# This list contains well-known Certificate Authorities (CA) outside China mainland.

# Reference: https://en.wikipedia.org/wiki/Certificate_authority
#include:actalis
DOMAIN-SUFFIX,actalis.com,PROXY
DOMAIN-SUFFIX,actalis.it,PROXY
#end include:actalis
#include:amazontrust
DOMAIN-SUFFIX,amazontrust.com,PROXY
DOMAIN-SUFFIX,awstrust.com,PROXY
DOMAIN-SUFFIX,ss2.us,PROXY
#end include:amazontrust
#include:apple-pki
DOMAIN,certs-lb.apple.com.akadns.net,PROXY
DOMAIN,certs.apple.com,PROXY
DOMAIN,crl-lb.apple.com.akadns.net,PROXY
DOMAIN,crl.apple.com,PROXY
DOMAIN,ocsp-lb.apple.com.akadns.net,PROXY
DOMAIN,ocsp.apple.com,PROXY
DOMAIN,ocsp2-lb.apple.com.akadns.net,PROXY
DOMAIN,ocsp2.apple.com,PROXY
DOMAIN,valid.apple.com,PROXY
#end include:apple-pki
#include:buypass
DOMAIN-SUFFIX,buypass-ssl.com,PROXY
DOMAIN-SUFFIX,buypass.com,PROXY
DOMAIN-SUFFIX,buypass.no,PROXY
DOMAIN-SUFFIX,buypass.se,PROXY
DOMAIN-SUFFIX,minid.no,PROXY
#end include:buypass
#include:certinomis
DOMAIN-SUFFIX,certinomis.com,PROXY
DOMAIN-SUFFIX,certinomis.fr,PROXY
#end include:certinomis
#include:certum
DOMAIN-SUFFIX,certum.pl,PROXY
DOMAIN-SUFFIX,ocsp-certum.com,PROXY

# Sub brand
DOMAIN-SUFFIX,ocsp-responder.com,PROXY    #Yandex
#end include:certum
#include:entrust
DOMAIN-SUFFIX,entrust.cn,PROXY
DOMAIN-SUFFIX,entrust.com,PROXY
DOMAIN-SUFFIX,entrust.net,PROXY
DOMAIN-SUFFIX,entrustdatacard.com,PROXY
DOMAIN,www.entrust.cn,PROXY

# Sub brand
DOMAIN-SUFFIX,affirmtrust.com,PROXY
DOMAIN-SUFFIX,atos.net,PROXY
DOMAIN-SUFFIX,myatos.net,PROXY
DOMAIN-SUFFIX,certificat2.com,PROXY
DOMAIN-SUFFIX,trendmicro.com,PROXY
#end include:entrust
#include:gandi
DOMAIN-SUFFIX,gandi.net,PROXY
#end include:gandi
#include:globalsign
DOMAIN-SUFFIX,alphassl.com,PROXY
DOMAIN-SUFFIX,easy-signing.com,PROXY
DOMAIN-SUFFIX,globalsign-media.com,PROXY
DOMAIN-SUFFIX,globalsign.be,PROXY
DOMAIN-SUFFIX,globalsign.ch,PROXY
DOMAIN-SUFFIX,globalsign.cloud,PROXY
DOMAIN-SUFFIX,globalsign.cn,PROXY
DOMAIN-SUFFIX,globalsign.co.uk,PROXY
DOMAIN-SUFFIX,globalsign.com,PROXY
DOMAIN-SUFFIX,globalsign.com.au,PROXY
DOMAIN-SUFFIX,globalsign.com.br,PROXY
DOMAIN-SUFFIX,globalsign.com.hk,PROXY
DOMAIN-SUFFIX,globalsign.com.sg,PROXY
DOMAIN-SUFFIX,globalsign.es,PROXY
DOMAIN-SUFFIX,globalsign.eu,PROXY
DOMAIN-SUFFIX,globalsign.fr,PROXY
DOMAIN-SUFFIX,globalsign.net,PROXY
DOMAIN-SUFFIX,globalsign.nl,PROXY
DOMAIN-SUFFIX,globalsigncdn.com,PROXY

DOMAIN,cdn.globalsigncdn.com.cdn.cloudflare.net,PROXY
DOMAIN,crl.globalsign.net,PROXY
#end include:globalsign
#include:godaddy
DOMAIN-SUFFIX,godaddy.com,PROXY
DOMAIN-SUFFIX,x.co,PROXY    #GoDaddy URL Shortener

# All .godaddy domains
DOMAIN-SUFFIX,godaddy,PROXY
#end include:godaddy
#include:google-trust-services
DOMAIN-SUFFIX,pki.goog,PROXY

DOMAIN,pki-goog.l.google.com,PROXY

DOMAIN,c.pki.goog,PROXY
DOMAIN,i.pki.goog,PROXY
DOMAIN,o.pki.goog,PROXY

# Google Public CA API Endpoint
DOMAIN,publicca.googleapis.com,PROXY
DOMAIN,preprod-publicca.googleapis.com,PROXY

# Deprecated earlier
DOMAIN,clients1.google.com,PROXY
DOMAIN,pki.google.com,PROXY

# Deprecated recently
DOMAIN,crl.pki.goog,PROXY
DOMAIN,crls.pki.goog,PROXY
DOMAIN,ocsp.pki.goog,PROXY
#end include:google-trust-services
#include:hinet-eca
# Chunghwa Telecom PKI
DOMAIN-SUFFIX,eca.hinet.net,PROXY
DOMAIN-SUFFIX,gtlsca.nat.gov.tw,PROXY
DOMAIN-SUFFIX,pki.hinet.net,PROXY
DOMAIN-SUFFIX,publicca.hinet.net,PROXY
DOMAIN-SUFFIX,tls.hinet.net,PROXY
#end include:hinet-eca
#include:hongkongpost
DOMAIN-SUFFIX,hongkongpost.gov.hk,PROXY
DOMAIN-SUFFIX,ecert.gov.hk,PROXY
#end include:hongkongpost
#include:identrust
DOMAIN-SUFFIX,identrust.com,PROXY
DOMAIN-SUFFIX,identrust.co.uk,PROXY
DOMAIN-SUFFIX,identrust.net,PROXY
#end include:identrust
#include:letsencrypt
DOMAIN-SUFFIX,lencr.org,PROXY
DOMAIN-SUFFIX,letsencrypt.com,PROXY
DOMAIN-SUFFIX,letsencrypt.org,PROXY
#end include:letsencrypt
#include:microsoft-pki
DOMAIN-SUFFIX,msocsp.com,PROXY

DOMAIN,crl.microsoft.com,PROXY
DOMAIN,mscrl.microsoft.com,PROXY
DOMAIN,ocsp.microsoft.com,PROXY
DOMAIN,oneocsp.microsoft.com,PROXY
DOMAIN,www.microsoft.com,PROXY
#end include:microsoft-pki
#include:secom
DOMAIN-SUFFIX,secom.co.jp,PROXY
DOMAIN-SUFFIX,secomtrust.net,PROXY

# Sub brand

DOMAIN-SUFFIX,cybertrust.co.jp,PROXY
DOMAIN-SUFFIX,cybertrust.ne.jp,PROXY
DOMAIN-SUFFIX,managedpki.ne.jp,PROXY
#end include:secom
#include:sectigo
DOMAIN-SUFFIX,enterprisessl.com,PROXY
DOMAIN-SUFFIX,hackerguardian.com,PROXY
DOMAIN-SUFFIX,instantssl.com,PROXY
DOMAIN-SUFFIX,oemssl.cn,PROXY
DOMAIN-SUFFIX,oemssl.cn.cdn.cloudflare.net,PROXY
DOMAIN-SUFFIX,optimumssl.com,PROXY
DOMAIN-SUFFIX,positivessl.com,PROXY
DOMAIN-SUFFIX,sectigo.com,PROXY
DOMAIN-SUFFIX,sectigochina.com,PROXY
DOMAIN-SUFFIX,sectigochina.com.cdn.cloudflare.net,PROXY
DOMAIN-SUFFIX,trust-provider.cn,PROXY
DOMAIN-SUFFIX,trust-provider.com,PROXY
DOMAIN-SUFFIX,usertrust.com,PROXY

# Sub brand
DOMAIN-SUFFIX,aoc.cat,PROXY
DOMAIN-SUFFIX,catcert.cat,PROXY
DOMAIN-SUFFIX,incommon-rsa.org,PROXY
DOMAIN-SUFFIX,netsolssl.com,PROXY

# Comodo CA
DOMAIN-SUFFIX,comodoca.com,PROXY
DOMAIN-SUFFIX,comodoca2.com,PROXY
DOMAIN-SUFFIX,comodoca3.com,PROXY
DOMAIN-SUFFIX,comodoca4.com,PROXY
#end include:sectigo
#include:sslcom
DOMAIN-SUFFIX,ssl.com,PROXY
DOMAIN-SUFFIX,sslcom.cn,PROXY
#end include:sslcom
#include:starfieldtech
DOMAIN-SUFFIX,starfieldtech.com,PROXY
#end include:starfieldtech
#include:swisssign
DOMAIN-SUFFIX,digital-id.ch,PROXY
DOMAIN-SUFFIX,digitalid.ch,PROXY
DOMAIN-SUFFIX,managed-pki.ch,PROXY
DOMAIN-SUFFIX,managed-pki.de,PROXY
DOMAIN-SUFFIX,pki-post.ch,PROXY
DOMAIN-SUFFIX,pki-posta.ch,PROXY
DOMAIN-SUFFIX,pki-poste.ch,PROXY
DOMAIN-SUFFIX,root-signing.ch,PROXY
DOMAIN-SUFFIX,rootsigning.com,PROXY
DOMAIN-SUFFIX,ssl-certificate.ch,PROXY
DOMAIN-SUFFIX,swissid.ch,PROXY
DOMAIN-SUFFIX,swissign.com,PROXY
DOMAIN-SUFFIX,swissign.li,PROXY
DOMAIN-SUFFIX,swisssign-group.ch,PROXY
DOMAIN-SUFFIX,swisssign-group.com,PROXY
DOMAIN-SUFFIX,swisssign-group.li,PROXY
DOMAIN-SUFFIX,swisssign.ch,PROXY
DOMAIN-SUFFIX,swisssign.com,PROXY
DOMAIN-SUFFIX,swisssign.li,PROXY
DOMAIN-SUFFIX,swisssign.net,PROXY
DOMAIN-SUFFIX,swisssign.org,PROXY
DOMAIN-SUFFIX,swisssigner.ch,PROXY
DOMAIN-SUFFIX,swisssigner.com,PROXY
DOMAIN-SUFFIX,swisssigngroup.ch,PROXY
DOMAIN-SUFFIX,swisssigngroup.com,PROXY
DOMAIN-SUFFIX,swissstick.com,PROXY
DOMAIN-SUFFIX,swisstsa.ch,PROXY
DOMAIN-SUFFIX,swisstsa.li,PROXY
DOMAIN-SUFFIX,trustdoc.ch,PROXY
DOMAIN-SUFFIX,trustsign.ch,PROXY
DOMAIN-SUFFIX,zert.ch,PROXY
#end include:swisssign
#include:telekom
DOMAIN-SUFFIX,telekom.com,PROXY
DOMAIN-SUFFIX,telekom.de,PROXY
DOMAIN-SUFFIX,telesec.de,PROXY
#end include:telekom
#include:trustwave
DOMAIN-SUFFIX,trustwave.com,PROXY
#end include:trustwave
#include:twca
DOMAIN-SUFFIX,twca.com.tw,PROXY
#end include:twca
#include:vodafone
DOMAIN-SUFFIX,myvodafone.com.au,PROXY
DOMAIN-SUFFIX,myvodafone.com.ws,PROXY
DOMAIN-SUFFIX,vodafone.co.uk,PROXY
DOMAIN-SUFFIX,vodafone.com,PROXY
DOMAIN-SUFFIX,vodafone.com.au,PROXY
DOMAIN-SUFFIX,vodafone.com.tr,PROXY
DOMAIN-SUFFIX,vodafone.de,PROXY
DOMAIN-SUFFIX,vodafone.it,PROXY
#end include:vodafone
#include:wisekey
DOMAIN-SUFFIX,wisecoin.com,PROXY
DOMAIN-SUFFIX,wiseid.com,PROXY
DOMAIN-SUFFIX,wisekey.com,PROXY
DOMAIN-SUFFIX,wisekey.com.hk,PROXY
#end include:wisekey

DOMAIN-SUFFIX,accv.es,PROXY
DOMAIN-SUFFIX,camerfirma.com,PROXY
DOMAIN-SUFFIX,certsign.ro,PROXY
DOMAIN-SUFFIX,d-trust.net,PROXY
DOMAIN-SUFFIX,e-szigno.hu,PROXY
DOMAIN-SUFFIX,e-tugra.com,PROXY
DOMAIN-SUFFIX,firmaprofesional.com,PROXY
DOMAIN-SUFFIX,fnmt.es,PROXY
DOMAIN-SUFFIX,harica.gr,PROXY
DOMAIN-SUFFIX,infocert.digital,PROXY
DOMAIN-SUFFIX,infocert.it,PROXY
DOMAIN-SUFFIX,managedpki.com,PROXY
DOMAIN-SUFFIX,netlock.hu,PROXY
DOMAIN-SUFFIX,trustcor.ca,PROXY
DOMAIN-SUFFIX,trustcor.com,PROXY
DOMAIN-SUFFIX,trustisfps.com,PROXY