false, false, -1, &kPinset_google_root_pems },
 424   { "google.ch", true, false, false, -1, &kPinset_google_root_pems },
 425   { "google.ci", true, false, false, -1, &kPinset_google_root_pems },
 426   { "google.cl", true, false, false, -1, &kPinset_google_root_pems },
 427   { "google.cm", true, false, false, -1, &kPinset_google_root_pems },
 428   { "google.cn", true, false, false, -1, &kPinset_google_root_pems },
 429   { "google.co.ao", true, false, false, -1, &kPinset_google_root_pems },
 430   { "google.co.bw", true, false, false, -1, &kPinset_google_root_pems },
 431   { "google.co.ck", true, false, false, -1, &kPinset_google_root_pems },
 432   { "google.co.cr", true, false, false, -1, &kPinset_google_root_pems },
 433   { "google.co.hu", true, false, false, -1, &kPinset_google_root_pems },
 434   { "google.co.id", true, false, false, -1, &kPinset_google_root_pems },
 435   { "google.co.il", true, false, false, -1, &kPinset_google_root_pems },
 436   { "google.co.im", true, false, false, -1, &kPinset_google_root_pems },
 437   { "google.co.in", true, false, false, -1, &kPinset_google_root_pems },
 438   { "google.co.je", true, false, false, -1, &kPinset_google_root_pems },
 439   { "google.co.jp", true, false, false, -1, &kPinset_google_root_pems },
 440   { "google.co.ke", true, false, false, -1, &kPinset_google_root_pems },
 441   { "google.co.kr", true, false, false, -1, &kPinset_google_root_pems },
 442   { "google.co.ls", true, false, false, -1, &kPinset_google_root_pems },
 443   { "google.co.ma", true, false, false, -1, &kPinset_google_root_pems },
 444   { "google.co.mz", true, false, false, -1, &kPinset_google_root_pems },
 445   { "google.co.nz", true, false, false, -1, &kPinset_google_root_pems },
 446   { "google.co.th", true, false, false, -1, &kPinset_google_root_pems },
 447   { "google.co.tz", true, false, false, -1, &kPinset_google_root_pems },
 448   { "google.co.ug", true, false, false, -1, &kPinset_google_root_pems },
 449   { "google.co.uk", true, false, false, -1, &kPinset_google_root_pems },
 450   { "google.co.uz", true, false, false, -1, &kPinset_google_root_pems },
 451   { "google.co.ve", true, false, false, -1, &kPinset_google_root_pems },
 452   { "google.co.vi", true, false, false, -1, &kPinset_google_root_pems },
 453   { "google.co.za", true, false, false, -1, &kPinset_google_root_pems },
 454   { "google.co.zm", true, false, false, -1, &kPinset_google_root_pems },
 455   { "google.co.zw", true, false, false, -1, &kPinset_google_root_pems },
 456   { "google.com", true, false, false, -1, &kPinset_google_root_pems },
 457   { "google.com.af", true, false, false, -1, &kPinset_google_root_pems },
 458   { "google.com.ag", true, false, false, -1, &kPinset_google_root_pems },
 459   { "google.com.ai", true, false, false, -1, &kPinset_google_root_pems },
 460   { "google.com.ar", true, false, false, -1, &kPinset_google_root_pems },
 461   { "google.com.au", true, false, false, -1, &kPinset_google_root_pems },
 462   { "google.com.bd", true, false, false, -1, &kPinset_google_root_pems },
 463   { "google.com.bh", true, false, false, -1, &kPinset_google_root_pems },
 464   { "google.com.bn", true, false, false, -1, &kPinset_google_root_pems },
 465   { "google.com.bo", true, false, false, -1, &kPinset_google_root_pems },
 466   { "google.com.br", true, false, false, -1, &kPinset_google_root_pems },
 467   { "google.com.by", true, false, false, -1, &kPinset_google_root_pems },
 468   { "google.com.bz", true, false, false, -1, &kPinset_google_root_pems },
 469   { "google.com.cn", true, false, false, -1, &kPinset_google_root_pems },
 470   { "google.com.co", true, false, false, -1, &kPinset_google_root_pems },
 471   { "google.com.cu", true, false, false, -1, &kPinset_google_root_pems },
 472   { "google.com.cy", true, false, false, -1, &kPinset_google_root_pems },
 473   { "google.com.do", true, false, false, -1, &kPinset_google_root_pems },
 474   { "google.com.ec", true, false, false, -1, &kPinset_google_root_pems },
 475   { "google.com.eg", true, false, false, -1, &kPinset_google_root_pems },
 476   { "google.com.et", true, false, false, -1, &kPinset_google_root_pems },
 477   { "google.com.fj", true, false, false, -1, &kPinset_google_root_pems },
 478   { "google.com.ge", true, false, false, -1, &kPinset_google_root_pems },
 479   { "google.com.gh", true, false, false, -1, &kPinset_google_root_pems },
 480   { "google.com.gi", true, false, false, -1, &kPinset_google_root_pems },
 481   { "google.com.gr", true, false, false, -1, &kPinset_google_root_pems },
 482   { "google.com.gt", true, false, false, -1, &kPinset_google_root_pems },
 483   { "google.com.hk", true, false, false, -1, &kPinset_google_root_pems },
 484   { "google.com.iq", true, false, false, -1, &kPinset_google_root_pems },
 485   { "google.com.jm", true, false, false, -1, &kPinset_google_root_pems },
 486   { "google.com.jo", true, false, false, -1, &kPinset_google_root_pems },
 487   { "google.com.kh", true, false, false, -1, &kPinset_google_root_pems },
 488   { "google.com.kw", true, false, false, -1, &kPinset_google_root_pems },
 489   { "google.com.lb", true, false, false, -1, &kPinset_google_root_pems },
 490   { "google.com.ly", true, false, false, -1, &kPinset_google_root_pems },
 491   { "google.com.mt", true, false, false, -1, &kPinset_google_root_pems },
 492   { "google.com.mx", true, false, false, -1, &kPinset_google_root_pems },
 493   { "google.com.my", true, false, false, -1, &kPinset_google_root_pems },
 494   { "google.com.na", true, false, false, -1, &kPinset_google_root_pems },
 495   { "google.com.nf", true, false, false, -1, &kPinset_google_root_pems },
 496   { "google.com.ng", true, false, false, -1, &kPinset_google_root_pems },
 497   { "google.com.ni", true, false, false, -1, &kPinset_google_root_pems },
 498   { "google.com.np", true, false, false, -1, &kPinset_google_root_pems },
 499   { "google.com.nr", true, false, false, -1, &kPinset_google_root_pems },
 500   { "google.com.om", true, false, false, -1, &kPinset_google_root_pems },
 501   { "google.com.pa", true, false, false, -1, &kPinset_google_root_pems },
 502   { "google.com.pe", true, false, false, -1, &kPinset_google_root_pems },
 503   { "google.com.ph", true, false, false, -1, &kPinset_google_root_pems },
 504   { "google.com.pk", true, false, false, -1, &kPinset_google_root_pems },
 505   { "google.com.pl", true, false, false, -1, &kPinset_google_root_pems },
 506   { "google.com.pr", true, false, false, -1, &kPinset_google_root_pems },
 507   { "google.com.py", true, false, false, -1, &kPinset_google_root_pems },
 508   { "google.com.qa", true, false, false, -1, &kPinset_google_root_pems },
 509   { "google.com.ru", true, false, false, -1, &kPinset_google_root_pems },
 510   { "google.com.sa", true, false, false, -1, &kPinset_google_root_pems },
 511   { "google.com.sb", true, false, false, -1, &kPinset_google_root_pems },
 512   { "google.com.sg", true, false, false, -1, &kPinset_google_root_pems },
 513   { "google.com.sl", true, false, false, -1, &kPinset_google_root_pems },
 514   { "google.com.sv", true, false, false, -1, &kPinset_google_root_pems },
 515   { "google.com.tj", true, false, false, -1, &kPinset_google_root_pems },
 516   { "google.com.tn", true, false, false, -1, &kPinset_google_root_pems },
 517   { "google.com.tr", true, false, false, -1, &kPinset_google_root_pems },
 518   { "google.com.tw", true, false, false, -1, &kPinset_google_root_pems },
 519   { "google.com.ua", true, false, false, -1, &kPinset_google_root_pems },
 520   { "google.com.uy", true, false, false, -1, &kPinset_google_root_pems },
 521   { "google.com.vc", true, false, false, -1, &kPinset_google_root_pems },
 522   { "google.com.ve", true, false, false, -1, &kPinset_google_root_pems },
 523   { "google.com.vn", true, false, false, -1, &kPinset_google_root_pems },
 524   { "google.cv", true, false, false, -1, &kPinset_google_root_pems },
 525   { "google.cz", true, false, false, -1, &kPinset_google_root_pems },
 526   { "google.de", true, false, false, -1, &kPinset_google_root_pems },
 527   { "google.dj", true, false, false, -1, &kPinset_google_root_pems },
 528   { "google.dk", true, false, false, -1, &kPinset_google_root_pems },
 529   { "google.dm", true, false, false, -1, &kPinset_google_root_pems },
 530   { "google.dz", true, false, false, -1, &kPinset_google_root_pems },
 531   { "google.ee", true, false, false, -1, &kPinset_google_root_pems },
 532   { "google.es", true, false, false, -1, &kPinset_google_root_pems },
 533   { "google.fi", true, false, false, -1, &kPinset_google_root_pems },
 534   { "google.fm", true, false, false, -1, &kPinset_google_root_pems },
 535   { "google.fr", true, false, false, -1, &kPinset_google_root_pems },
 536   { "google.ga", true, false, false, -1, &kPinset_google_root_pems },
 537   { "google.ge", true, false, false, -1, &kPinset_google_root_pems },
 538   { "google.gg", true, false, false, -1, &kPinset_google_root_pems },
 539   { "google.gl", true, false, false, -1, &kPinset_google_root_pems },
 540   { "google.gm", true, false, false, -1, &kPinset_google_root_pems },
 541   { "google.gp", true, false, false, -1, &kPinset_google_root_pems },
 542   { "google.gr", true, false, false, -1, &kPinset_google_root_pems },
 543   { "google.gy", true, false, false, -1, &kPinset_google_root_pems },
 544   { "google.hk", true, false, false, -1, &kPinset_google_root_pems },
 545   { "google.hn", true, false, false, -1, &kPinset_google_root_pems },
 546   { "google.hr", true, false, false, -1, &kPinset_google_root_pems },
 547   { "google.ht", true, false, false, -1, &kPinset_google_root_pems },
 548   { "google.hu", true, false, false, -1, &kPinset_google_root_pems },
 549   { "google.ie", true, false, false, -1, &kPinset_google_root_pems },
 550   { "google.im", true, false, false, -1, &kPinset_google_root_pems },
 551   { "google.info", true, false, false, -1, &kPinset_google_root_pems },
 552   { "google.iq", true, false, false, -1, &kPinset_google_root_pems },
 553   { "google.is", true, false, false, -1, &kPinset_google_root_pems },
 554   { "google.it", true, false, false, -1, &kPinset_google_root_pems },
 555   { "google.it.ao", true, false, false, -1, &kPinset_google_root_pems },
 556   { "google.je", true, false, false, -1, &kPinset_google_root_pems },
 557   { "google.jo", true, false, false, -1, &kPinset_google_root_pems },
 558   { "google.jobs", true, false, false, -1, &kPinset_google_root_pems },
 559   { "google.jp", true, false, false, -1, &kPinset_google_root_pems },
 560   { "google.kg", true, false, false, -1, &kPinset_google_root_pems },
 561   { "google.ki", true, false, false, -1, &kPinset_google_root_pems },
 562   { "google.kz", true, false, false, -1, &kPinset_google_root_pems },
 563   { "google.la", true, false, false, -1, &kPinset_google_root_pems },
 564   { "google.li", true, false, false, -1, &kPinset_google_root_pems },
 565   { "google.lk", true, false, false, -1, &kPinset_google_root_pems },
 566   { "google.lt", true, false, false, -1, &kPinset_google_root_pems },
 567   { "google.lu", true, false, false, -1, &kPinset_google_root_pems },
 568   { "google.lv", true, false, false, -1, &kPinset_google_root_pems },
 569   { "google.md", true, false, false, -1, &kPinset_google_root_pems },
 570   { "google.me", true, false, false, -1, &kPinset_google_root_pems },
 571   { "google.mg", true, false, false, -1, &kPinset_google_root_pems },
 572   { "google.mk", true, false, false, -1, &kPinset_google_root_pems },
 573   { "google.ml", true, false, false, -1, &kPinset_google_root_pems },
 574   { "google.mn", true, false, false, -1, &kPinset_google_root_pems },
 575   { "google.ms", true, false, false, -1, &kPinset_google_root_pems },
 576   { "google.mu", true, false, false, -1, &kPinset_google_root_pems },
 577   { "google.mv", true, false, false, -1, &kPinset_google_root_pems },
 578   { "google.mw", true, false, false, -1, &kPinset_google_root_pems },
 579   { "google.ne", true, false, false, -1, &kPinset_google_root_pems },
 580   { "google.ne.jp", true, false, false, -1, &kPinset_google_root_pems },
 581   { "google.net", true, false, false, -1, &kPinset_google_root_pems },
 582   { "google.nl", true, false, false, -1, &kPinset_google_root_pems },
 583   { "google.no", true, false, false, -1, &kPinset_google_root_pems },
 584   { "google.nr", true, false, false, -1, &kPinset_google_root_pems },
 585   { "google.nu", true, false, false, -1, &kPinset_google_root_pems },
 586   { "google.off.ai", true, false, false, -1, &kPinset_google_root_pems },
 587   { "google.pk", true, false, false, -1, &kPinset_google_root_pems },
 588   { "google.pl", true, false, false, -1, &kPinset_google_root_pems },
 589   { "google.pn", true, false, false, -1, &kPinset_google_root_pems },
 590   { "google.ps", true, false, false, -1, &kPinset_google_root_pems },
 591   { "google.pt", true, false, false, -1, &kPinset_google_root_pems },
 592   { "google.ro", true, false, false, -1, &kPinset_google_root_pems },
 593   { "google.rs", true, false, false, -1, &kPinset_google_root_pems },
 594   { "google.ru", true, false, false, -1, &kPinset_google_root_pems },
 595   { "google.rw", true, false, false, -1, &kPinset_google_root_pems },
 596   { "google.sc", true, false, false, -1, &kPinset_google_root_pems },
 597   { "google.se", true, false, false, -1, &kPinset_google_root_pems },
 598   { "google.sh", true, false, false, -1, &kPinset_google_root_pems },
 599   { "google.si", true, false, false, -1, &kPinset_google_root_pems },
 600   { "google.sk", true, false, false, -1, &kPinset_google_root_pems },
 601   { "google.sm", true, false, false, -1, &kPinset_google_root_pems },
 602   { "google.sn", true, false, false, -1, &kPinset_google_root_pems },
 603   { "google.so", true, false, false, -1, &kPinset_google_root_pems },
 604   { "google.st", true, false, false, -1, &kPinset_google_root_pems },
 605   { "google.td", true, false, false, -1, &kPinset_google_root_pems },
 606   { "google.tg", true, false, false, -1, &kPinset_google_root_pems },
 607   { "google.tk", true, false, false, -1, &kPinset_google_root_pems },
 608   { "google.tl", true, false, false, -1, &kPinset_google_root_pems },
 609   { "google.tm", true, false, false, -1, &kPinset_google_root_pems },
 610   { "google.tn", true, false, false, -1, &kPinset_google_root_pems },
 611   { "google.to", true, false, false, -1, &kPinset_google_root_pems },
 612   { "google.tt", true, false, false, -1, &kPinset_google_root_pems },
 613   { "google.ua", true, false, false, -1, &kPinset_google_root_pems },
 614   { "google.us", true, false, false, -1, &kPinset_google_root_pems },
 615   { "google.uz", true, false, false, -1, &kPinset_google_root_pems },
 616   { "google.vg", true, false, false, -1, &kPinset_google_root_pems },
 617   { "google.vu", true, false, false, -1, &kPinset_google_root_pems },
 618   { "google.ws", true, false, false, -1, &kPinset_google_root_pems },
 619   { "googleadservices.com", true, false, false, -1, &kPinset_google_root_pems },
 620   { "googleapis.com", true, false, false, -1, &kPinset_google_root_pems },
 621   { "googlecode.com", true, false, false, -1, &kPinset_google_root_pems },
 622   { "googlecommerce.com", true, false, false, -1, &kPinset_google_root_pems },
 623   { "googlegroups.com", true, false, false, -1, &kPinset_google_root_pems },
 624   { "googlemail.com", false, false, false, -1, &kPinset_google_root_pems },
 625   { "googleplex.com", true, false, false, -1, &kPinset_google_root_pems },
 626   { "googlesource.com", true, false, false, -1, &kPinset_google_root_pems },
 627   { "googlesyndication.com", true, false, false, -1, &kPinset_google_root_pems },
 628   { "googletagmanager.com", true, false, false, -1, &kPinset_google_root_pems },
 629   { "googletagservices.com", true, false, false, -1, &kPinset_google_root_pems },
 630   { "googleusercontent.com", true, false, false, -1, &kPinset_google_root_pems },
 631   { "googlevideo.com", true, false, false, -1, &kPinset_google_root_pems },
 632   { "googleweblight.com", true, false, false, -1, &kPinset_google_root_pems },
 633   { "goto.google.com", true, false, false, -1, &kPinset_google_root_pems },
 634   { "groups.google.com", true, false, false, -1, &kPinset_google_root_pems },
 635   { "gstatic.cn", true, false, false, -1, &kPinset_google_root_pems },
 636   { "gstatic.com", true, false, false, -1, &kPinset_google_root_pems },
 637   { "gvt1.com", true, false, false, -1, &kPinset_google_root_pems },
 638   { "gvt2.com", true, false, false, -1, &kPinset_google_root_pems },
 639   { "gvt3.com", true, false, false, -1, &kPinset_google_root_pems },
 640   { "hangout", true, false, false, -1, &kPinset_google_root_pems },
 641   { "hangouts.google.com", true, false, false, -1, &kPinset_google_root_pems },
 642   { "history.google.com", true, false, false, -1, &kPinset_google_root_pems },
 643   { "hostedtalkgadget.google.com", true, false, false, -1, &kPinset_google_root_pems },
 644   { "inbox.google.com", true, false, false, -1, &kPinset_google_root_pems },
 645   { "include-subdomains.pinning.example.com", true, false, false, -1, &kPinset_mozilla_test },
 646   { "lens.google.com", true, false, false, -1, &kPinset_google_root_pems },
 647   { "login.corp.google.com", true, false, false, -1, &kPinset_google_root_pems },
 648   { "m.facebook.com", true, false, false, -1, &kPinset_facebook },
 649   { "mail-settings.google.com", true, false, false, -1, &kPinset_google_root_pems },
 650   { "mail.google.com", true, false, false, -1, &kPinset_google_root_pems },
 651   { "market.android.com", true, false, false, -1, &kPinset_google_root_pems },
 652   { "mbasic.facebook.com", true, false, false, -1, &kPinset_facebook },
 653   { "meet.google.com", true, false, false, -1, &kPinset_google_root_pems },
 654   { "messenger.com", true, false, false, -1, &kPinset_facebook },
 655   { "mtouch.facebook.com", true, false, false, -1, &kPinset_facebook },
 656   { "myaccount.google.com", true, false, false, -1, &kPinset_google_root_pems },
 657   { "myactivity.google.com", true, false, false, -1, &kPinset_google_root_pems },
 658   { "oauthaccountmanager.googleapis.com", true, false, false, -1, &kPinset_google_root_pems },
 659   { "passwords.google.com", true, false, false, -1, &kPinset_google_root_pems },
 660   { "passwordsleakcheck-pa.googleapis.com", true, false, false, -1, &kPinset_google_root_pems },
 661   { "payments.google.com", true, false, false, -1, &kPinset_google_root_pems },
 662   { "pinning-test.badssl.com", true, false, false, -1, &kPinset_test },
 663   { "pinningtest.appspot.com", true, false, false, -1, &kPinset_test },
 664   { "pixel.facebook.com", true, false, false, -1, &kPinset_facebook },
 665   { "pixel.google.com", true, false, false, -1, &kPinset_google_root_pems },
 666   { "play.google.com", true, false, false, -1, &kPinset_google_root_pems },
 667   { "plus.google.com", true, false, false, -1, &kPinset_google_root_pems },
 668   { "plus.sandbox.google.com", true, false, false, -1, &kPinset_google_root_pems },
 669   { "profiles.google.com", true, false, false, -1, &kPinset_google_root_pems },
 670   { "remotedesktop.corp.google.com", true, false, false, -1, &kPinset_google_root_pems },
 671   { "research.facebook.com", true, false, false, -1, &kPinset_facebook },
 672   { "script.google.com", true, false, false, -1, &kPinset_google_root_pems },
 673   { "secure.facebook.com", true, false, false, -1, &kPinset_facebook },
 674   { "security.google.com", true, false, false, -1, &kPinset_google_root_pems },
 675   { "services.mozilla.com", true, false, true, 6, &kPinset_mozilla_services },
 676   { "sites.google.com", true, false, false, -1, &kPinset_google_root_pems },
 677   { "spreadsheets.google.com", true, false, false, -1, &kPinset_google_root_pems },
 678   { "static.googleadsserving.cn", true, false, false, -1, &kPinset_google_root_pems },
 679   { "stats.g.doubleclick.net", true, false, false, -1, &kPinset_google_root_pems },
 680   { "sync.services.mozilla.com", true, false, true, 13, &kPinset_mozilla_services },
 681   { "t.facebook.com", true, false, false, -1, &kPinset_facebook },
 682   { "tablet.facebook.com", true, false, false, -1, &kPinset_facebook },
 683   { "talk.google.com", true, false, false, -1, &kPinset_google_root_pems },
 684   { "talkgadget.google.com", true, false, false, -1, &kPinset_google_root_pems },
 685   { "telemetry.mozilla.org", true, true, true, 8, &kPinset_mozilla_services },
 686   { "test-mode.pinning.example.com", true, true, false, -1, &kPinset_mozilla_test },
 687   { "testpilot.firefox.com", false, false, true, 9, &kPinset_mozilla_services },
 688   { "touch.facebook.com", true, false, false, -1, &kPinset_facebook },
 689   { "translate.googleapis.com", true, false, false, -1, &kPinset_google_root_pems },
 690   { "tunnel-staging.googlezip.net", true, false, false, -1, &kPinset_google_root_pems },
 691   { "tunnel.googlezip.net", true, false, false, -1, &kPinset_google_root_pems },
 692   { "ua5v.com", true, false, false, -1, &kPinset_google_root_pems },
 693   { "upload.facebook.com", true, false, false, -1, &kPinset_facebook },
 694   { "urchin.com", true, false, false, -1, &kPinset_google_root_pems },
 695   { "w-spotlight.appspot.com", true, false, false, -1, &kPinset_google_root_pems },
 696   { "wallet.google.com", true, false, false, -1, &kPinset_google_root_pems },
 697   { "webfilings-eu-mirror.appspot.com", true, false, false, -1, &kPinset_google_root_pems },
 698   { "webfilings-eu.appspot.com", true, false, false, -1, &kPinset_google_root_pems },
 699   { "webfilings-mirror-hrd.appspot.com", true, false, false, -1, &kPinset_google_root_pems },
 700   { "webfilings.appspot.com", true, false, false, -1, &kPinset_google_root_pems },
 701   { "wf-bigsky-master.appspot.com", true, false, false, -1, &kPinset_google_root_pems },
 702   { "wf-demo-eu.appspot.com", true, false, false, -1, &kPinset_google_root_pems },
 703   { "wf-demo-hrd.appspot.com", true, false, false, -1, &kPinset_google_root_pems },
 704   { "wf-dogfood-hrd.appspot.com", true, false, false, -1, &kPinset_google_root_pems },
 705   { "wf-pentest.appspot.com", true, false, false, -1, &kPinset_google_root_pems },
 706   { "wf-staging-hr.appspot.com", true, false, false, -1, &kPinset_google_root_pems },
 707   { "wf-training-hrd.appspot.com", true, false, false, -1, &kPinset_google_root_pems },
 708   { "wf-training-master.appspot.com", true, false, false, -1, &kPinset_google_root_pems },
 709   { "wf-trial-hrd.appspot.com", true, false, false, -1, &kPinset_google_root_pems },
 710   { "withgoogle.com", true, false, false, -1, &kPinset_google_root_pems },
 711   { "withyoutube.com", true, false, false, -1, &kPinset_google_root_pems },
 712   { "www.facebook.com", true, false, false, -1, &kPinset_facebook },
 713   { "www.g.co", false, false, false, -1, &kPinset_google_root_pems },
 714   { "www.gmail.com", false, false, false, -1, &kPinset_google_root_pems },
 715   { "www.googlegroups.com", true, false, false, -1, &kPinset_google_root_pems },
 716   { "www.googlemail.com", false, false, false, -1, &kPinset_google_root_pems },
 717   { "www.messenger.com", true, false, false, -1, &kPinset_facebook },
 718   { "xbrlsuccess.appspot.com", true, false, false, -1, &kPinset_google_root_pems },
 719   { "xn--7xa.google.com", true, false, false, -1, &kPinset_google_root_pems },
 720   { "youtu.be", true, false, false, -1, &kPinset_google_root_pems },
 721   { "youtube-nocookie.com", true, false, false, -1, &kPinset_google_root_pems },
 722   { "youtube.com", true, false, false, -1, &kPinset_google_root_pems },
 723   { "ytimg.com", true, false, false, -1, &kPinset_google_root_pems },
 724 };
 725
 726 // Pinning Preload List Length = 392;
 727
 728 static const int32_t kUnknownId = -1;
 729
 730 static const PRTime kPreloadPKPinsExpirationTime = INT64_C(1743419948904000);