Currently using the wrong CA DB

[JamesTheAwesomeDude]

• What the project is using now, IncludedCACertificateReport, is a list of all root certificate authorities recognized by Mozilla.

• What we should be using is the list of those “…with the Websites (TLS/SSL) Trust Bit Enabled”.

However, the file they provide about the latter has some drawbacks:

1. It lacks crucial geopolitical exposure information
2. We can't use it without an ASN.1-parsing library, so will have to put in work to leverage it

[JamesTheAwesomeDude]

We can't use it without an ASN.1-parsing library, so will have to put in work to leverage it

This is actually false: all we gotta do is de-base64 the blobs themselves and SHA-256 them wholesale to key the (geopolitically-informative) CCADB off. This will be super EZ

[JamesTheAwesomeDude]

Resolved by 89e4f6f99e4587ee0db42386672b142c277a26c6