Package Control: Install SSL Certification Error

[jonahpaul]

Hi all, I've been experiencing SSL certification problems accessing the json packages list and have followed every step I could find in to address it. I have 3 debugger entries corresponding. In addition to these attempt, I've tried reinstalling package control and reinstalling sublime text to no avail.

Could anyone help me take a stab at this?

Using the default downloader_precedence

startup, version: 3155 osx x64 channel: dev executable: /Applications/Sublime Text.app/Contents/MacOS/Sublime Text working dir: / packages path: /Users/jonahpaul/Library/Application Support/Sublime Text 3/Packages state path: /Users/jonahpaul/Library/Application Support/Sublime Text 3/Local zip path: /Applications/Sublime Text.app/Contents/MacOS/Packages zip path: /Users/jonahpaul/Library/Application Support/Sublime Text 3/Installed Packages ignored_packages: ["Vintage"] pre session restore time: 0.621933 startup time: 0.768954 reloading plugin Default.arithmetic reloading plugin Default.auto_indent_tag reloading plugin Default.block reloading plugin Default.colors reloading plugin Default.comment reloading plugin Default.convert_color_scheme reloading plugin Default.convert_syntax reloading plugin Default.copy_path reloading plugin Default.delete_word reloading plugin Default.detect_indentation reloading plugin Default.duplicate_line reloading plugin Default.echo reloading plugin Default.exec reloading plugin Default.fold reloading plugin Default.font reloading plugin Default.goto_line reloading plugin Default.history_list reloading plugin Default.indentation reloading plugin Default.install_package_control reloading plugin Default.kill_ring reloading plugin Default.mark reloading plugin Default.new_templates reloading plugin Default.open_context_url reloading plugin Default.open_in_browser reloading plugin Default.pane reloading plugin Default.paragraph reloading plugin Default.paste_from_history reloading plugin Default.profile reloading plugin Default.quick_panel reloading plugin Default.rename reloading plugin Default.run_syntax_tests reloading plugin Default.save_on_focus_lost reloading plugin Default.scroll reloading plugin Default.set_unsaved_view_name reloading plugin Default.settings reloading plugin Default.show_scope_name reloading plugin Default.side_bar reloading plugin Default.sort reloading plugin Default.swap_line reloading plugin Default.switch_file reloading plugin Default.symbol reloading plugin Default.transform reloading plugin Default.transpose reloading plugin Default.trim_trailing_white_space reloading plugin Default.ui reloading plugin CSS.css_completions reloading plugin Diff.diff reloading plugin HTML.encode_html_entities reloading plugin HTML.html_completions reloading plugin ShellScript.ShellScript reloading plugin 0_package_control_loader.00-package_control reloading plugin Package Control.1_reloader reloading plugin Package Control.2_bootstrap reloading plugin Package Control.Package Control plugins loaded Package Control: Skipping automatic upgrade, last run at 2017-12-01 11:37:45, next run at 2017-12-01 12:37:45 or after environment variables loaded using: /bin/zsh -l reloading settings Packages/User/Package Control.sublime-settings reloading settings Packages/User/Package Control.sublime-settings Package Control: Settings change detected, clearing cache Package Control: Fetching list of available packages and dependencies Platform: osx-x64 Sublime Text Version: 3155 Package Control Version: 3.3.0 Package Control: Download Debug URL: https://packagecontrol.io/channel_v3.json Timeout: 30 Resolved IP: 50.116.34.243 Resolved IPv6: 2600:3c02:e000:42::1 Package Control: Urllib Debug Proxy http_proxy: https_proxy: proxy_username: proxy_password: Package Control: Found previously exported CA bundle at /Users/jonahpaul/Library/Application Support/Sublime Text 3/Packages/User/oscrypto-ca-bundle.crt (261911 bytes) Package Control: Urllib HTTPS Debug General Connecting to packagecontrol.io on port 443 Package Control: Urllib HTTPS Debug General Upgrading connection to SSL using CA certs file at /Users/jonahpaul/Library/Application Support/Sublime Text 3/Packages/User/Package Control.merged-ca-bundle Using hostname "packagecontrol.io" for TLS SNI extension Package Control: Error downloading channel. HTTP exception InvalidCertificateException (Host packagecontrol.io returned an invalid certificate ([SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:548))) downloading https://packagecontrol.io/channel_v3.json.

Using "downloader_precedence": { "osx": ["curl"] }

startup, version: 3155 osx x64 channel: dev executable: /Applications/Sublime Text.app/Contents/MacOS/Sublime Text working dir: / packages path: /Users/jonahpaul/Library/Application Support/Sublime Text 3/Packages state path: /Users/jonahpaul/Library/Application Support/Sublime Text 3/Local zip path: /Applications/Sublime Text.app/Contents/MacOS/Packages zip path: /Users/jonahpaul/Library/Application Support/Sublime Text 3/Installed Packages ignored_packages: ["Vintage"] pre session restore time: 0.633657 startup time: 0.779243 reloading plugin Default.arithmetic reloading plugin Default.auto_indent_tag reloading plugin Default.block reloading plugin Default.colors reloading plugin Default.comment reloading plugin Default.convert_color_scheme reloading plugin Default.convert_syntax reloading plugin Default.copy_path reloading plugin Default.delete_word reloading plugin Default.detect_indentation reloading plugin Default.duplicate_line reloading plugin Default.echo reloading plugin Default.exec reloading plugin Default.fold reloading plugin Default.font reloading plugin Default.goto_line reloading plugin Default.history_list reloading plugin Default.indentation reloading plugin Default.install_package_control reloading plugin Default.kill_ring reloading plugin Default.mark reloading plugin Default.new_templates reloading plugin Default.open_context_url reloading plugin Default.open_in_browser reloading plugin Default.pane reloading plugin Default.paragraph reloading plugin Default.paste_from_history reloading plugin Default.profile reloading plugin Default.quick_panel reloading plugin Default.rename reloading plugin Default.run_syntax_tests reloading plugin Default.save_on_focus_lost reloading plugin Default.scroll reloading plugin Default.set_unsaved_view_name reloading plugin Default.settings reloading plugin Default.show_scope_name reloading plugin Default.side_bar reloading plugin Default.sort reloading plugin Default.swap_line reloading plugin Default.switch_file reloading plugin Default.symbol reloading plugin Default.transform reloading plugin Default.transpose reloading plugin Default.trim_trailing_white_space reloading plugin Default.ui reloading plugin CSS.css_completions reloading plugin Diff.diff reloading plugin HTML.encode_html_entities reloading plugin HTML.html_completions reloading plugin ShellScript.ShellScript reloading plugin 0_package_control_loader.00-package_control reloading plugin Package Control.1_reloader reloading plugin Package Control.2_bootstrap reloading plugin Package Control.Package Control plugins loaded Package Control: Skipping automatic upgrade, last run at 2017-12-01 11:37:45, next run at 2017-12-01 12:37:45 or after environment variables loaded using: /bin/zsh -l Package Control: Fetching list of available packages and dependencies Platform: osx-x64 Sublime Text Version: 3155 Package Control Version: 3.3.0 Package Control: Download Debug URL: https://packagecontrol.io/channel_v3.json Timeout: 30 Resolved IP: 50.116.34.243 Resolved IPv6: 2600:3c02:e000:42::1 Package Control: Found previously exported CA bundle at /Users/jonahpaul/Library/Application Support/Sublime Text 3/Packages/User/oscrypto-ca-bundle.crt (261911 bytes) Package Control: Wget Debug Proxy http_proxy: https_proxy: proxy_username: proxy_password: Package Control: Trying to execute command /usr/local/bin/wget --connect-timeout=30 -o /var/folders/vj/hqlngyr14pd8t09cjvr1ty040000gn/T/tmprghz84 -O - --secure-protocol=TLSv1 -U 'Package Control v3.3.0' --header 'Accept-Encoding: bzip2,gzip,deflate' '--ca-certificate=/Users/jonahpaul/Library/Application Support/Sublime Text 3/Packages/User/Package Control.merged-ca-bundle' -d https://packagecontrol.io/channel_v3.json Package Control: Wget HTTP Debug General DEBUG output created by Wget 1.13.4 on darwin12.2.1. Resolving packagecontrol.io... 2600:3c02:e000:42::1, 50.116.34.243 Caching packagecontrol.io => 2600:3c02:e000:42::1 50.116.34.243 Connecting to packagecontrol.io|2600:3c02:e000:42::1|:443... connected. Created socket 6. Releasing 0x00007fb6af633960 (new refcount 1). Initiating SSL handshake. Handshake successful; connected socket 6 to SSL handle 0x00007fb6af503350 certificate: subject: /CN=packagecontrol.io issuer: /C=US/O=GeoTrust Inc./CN=RapidSSL SHA256 CA ERROR: cannot verify packagecontrol.io's certificate, issued by /C=US/O=GeoTrust Inc./CN=RapidSSL SHA256 CA': certificate not trusted To connect to packagecontrol.io insecurely, use--no-check-certificate'. Closed 6/SSL 0x00007fb6af503350 Exception in thread Thread-4: Traceback (most recent call last): File "package_control.downloaders.wget_downloader in /Users/jonahpaul/Library/Application Support/Sublime Text 3/Installed Packages/Package Control.sublime-package", line 154, in download File "package_control.downloaders.cli_downloader in /Users/jonahpaul/Library/Application Support/Sublime Text 3/Installed Packages/Package Control.sublime-package", line 85, in execute Package Control.package_control.downloaders.non_clean_exit_error.NonCleanExitError: 5

During handling of the above exception, another exception occurred:

Traceback (most recent call last): File "./python3.3/threading.py", line 901, in _bootstrap_inner File "package_control.commands.install_package_command in /Users/jonahpaul/Library/Application Support/Sublime Text 3/Installed Packages/Package Control.sublime-package", line 45, in run File "package_control.package_installer in /Users/jonahpaul/Library/Application Support/Sublime Text 3/Installed Packages/Package Control.sublime-package", line 58, in make_package_list File "package_control.package_manager in /Users/jonahpaul/Library/Application Support/Sublime Text 3/Installed Packages/Package Control.sublime-package", line 694, in list_available_packages File "package_control.package_manager in /Users/jonahpaul/Library/Application Support/Sublime Text 3/Installed Packages/Package Control.sublime-package", line 554, in _list_available File "package_control.package_manager in /Users/jonahpaul/Library/Application Support/Sublime Text 3/Installed Packages/Package Control.sublime-package", line 453, in list_repositories File "package_control.providers.channel_provider in /Users/jonahpaul/Library/Application Support/Sublime Text 3/Installed Packages/Package Control.sublime-package", line 201, in get_repositories File "package_control.providers.channel_provider in /Users/jonahpaul/Library/Application Support/Sublime Text 3/Installed Packages/Package Control.sublime-package", line 87, in fetch File "package_control.download_manager in /Users/jonahpaul/Library/Application Support/Sublime Text 3/Installed Packages/Package Control.sublime-package", line 340, in fetch File "package_control.downloaders.wget_downloader in /Users/jonahpaul/Library/Application Support/Sublime Text 3/Installed Packages/Package Control.sublime-package", line 167, in download File "package_control.downloaders.wget_downloader in /Users/jonahpaul/Library/Application Support/Sublime Text 3/Installed Packages/Package Control.sublime-package", line 305, in parse_output File "package_control.downloaders.wget_downloader in /Users/jonahpaul/Library/Application Support/Sublime Text 3/Installed Packages/Package Control.sublime-package", line 351, in parse_headers File "package_control.open_compat in /Users/jonahpaul/Library/Application Support/Sublime Text 3/Installed Packages/Package Control.sublime-package", line 14, in open_compat Package Control.package_control.file_not_found_error.FileNotFoundError: The file "/var/folders/vj/hqlngyr14pd8t09cjvr1ty040000gn/T/tmprghz84" could not be found

Using "downloader_precedence": { "osx": ["curl"] },

startup, version: 3155 osx x64 channel: dev executable: /Applications/Sublime Text.app/Contents/MacOS/Sublime Text working dir: / packages path: /Users/jonahpaul/Library/Application Support/Sublime Text 3/Packages state path: /Users/jonahpaul/Library/Application Support/Sublime Text 3/Local zip path: /Applications/Sublime Text.app/Contents/MacOS/Packages zip path: /Users/jonahpaul/Library/Application Support/Sublime Text 3/Installed Packages ignored_packages: ["Vintage"] pre session restore time: 0.671062 startup time: 0.827692 reloading plugin Default.arithmetic reloading plugin Default.auto_indent_tag reloading plugin Default.block reloading plugin Default.colors reloading plugin Default.comment reloading plugin Default.convert_color_scheme reloading plugin Default.convert_syntax reloading plugin Default.copy_path reloading plugin Default.delete_word reloading plugin Default.detect_indentation reloading plugin Default.duplicate_line reloading plugin Default.echo reloading plugin Default.exec reloading plugin Default.fold reloading plugin Default.font reloading plugin Default.goto_line reloading plugin Default.history_list reloading plugin Default.indentation reloading plugin Default.install_package_control reloading plugin Default.kill_ring reloading plugin Default.mark reloading plugin Default.new_templates reloading plugin Default.open_context_url reloading plugin Default.open_in_browser reloading plugin Default.pane reloading plugin Default.paragraph reloading plugin Default.paste_from_history reloading plugin Default.profile reloading plugin Default.quick_panel reloading plugin Default.rename reloading plugin Default.run_syntax_tests reloading plugin Default.save_on_focus_lost reloading plugin Default.scroll reloading plugin Default.set_unsaved_view_name reloading plugin Default.settings reloading plugin Default.show_scope_name reloading plugin Default.side_bar reloading plugin Default.sort reloading plugin Default.swap_line reloading plugin Default.switch_file reloading plugin Default.symbol reloading plugin Default.transform reloading plugin Default.transpose reloading plugin Default.trim_trailing_white_space reloading plugin Default.ui reloading plugin CSS.css_completions reloading plugin Diff.diff reloading plugin HTML.encode_html_entities reloading plugin HTML.html_completions reloading plugin ShellScript.ShellScript reloading plugin 0_package_control_loader.00-package_control reloading plugin Package Control.1_reloader reloading plugin Package Control.2_bootstrap reloading plugin Package Control.Package Control plugins loaded Package Control: Skipping automatic upgrade, last run at 2017-12-01 11:37:45, next run at 2017-12-01 12:37:45 or after environment variables loaded using: /bin/zsh -l Package Control: Fetching list of available packages and dependencies Platform: osx-x64 Sublime Text Version: 3155 Package Control Version: 3.3.0 Package Control: Download Debug URL: https://packagecontrol.io/channel_v3.json Timeout: 30 Resolved IP: 50.116.34.243 Resolved IPv6: 2600:3c02:e000:42::1 Package Control: Found previously exported CA bundle at /Users/jonahpaul/Library/Application Support/Sublime Text 3/Packages/User/oscrypto-ca-bundle.crt (261911 bytes) Package Control: Curl Debug Proxy http_proxy: https_proxy: proxy_username: proxy_password: Package Control: Trying to execute command /usr/bin/curl --connect-timeout 30 -sSL --tlsv1 --dump-header /var/folders/vj/hqlngyr14pd8t09cjvr1ty040000gn/T/tmpdjs_o5 --user-agent 'Package Control v3.3.0' --header 'Accept-Encoding: bzip2,gzip,deflate' --cacert '/Users/jonahpaul/Library/Application Support/Sublime Text 3/Packages/User/Package Control.merged-ca-bundle' -v https://packagecontrol.io/channel_v3.json Package Control: Curl HTTP Debug General Trying 2600:3c02:e000:42::1... TCP_NODELAY set Connected to packagecontrol.io (2600:3c02:e000:42::1) port 443 (#0) ALPN, offering h2 ALPN, offering http/1.1 Cipher selection: ALL:!EXPORT:!EXPORT40:!EXPORT56:!aNULL:!LOW:!RC4:@STRENGTH successfully set certificate verify locations: CAfile: /Users/jonahpaul/Library/Application Support/Sublime Text 3/Packages/User/Package Control.merged-ca-bundle CApath: none TLSv1.2 (OUT), TLS handshake, Client hello (1): TLSv1.2 (IN), TLS handshake, Server hello (2): NPN, negotiated HTTP1.1 TLSv1.2 (IN), TLS handshake, Certificate (11): TLSv1.2 (OUT), TLS alert, Server hello (2): SSL certificate problem: certificate not trusted stopped the pause stream! Closing connection 0 Package Control: Error downloading channel. } [512 bytes data] } [2 bytes data] curl: (60) SSL certificate problem: certificate not trusted More details here: https://curl.haxx.se/docs/sslcerts.html curl performs SSL certificate verification by default, using a "bundle" of Certificate Authority (CA) public keys (CA certs). If the default bundle file isn't adequate, you can specify an alternate file using the --cacert option. If this HTTPS server uses a certificate signed by a CA represented in the bundle, the certificate verification probably failed due to a problem with the certificate (it might be expired, or the name might not match the domain name in the URL). If you'd like to turn off curl's verification of the certificate, use the -k (or --insecure) option. HTTPS-proxy has similar options --proxy-cacert and --proxy-insecure. downloading https://packagecontrol.io/channel_v3.json.

[wbond]

Can you delete Packages/User/oscrypto-ca-bundle.crt and Packages/User/Package Control.merged-ca-bundle, restart Sublime Text and paste the debug output? I am looking for the list of certificates exported from your root CA store.

[jonahpaul]

Sure, here you go.

environment variables loaded using: /bin/zsh -l
Package Control: Fetching list of available packages and dependencies
  Platform: osx-x64
  Sublime Text Version: 3156
  Package Control Version: 3.3.0
Package Control: Download Debug
  URL: https://packagecontrol.io/channel_v3.json
  Timeout: 30
  Resolved IP: 50.116.34.243
  Resolved IPv6: 2600:3c02:e000:42::1
Package Control: Urllib Debug Proxy
  http_proxy: 
  https_proxy: 
  proxy_username: 
  proxy_password: 
Package Control: Generating new CA bundle from system keychain
Package Control: Exported certificate: Common Name: Amazon Root CA 2, Organization: Amazon, Country: US
Package Control: Exported certificate: Common Name: Certplus Root CA G1, Organization: Certplus, Country: FR
Package Control: Exported certificate: Organizational Unit: certSIGN ROOT CA, Organization: certSIGN, Country: RO
Package Control: Exported certificate: Common Name: Autoridad de Certificacion Firmaprofesional CIF A62634068, Country: ES
Package Control: Exported certificate: Common Name: Amazon Root CA 3, Organization: Amazon, Country: US
Package Control: Exported certificate: Common Name: UCA Global Root, Organization: UniTrust, Country: CN
Package Control: Exported certificate: Organizational Unit: Security Communication EV RootCA1; Organization: SECOM Trust Systems CO.,LTD.; Country: JP
Package Control: Exported certificate: Common Name: Entrust Root Certification Authority; Organizational Unit: (c) 2006 Entrust, Inc., www.entrust.net/CPS is incorporated by reference; Organization: Entrust, Inc.; Country: US
Package Control: Exported certificate: Organization: Government Root Certification Authority, Country: TW
Package Control: Exported certificate: Organizational Unit: Trustis FPS Root CA, Organization: Trustis Limited, Country: GB
Package Control: Exported certificate: Common Name: Common Policy, Organizational Unit: FBCA, Organization: U.S. Government, Country: us
Package Control: Exported certificate: Common Name: CA Disig Root R1, Organization: Disig a.s., Locality: Bratislava, Country: SK
Package Control: Exported certificate: Common Name: DigiCert Assured ID Root CA, Organizational Unit: www.digicert.com, Organization: DigiCert Inc, Country: US
Package Control: Exported certificate: Common Name: Certum CA, Organization: Unizeto Sp. z o.o., Country: PL
Package Control: Exported certificate: Common Name: Apple Root Certificate Authority; Organizational Unit: Apple Computer Certificate Authority; Organization: Apple Computer, Inc.; Country: US
Package Control: Exported certificate: Common Name: UCA Root, Organization: UniTrust, Country: CN
Package Control: Exported certificate: Common Name: Certum Trusted Network CA, Organizational Unit: Certum Certification Authority, Organization: Unizeto Technologies S.A., Country: PL
Package Control: Exported certificate: Common Name: Global Chambersign Root - 2008, Organization: AC Camerfirma S.A., Serial Number: A82743287, Locality: Madrid (see current address at www.camerfirma.com/address), Country: EU
Package Control: Exported certificate: Common Name: ISRG Root X1, Organization: Internet Security Research Group, Country: US
Package Control: Exported certificate: Common Name: Certum Trusted Network CA 2, Organizational Unit: Certum Certification Authority, Organization: Unizeto Technologies S.A., Country: PL
Package Control: Exported certificate: Common Name: UTN-USERFirst-Hardware, Organizational Unit: http://www.usertrust.com, Organization: The USERTRUST Network, Locality: Salt Lake City, State/Province: UT, Country: US
Package Control: Exported certificate: Common Name: T-TeleSec GlobalRoot Class 3, Organizational Unit: T-Systems Trust Center, Organization: T-Systems Enterprise Services GmbH, Country: DE
Package Control: Exported certificate: Common Name: Starfield Root Certificate Authority - G2; Organization: Starfield Technologies, Inc.; Locality: Scottsdale; State/Province: Arizona; Country: US
Package Control: Exported certificate: Common Name: AffirmTrust Premium ECC, Organization: AffirmTrust, Country: US
Package Control: Exported certificate: Common Name: Entrust Root Certification Authority - EC1; Organizational Unit: (c) 2012 Entrust, Inc. - for authorized use only, See www.entrust.net/legal-terms; Organization: Entrust, Inc.; Country: US
Package Control: Exported certificate: Common Name: VeriSign Class 2 Public Primary Certification Authority - G3; Organizational Unit: (c) 1999 VeriSign, Inc. - For authorized use only, VeriSign Trust Network; Organization: VeriSign, Inc.; Country: US
Package Control: Exported certificate: Common Name: COMODO RSA Certification Authority, Organization: COMODO CA Limited, Locality: Salford, State/Province: Greater Manchester, Country: GB
Package Control: Exported certificate: Common Name: TeliaSonera Root CA v1, Organization: TeliaSonera
Package Control: Exported certificate: Common Name: AffirmTrust Premium, Organization: AffirmTrust, Country: US
Package Control: Exported certificate: Organizational Unit: Go Daddy Class 2 Certification Authority; Organization: The Go Daddy Group, Inc.; Country: US
Package Control: Exported certificate: Common Name: Certplus Root CA G2, Organization: Certplus, Country: FR
Package Control: Exported certificate: Common Name: Buypass Class 2 Root CA, Organization: Buypass AS-983163327, Country: NO
Package Control: Exported certificate: Common Name: VeriSign Class 3 Public Primary Certification Authority - G4; Organizational Unit: (c) 2007 VeriSign, Inc. - For authorized use only, VeriSign Trust Network; Organization: VeriSign, Inc.; Country: US
Package Control: Exported certificate: Common Name: OpenTrust Root CA G1, Organization: OpenTrust, Country: FR
Package Control: Exported certificate: Common Name: OISTE WISeKey Global Root GA CA; Organizational Unit: OISTE Foundation Endorsed, Copyright (c) 2005; Organization: WISeKey; Country: CH
Package Control: Exported certificate: Common Name: VeriSign Class 3 Public Primary Certification Authority - G5; Organizational Unit: (c) 2006 VeriSign, Inc. - For authorized use only, VeriSign Trust Network; Organization: VeriSign, Inc.; Country: US
Package Control: Exported certificate: Common Name: QuoVadis Root CA 3, Organization: QuoVadis Limited, Country: BM
Package Control: Exported certificate: Common Name: thawte Primary Root CA; Organizational Unit: (c) 2006 thawte, Inc. - For authorized use only, Certification Services Division; Organization: thawte, Inc.; Country: US
Package Control: Exported certificate: Common Name: Izenpe.com, Organization: IZENPE S.A., Country: ES
Package Control: Exported certificate: Common Name: AddTrust Class 1 CA Root, Organizational Unit: AddTrust TTP Network, Organization: AddTrust AB, Country: SE
Package Control: Exported certificate: Common Name: OISTE WISeKey Global Root GB CA, Organizational Unit: OISTE Foundation Endorsed, Organization: WISeKey, Country: CH
Package Control: Exported certificate: Common Name: Swisscom Root EV CA 2, Organizational Unit: Digital Certificate Services, Organization: Swisscom, Country: ch
Package Control: Exported certificate: Common Name: USERTrust ECC Certification Authority, Organization: The USERTRUST Network, Locality: Jersey City, State/Province: New Jersey, Country: US
Package Control: Exported certificate: Common Name: Sonera Class2 CA, Organization: Sonera, Country: FI
Package Control: Exported certificate: Common Name: thawte Primary Root CA - G2; Organizational Unit: (c) 2007 thawte, Inc. - For authorized use only; Organization: thawte, Inc.; Country: US
Package Control: Exported certificate: Common Name: StartCom Certification Authority, Organizational Unit: Secure Digital Certificate Signing, Organization: StartCom Ltd., Country: IL
Package Control: Exported certificate: Common Name: Apple Root CA - G2, Organizational Unit: Apple Certification Authority, Organization: Apple Inc., Country: US
Package Control: Exported certificate: Organization: TÜRKTRUST Bilgi İletişim ve Bilişim Güvenliği Hizmetleri A.Ş. (c) Aralık 2007, Locality: Ankara, Country: TR, Common Name: TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı
Package Control: Exported certificate: Common Name: DigiCert Global Root CA, Organizational Unit: www.digicert.com, Organization: DigiCert Inc, Country: US
Package Control: Exported certificate: Common Name: GeoTrust Primary Certification Authority - G3, Organizational Unit: (c) 2008 GeoTrust Inc. - For authorized use only, Organization: GeoTrust Inc., Country: US
Package Control: Exported certificate: Common Name: AffirmTrust Commercial, Organization: AffirmTrust, Country: US
Package Control: Exported certificate: Common Name: CA Disig Root R2, Organization: Disig a.s., Locality: Bratislava, Country: SK
Package Control: Exported certificate: Common Name: VeriSign Universal Root Certification Authority; Organizational Unit: (c) 2008 VeriSign, Inc. - For authorized use only, VeriSign Trust Network; Organization: VeriSign, Inc.; Country: US
Package Control: Exported certificate: Common Name: StartCom Certification Authority G2, Organization: StartCom Ltd., Country: IL
Package Control: Exported certificate: Common Name: Apple Root CA - G3, Organizational Unit: Apple Certification Authority, Organization: Apple Inc., Country: US
Package Control: Exported certificate: Common Name: Swisscom Root CA 2, Organizational Unit: Digital Certificate Services, Organization: Swisscom, Country: ch
Package Control: Exported certificate: Common Name: Chambers of Commerce Root, Organizational Unit: http://www.chambersign.org, Organization: AC Camerfirma SA CIF A82743287, Country: EU
Package Control: Exported certificate: Common Name: Entrust.net Certification Authority (2048); Organizational Unit: (c) 1999 Entrust.net Limited, www.entrust.net/CPS_2048 incorp. by ref. (limits liab.); Organization: Entrust.net
Package Control: Exported certificate: Email Address: Info@izenpe.com, Common Name: Izenpe.com, Locality: Avda del Mediterraneo Etorbidea 3 - 01010 Vitoria-Gasteiz, Organization: IZENPE S.A. - CIF A-01337260-RMerc.Vitoria-Gasteiz T1055 F62 S8, Country: ES
Package Control: Exported certificate: Common Name: Federal Common Policy CA, Organizational Unit: FPKI, Organization: U.S. Government, Country: US
Package Control: Exported certificate: Common Name: SwissSign Platinum CA - G2, Organization: SwissSign AG, Country: CH
Package Control: Exported certificate: Common Name: Certigna, Organization: Dhimyotis, Country: FR
Package Control: Exported certificate: Common Name: OpenTrust Root CA G2, Organization: OpenTrust, Country: FR
Package Control: Exported certificate: Common Name: Staat der Nederlanden EV Root CA, Organization: Staat der Nederlanden, Country: NL
Package Control: Exported certificate: Common Name: CFCA EV ROOT, Organization: China Financial Certification Authority, Country: CN
Package Control: Exported certificate: Common Name: Network Solutions Certificate Authority, Organization: Network Solutions L.L.C., Country: US
Package Control: Exported certificate: Common Name: Chambers of Commerce Root - 2008, Organization: AC Camerfirma S.A., Serial Number: A82743287, Locality: Madrid (see current address at www.camerfirma.com/address), Country: EU
Package Control: Exported certificate: Common Name: UTN-USERFirst-Object, Organizational Unit: http://www.usertrust.com, Organization: The USERTRUST Network, Locality: Salt Lake City, State/Province: UT, Country: US
Package Control: Exported certificate: Common Name: NetLock Arany (Class Gold) Főtanúsítvány, Organizational Unit: Tanúsítványkiadók (Certification Services), Organization: NetLock Kft., Locality: Budapest, Country: HU
Package Control: Exported certificate: Common Name: Symantec Class 3 Public Primary Certification Authority - G4, Organizational Unit: Symantec Trust Network, Organization: Symantec Corporation, Country: US
Package Control: Exported certificate: Common Name: Symantec Class 2 Public Primary Certification Authority - G6, Organizational Unit: Symantec Trust Network, Organization: Symantec Corporation, Country: US
Package Control: Exported certificate: Common Name: Amazon Root CA 4, Organization: Amazon, Country: US
Package Control: Exported certificate: Common Name: StartCom Certification Authority, Organizational Unit: Secure Digital Certificate Signing, Organization: StartCom Ltd., Country: IL
Package Control: Exported certificate: Common Name: DigiCert Global Root G3, Organizational Unit: www.digicert.com, Organization: DigiCert Inc, Country: US
Package Control: Exported certificate: Common Name: Visa eCommerce Root, Organizational Unit: Visa International Service Association, Organization: VISA, Country: US
Package Control: Exported certificate: Common Name: Atos TrustedRoot 2011, Organization: Atos, Country: DE
Package Control: Exported certificate: Common Name: USERTrust RSA Certification Authority, Organization: The USERTRUST Network, Locality: Jersey City, State/Province: New Jersey, Country: US
Package Control: Exported certificate: Common Name: GeoTrust Global CA, Organization: GeoTrust Inc., Country: US
Package Control: Exported certificate: Common Name: Cisco Root CA 2048, Organization: Cisco Systems
Package Control: Exported certificate: Common Name: SwissSign Gold Root CA - G3, Organization: SwissSign AG, Country: CH
Package Control: Exported certificate: Common Name: Belgium Root CA2, Country: BE
Package Control: Exported certificate: Common Name: TÜBİTAK UEKAE Kök Sertifika Hizmet Sağlayıcısı - Sürüm 3; Organizational Unit: Kamu Sertifikasyon Merkezi, Ulusal Elektronik ve Kriptoloji Araştırma Enstitüsü - UEKAE; Organization: Türkiye Bilimsel ve Teknolojik Araştırma Kurumu - TÜBİTAK; Locality: Gebze - Kocaeli; Country: TR
Package Control: Exported certificate: Common Name: Certinomis - Autorité Racine, Organizational Unit: 0002 433998903, Organization: Certinomis, Country: FR
Package Control: Exported certificate: Common Name: DigiCert Trusted Root G4, Organizational Unit: www.digicert.com, Organization: DigiCert Inc, Country: US
Package Control: Exported certificate: Organizational Unit: Starfield Class 2 Certification Authority; Organization: Starfield Technologies, Inc.; Country: US
Package Control: Exported certificate: Common Name: VRK Gov. Root CA; Organizational Unit: Varmennepalvelut, Certification Authority Services; Organization: Vaestorekisterikeskus CA; State/Province: Finland; Country: FI
Package Control: Exported certificate: Common Name: DigiCert Global Root G2, Organizational Unit: www.digicert.com, Organization: DigiCert Inc, Country: US
Package Control: Exported certificate: Common Name: GeoTrust Primary Certification Authority - G2, Organizational Unit: (c) 2007 GeoTrust Inc. - For authorized use only, Organization: GeoTrust Inc., Country: US
Package Control: Exported certificate: Common Name: GlobalSign, Organization: GlobalSign, Organizational Unit: GlobalSign ECC Root CA - R4
Package Control: Exported certificate: Common Name: GlobalSign, Organization: GlobalSign, Organizational Unit: GlobalSign ECC Root CA - R5
Package Control: Exported certificate: Common Name: E-Tugra Certification Authority, Organizational Unit: E-Tugra Sertifikasyon Merkezi, Organization: E-Tuğra EBG Bilişim Teknolojileri ve Hizmetleri A.Ş., Locality: Ankara, Country: TR
Package Control: Exported certificate: Common Name: GlobalSign Root CA, Organizational Unit: Root CA, Organization: GlobalSign nv-sa, Country: BE
Package Control: Exported certificate: Common Name: COMODO Certification Authority, Organization: COMODO CA Limited, Locality: Salford, State/Province: Greater Manchester, Country: GB
Package Control: Exported certificate: Common Name: Actalis Authentication Root CA, Organization: Actalis S.p.A./03358520967, Locality: Milan, Country: IT
Package Control: Exported certificate: Common Name: QuoVadis Root CA 1 G3, Organization: QuoVadis Limited, Country: BM
Package Control: Exported certificate: Common Name: UTN-USERFirst-Client Authentication and Email, Organizational Unit: http://www.usertrust.com, Organization: The USERTRUST Network, Locality: Salt Lake City, State/Province: UT, Country: US
Package Control: Exported certificate: Organizational Unit: I.CA - Accredited Provider of Certification Services; Organization: První certifikační autorita, a.s.; Common Name: I.CA - Qualified Certification Authority, 09/2009; Country: CZ
Package Control: Exported certificate: Common Name: Baltimore CyberTrust Root, Organizational Unit: CyberTrust, Organization: Baltimore, Country: IE
Package Control: Exported certificate: Common Name: ComSign Secured CA, Organization: ComSign, Country: IL
Package Control: Exported certificate: Common Name: Starfield Services Root Certificate Authority - G2; Organization: Starfield Technologies, Inc.; Locality: Scottsdale; State/Province: Arizona; Country: US
Package Control: Exported certificate: Common Name: Hellenic Academic and Research Institutions RootCA 2011, Organization: Hellenic Academic and Research Institutions Cert. Authority, Country: GR
Package Control: Exported certificate: Common Name: Symantec Class 1 Public Primary Certification Authority - G6, Organizational Unit: Symantec Trust Network, Organization: Symantec Corporation, Country: US
Package Control: Exported certificate: Organizational Unit: Security Communication RootCA1, Organization: SECOM Trust.net, Country: JP
Package Control: Exported certificate: Common Name: DigiCert High Assurance EV Root CA, Organizational Unit: www.digicert.com, Organization: DigiCert Inc, Country: US
Package Control: Exported certificate: Common Name: Symantec Class 3 Public Primary Certification Authority - G6, Organizational Unit: Symantec Trust Network, Organization: Symantec Corporation, Country: US
Package Control: Exported certificate: Common Name: ANF Global Root CA, Serial Number: G63287510, Email Address: info@anf.es, Organizational Unit: ANF Clase 1 CA, Organization: ANF Autoridad de Certificacion, Locality: Barcelona (see current address at http://www.anf.es/es/address-direccion.html ), State/Province: Barcelona, Country: ES
Package Control: Exported certificate: Organizational Unit: ePKI Root Certification Authority; Organization: Chunghwa Telecom Co., Ltd.; Country: TW
Package Control: Exported certificate: Common Name: TRUST2408 OCES Primary CA, Organization: TRUST2408, Country: DK
Package Control: Exported certificate: Common Name: DST ACES CA X6, Organizational Unit: DST ACES, Organization: Digital Signature Trust, Country: US
Package Control: Exported certificate: Common Name: IdenTrust Public Sector Root CA 1, Organization: IdenTrust, Country: US
Package Control: Exported certificate: Common Name: Secure Global CA, Organization: SecureTrust Corporation, Country: US
Package Control: Exported certificate: Common Name: Izenpe.com, Organization: IZENPE S.A., Country: ES
Package Control: Exported certificate: Email Address: info@e-szigno.hu, Common Name: Microsec e-Szigno Root CA 2009, Organization: Microsec Ltd., Locality: Budapest, Country: HU
Package Control: Exported certificate: Common Name: Buypass Class 3 Root CA, Organization: Buypass AS-983163327, Country: NO
Package Control: Exported certificate: Common Name: SwissSign Silver CA - G2, Organization: SwissSign AG, Country: CH
Package Control: Exported certificate: Common Name: ComSign CA, Organization: ComSign, Country: IL
Package Control: Exported certificate: Common Name: TWCA Root Certification Authority, Organizational Unit: Root CA, Organization: TAIWAN-CA, Country: TW
Package Control: Exported certificate: Common Name: SecureTrust CA, Organization: SecureTrust Corporation, Country: US
Package Control: Exported certificate: Common Name: Hongkong Post Root CA 1, Organization: Hongkong Post, Country: HK
Package Control: Exported certificate: Common Name: VeriSign Class 1 Public Primary Certification Authority - G3; Organizational Unit: (c) 1999 VeriSign, Inc. - For authorized use only, VeriSign Trust Network; Organization: VeriSign, Inc.; Country: US
Package Control: Exported certificate: Common Name: Amazon Root CA 1, Organization: Amazon, Country: US
Package Control: Exported certificate: Common Name: GlobalSign, Organization: GlobalSign, Organizational Unit: GlobalSign Root CA - R2
Package Control: Exported certificate: Common Name: VeriSign Class 3 Public Primary Certification Authority - G3; Organizational Unit: (c) 1999 VeriSign, Inc. - For authorized use only, VeriSign Trust Network; Organization: VeriSign, Inc.; Country: US
Package Control: Exported certificate: Organizational Unit: Security Communication RootCA2; Organization: SECOM Trust Systems CO.,LTD.; Country: JP
Package Control: Exported certificate: Common Name: QuoVadis Root CA 2 G3, Organization: QuoVadis Limited, Country: BM
Package Control: Exported certificate: Common Name: Class 2 Primary CA, Organization: Certplus, Country: FR
Package Control: Exported certificate: Common Name: DigiCert Assured ID Root G3, Organizational Unit: www.digicert.com, Organization: DigiCert Inc, Country: US
Package Control: Exported certificate: Common Name: Swisscom Root CA 1, Organizational Unit: Digital Certificate Services, Organization: Swisscom, Country: ch
Package Control: Exported certificate: Common Name: D-TRUST Root CA 3 2013, Organization: D-Trust GmbH, Country: DE
Package Control: Exported certificate: Common Name: SwissSign Silver Root CA - G3, Organization: SwissSign AG, Country: CH
Package Control: Exported certificate: Common Name: GlobalSign, Organization: GlobalSign, Organizational Unit: GlobalSign Root CA - R3
Package Control: Exported certificate: Common Name: SwissSign Gold CA - G2, Organization: SwissSign AG, Country: CH
Package Control: Exported certificate: Common Name: D-TRUST Root Class 3 CA 2 EV 2009, Organization: D-Trust GmbH, Country: DE
Package Control: Exported certificate: Common Name: KISA RootCA 1, Organizational Unit: Korea Certification Authority Central, Organization: KISA, Country: KR
Package Control: Exported certificate: Common Name: Symantec Class 1 Public Primary Certification Authority - G4, Organizational Unit: Symantec Trust Network, Organization: Symantec Corporation, Country: US
Package Control: Exported certificate: Common Name: DST Root CA X3, Organization: Digital Signature Trust Co.
Package Control: Exported certificate: Common Name: COMODO ECC Certification Authority, Organization: COMODO CA Limited, Locality: Salford, State/Province: Greater Manchester, Country: GB
Package Control: Exported certificate: Common Name: D-TRUST Root Class 3 CA 2 2009, Organization: D-Trust GmbH, Country: DE
Package Control: Exported certificate: Common Name: SwissSign Platinum Root CA - G3, Organization: SwissSign AG, Country: CH
Package Control: Exported certificate: Common Name: Visa Information Delivery Root CA, Organizational Unit: Visa International Service Association, Organization: VISA, Country: US
Package Control: Exported certificate: Common Name: Staat der Nederlanden Root CA - G2, Organization: Staat der Nederlanden, Country: NL
Package Control: Exported certificate: Common Name: QuoVadis Root CA 2, Organization: QuoVadis Limited, Country: BM
Package Control: Exported certificate: Common Name: Echoworx Root CA2, Organizational Unit: Certification Services, Organization: Echoworx Corporation, Locality: Toronto, State/Province: Ontario, Country: CA
Package Control: Exported certificate: Common Name: GeoTrust Primary Certification Authority, Organization: GeoTrust Inc., Country: US
Package Control: Exported certificate: Common Name: QuoVadis Root Certification Authority, Organizational Unit: Root Certification Authority, Organization: QuoVadis Limited, Country: BM
Package Control: Exported certificate: Common Name: Deutsche Telekom Root CA 2, Organizational Unit: T-TeleSec Trust Center, Organization: Deutsche Telekom AG, Country: DE
Package Control: Exported certificate: Common Name: DigiCert Assured ID Root G2, Organizational Unit: www.digicert.com, Organization: DigiCert Inc, Country: US
Package Control: Exported certificate: Common Name: AddTrust External CA Root, Organizational Unit: AddTrust External TTP Network, Organization: AddTrust AB, Country: SE
Package Control: Exported certificate: Common Name: ApplicationCA2 Root, Organizational Unit: GPKI, Organization: Japanese Government, Country: JP
Package Control: Exported certificate: Common Name: IdenTrust Commercial Root CA 1, Organization: IdenTrust, Country: US
Package Control: Exported certificate: Common Name: Apple Root CA, Organizational Unit: Apple Certification Authority, Organization: Apple Inc., Country: US
Package Control: Exported certificate: Common Name: OpenTrust Root CA G3, Organization: OpenTrust, Country: FR
Package Control: Exported certificate: Common Name: Entrust.net Certification Authority (2048); Organizational Unit: (c) 1999 Entrust.net Limited, www.entrust.net/CPS_2048 incorp. by ref. (limits liab.); Organization: Entrust.net
Package Control: Exported certificate: Common Name: XRamp Global Certification Authority, Organization: XRamp Security Services Inc, Organizational Unit: www.xrampsecurity.com, Country: US
Package Control: Exported certificate: Common Name: AffirmTrust Networking, Organization: AffirmTrust, Country: US
Package Control: Exported certificate: Common Name: AAA Certificate Services, Organization: Comodo CA Limited, Locality: Salford, State/Province: Greater Manchester, Country: GB
Package Control: Exported certificate: Common Name: UTN - DATACorp SGC, Organizational Unit: http://www.usertrust.com, Organization: The USERTRUST Network, Locality: Salt Lake City, State/Province: UT, Country: US
Package Control: Exported certificate: Common Name: QuoVadis Root CA 3 G3, Organization: QuoVadis Limited, Country: BM
Package Control: Exported certificate: Common Name: Entrust Root Certification Authority - G2; Organizational Unit: (c) 2009 Entrust, Inc. - for authorized use only, See www.entrust.net/legal-terms; Organization: Entrust, Inc.; Country: US
Package Control: Exported certificate: Common Name: Global Chambersign Root, Organizational Unit: http://www.chambersign.org, Organization: AC Camerfirma SA CIF A82743287, Country: EU
Package Control: Exported certificate: Email Address: pki@sk.ee, Common Name: EE Certification Centre Root CA, Organization: AS Sertifitseerimiskeskus, Country: EE
Package Control: Exported certificate: Common Name: SZAFIR ROOT CA, Organization: Krajowa Izba Rozliczeniowa S.A., Country: PL
Package Control: Exported certificate: Email Address: acraiz@suscerte.gob.ve, Organizational Unit: Superintendencia de Servicios de Certificacion Electronica, Organization: Sistema Nacional de Certificacion Electronica, State/Province: Distrito Capital, Locality: Caracas, Country: VE, Common Name: Autoridad de Certificacion Raiz del Estado Venezolano
Package Control: Exported certificate: Common Name: Symantec Class 2 Public Primary Certification Authority - G4, Organizational Unit: Symantec Trust Network, Organization: Symantec Corporation, Country: US
Package Control: Exported certificate: Common Name: Staat der Nederlanden Root CA - G3, Organization: Staat der Nederlanden, Country: NL
Package Control: Exported certificate: Common Name: T-TeleSec GlobalRoot Class 2, Organizational Unit: T-Systems Trust Center, Organization: T-Systems Enterprise Services GmbH, Country: DE
Package Control: Exported certificate: Common Name: Certinomis - Root CA, Organizational Unit: 0002 433998903, Organization: Certinomis, Country: FR
Package Control: Exported certificate: Common Name: ComSign Global Root CA, Organization: ComSign Ltd., Country: IL
Package Control: Exported certificate: Common Name: thawte Primary Root CA - G3; Organizational Unit: (c) 2008 thawte, Inc. - For authorized use only, Certification Services Division; Organization: thawte, Inc.; Country: US
Package Control: Exported certificate: Common Name: DST Root CA X4, Organization: Digital Signature Trust Co.
Package Control: Exported certificate: Common Name: TWCA Global Root CA, Organizational Unit: Root CA, Organization: TAIWAN-CA, Country: TW
Package Control: Exported certificate: Common Name: Admin-Root-CA; Organizational Unit: Certification Authorities, Services; Organization: admin; Country: ch
Package Control: Exported certificate: Common Name: Go Daddy Root Certificate Authority - G2; Organization: GoDaddy.com, Inc.; Locality: Scottsdale; State/Province: Arizona; Country: US
Package Control: Finished generating new CA bundle at /Users/jonahpaul/Library/Application Support/Sublime Text 3/Packages/User/oscrypto-ca-bundle.crt (275262 bytes)
Package Control: Created blank user CA bundle
Package Control: Regenerated the merged CA bundle from the system and user CA bundles
Package Control: Urllib HTTPS Debug General
  Connecting to packagecontrol.io on port 443
Package Control: Urllib HTTPS Debug General
  Upgrading connection to SSL using CA certs file at /Users/jonahpaul/Library/Application Support/Sublime Text 3/Packages/User/Package Control.merged-ca-bundle
  Using hostname "packagecontrol.io" for TLS SNI extension
Package Control: Error downloading channel. HTTP exception InvalidCertificateException (Host packagecontrol.io returned an invalid certificate ([SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:548))) downloading https://packagecontrol.io/channel_v3.json.

[wbond]

Can you email me a copy of the file /Users/jonahpaul/Library/Application Support/Sublime Text 3/Packages/User/Package Control.merged-ca-bundle? My email is will@wbond.net. I want to see if that file causes an issue on my machine. If not, I may try tweaking the file to see if it works for you in a tweaked format.

[wbond]

There are a handful of certs in your list, not in mine, and I am wondering if one of them has some extension that is throwing OpenSSL off in some way

[wbond]

Please try following the instructions at https://github.com/wbond/package_control/issues/1293#issuecomment-342595937 to install version 3.3.1-beta2, which should fix this issue for you.

[jonahpaul]

Thanks for following up. It's still giving me trouble. Do you want the debug report with the crt file and merged-ca-bundle?

Package Control: Fetching list of available packages and dependencies
  Platform: osx-x64
  Sublime Text Version: 3156
  Package Control Version: 3.3.1-beta2
Package Control: Download Debug
  URL: https://packagecontrol.io/channel_v3.json
  Timeout: 30
  Resolved IP: 50.116.34.243
  Resolved IPv6: 2600:3c02:e000:42::1
Package Control: Urllib Debug Proxy
  http_proxy: 
  https_proxy: 
  proxy_username: 
  proxy_password: 
Package Control: Found previously exported CA bundle at /Users/jonahpaul/Library/Application Support/Sublime Text 3/Packages/User/oscrypto-ca-bundle.crt (275262 bytes)
Package Control: Urllib HTTPS Debug General
  Connecting to packagecontrol.io on port 443
Package Control: Urllib HTTPS Debug General
  Upgrading connection to SSL using CA certs file at /Users/jonahpaul/Library/Application Support/Sublime Text 3/Packages/User/Package Control.merged-ca-bundle
  Using hostname "packagecontrol.io" for TLS SNI extension
Package Control: Error downloading channel. HTTP exception InvalidCertificateException (Host packagecontrol.io returned an invalid certificate ([SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:548))) downloading https://packagecontrol.io/channel_v3.json.
environment variables loaded using: /bin/zsh -l

[wbond]

Sorry, you'll need to delete the oscrypto ca bundle and merged ca bundle from your User package and try again.

[jonahpaul]

Upon deleting the files, relaunching, and running package install:

  Platform: osx-x64
  Sublime Text Version: 3156
  Package Control Version: 3.3.1-beta2
Package Control: Download Debug
  URL: https://packagecontrol.io/channel_v3.json
  Timeout: 30
  Resolved IP: 50.116.34.243
  Resolved IPv6: 2600:3c02:e000:42::1
Package Control: Urllib Debug Proxy
  http_proxy: 
  https_proxy: 
  proxy_username: 
  proxy_password: 
Package Control: Generating new CA bundle from system keychain
Package Control: Exported certificate: Common Name: Certigna, Organization: Dhimyotis, Country: FR
Package Control: Exported certificate: Common Name: Chambers of Commerce Root - 2008, Organization: AC Camerfirma S.A., Serial Number: A82743287, Locality: Madrid (see current address at www.camerfirma.com/address), Country: EU
Package Control: Exported certificate: Common Name: SwissSign Platinum CA - G2, Organization: SwissSign AG, Country: CH
Package Control: Exported certificate: Organizational Unit: Trustis FPS Root CA, Organization: Trustis Limited, Country: GB
Package Control: Exported certificate: Common Name: DigiCert Assured ID Root CA, Organizational Unit: www.digicert.com, Organization: DigiCert Inc, Country: US
Package Control: Exported certificate: Common Name: Certinomis - Autorité Racine, Organizational Unit: 0002 433998903, Organization: Certinomis, Country: FR
Package Control: Exported certificate: Common Name: DigiCert Global Root CA, Organizational Unit: www.digicert.com, Organization: DigiCert Inc, Country: US
Package Control: Exported certificate: Common Name: Izenpe.com, Organization: IZENPE S.A., Country: ES
Package Control: Exported certificate: Common Name: Symantec Class 1 Public Primary Certification Authority - G4, Organizational Unit: Symantec Trust Network, Organization: Symantec Corporation, Country: US
Package Control: Exported certificate: Common Name: DigiCert Assured ID Root G2, Organizational Unit: www.digicert.com, Organization: DigiCert Inc, Country: US
Package Control: Exported certificate: Common Name: CA Disig Root R2, Organization: Disig a.s., Locality: Bratislava, Country: SK
Package Control: Exported certificate: Common Name: Visa eCommerce Root, Organizational Unit: Visa International Service Association, Organization: VISA, Country: US
Package Control: Exported certificate: Common Name: Certum Trusted Network CA 2, Organizational Unit: Certum Certification Authority, Organization: Unizeto Technologies S.A., Country: PL
Package Control: Exported certificate: Common Name: ComSign Global Root CA, Organization: ComSign Ltd., Country: IL
Package Control: Exported certificate: Common Name: AffirmTrust Commercial, Organization: AffirmTrust, Country: US
Package Control: Exported certificate: Common Name: Symantec Class 3 Public Primary Certification Authority - G6, Organizational Unit: Symantec Trust Network, Organization: Symantec Corporation, Country: US
Package Control: Exported certificate: Common Name: Certplus Root CA G2, Organization: Certplus, Country: FR
Package Control: Exported certificate: Common Name: SZAFIR ROOT CA, Organization: Krajowa Izba Rozliczeniowa S.A., Country: PL
Package Control: Exported certificate: Common Name: Hellenic Academic and Research Institutions RootCA 2011, Organization: Hellenic Academic and Research Institutions Cert. Authority, Country: GR
Package Control: Exported certificate: Common Name: Buypass Class 2 Root CA, Organization: Buypass AS-983163327, Country: NO
Package Control: Exported certificate: Email Address: Info@izenpe.com, Common Name: Izenpe.com, Locality: Avda del Mediterraneo Etorbidea 3 - 01010 Vitoria-Gasteiz, Organization: IZENPE S.A. - CIF A-01337260-RMerc.Vitoria-Gasteiz T1055 F62 S8, Country: ES
Package Control: Exported certificate: Common Name: KISA RootCA 1, Organizational Unit: Korea Certification Authority Central, Organization: KISA, Country: KR
Package Control: Exported certificate: Common Name: GlobalSign, Organization: GlobalSign, Organizational Unit: GlobalSign ECC Root CA - R5
Package Control: Exported certificate: Common Name: DigiCert Assured ID Root G3, Organizational Unit: www.digicert.com, Organization: DigiCert Inc, Country: US
Package Control: Exported certificate: Common Name: Entrust Root Certification Authority - EC1; Organizational Unit: (c) 2012 Entrust, Inc. - for authorized use only, See www.entrust.net/legal-terms; Organization: Entrust, Inc.; Country: US
Package Control: Exported certificate: Common Name: Go Daddy Root Certificate Authority - G2; Organization: GoDaddy.com, Inc.; Locality: Scottsdale; State/Province: Arizona; Country: US
Package Control: Exported certificate: Common Name: Apple Root Certificate Authority; Organizational Unit: Apple Computer Certificate Authority; Organization: Apple Computer, Inc.; Country: US
Package Control: Exported certificate: Common Name: Amazon Root CA 2, Organization: Amazon, Country: US
Package Control: Exported certificate: Common Name: VeriSign Universal Root Certification Authority; Organizational Unit: (c) 2008 VeriSign, Inc. - For authorized use only, VeriSign Trust Network; Organization: VeriSign, Inc.; Country: US
Package Control: Exported certificate: Common Name: Echoworx Root CA2, Organizational Unit: Certification Services, Organization: Echoworx Corporation, Locality: Toronto, State/Province: Ontario, Country: CA
Package Control: Exported certificate: Common Name: D-TRUST Root CA 3 2013, Organization: D-Trust GmbH, Country: DE
Package Control: Exported certificate: Common Name: AAA Certificate Services, Organization: Comodo CA Limited, Locality: Salford, State/Province: Greater Manchester, Country: GB
Package Control: Exported certificate: Common Name: SwissSign Gold Root CA - G3, Organization: SwissSign AG, Country: CH
Package Control: Exported certificate: Common Name: USERTrust RSA Certification Authority, Organization: The USERTRUST Network, Locality: Jersey City, State/Province: New Jersey, Country: US
Package Control: Exported certificate: Common Name: VeriSign Class 3 Public Primary Certification Authority - G5; Organizational Unit: (c) 2006 VeriSign, Inc. - For authorized use only, VeriSign Trust Network; Organization: VeriSign, Inc.; Country: US
Package Control: Exported certificate: Common Name: Symantec Class 3 Public Primary Certification Authority - G4, Organizational Unit: Symantec Trust Network, Organization: Symantec Corporation, Country: US
Package Control: Exported certificate: Common Name: Cisco Root CA 2048, Organization: Cisco Systems
Package Control: Exported certificate: Common Name: Starfield Root Certificate Authority - G2; Organization: Starfield Technologies, Inc.; Locality: Scottsdale; State/Province: Arizona; Country: US
Package Control: Exported certificate: Common Name: QuoVadis Root Certification Authority, Organizational Unit: Root Certification Authority, Organization: QuoVadis Limited, Country: BM
Package Control: Exported certificate: Common Name: SwissSign Gold CA - G2, Organization: SwissSign AG, Country: CH
Package Control: Exported certificate: Common Name: Actalis Authentication Root CA, Organization: Actalis S.p.A./03358520967, Locality: Milan, Country: IT
Package Control: Exported certificate: Common Name: DST ACES CA X6, Organizational Unit: DST ACES, Organization: Digital Signature Trust, Country: US
Package Control: Exported certificate: Common Name: QuoVadis Root CA 2, Organization: QuoVadis Limited, Country: BM
Package Control: Exported certificate: Common Name: UTN - DATACorp SGC, Organizational Unit: http://www.usertrust.com, Organization: The USERTRUST Network, Locality: Salt Lake City, State/Province: UT, Country: US
Package Control: Exported certificate: Common Name: VeriSign Class 2 Public Primary Certification Authority - G3; Organizational Unit: (c) 1999 VeriSign, Inc. - For authorized use only, VeriSign Trust Network; Organization: VeriSign, Inc.; Country: US
Package Control: Exported certificate: Common Name: Federal Common Policy CA, Organizational Unit: FPKI, Organization: U.S. Government, Country: US
Package Control: Exported certificate: Common Name: DigiCert Trusted Root G4, Organizational Unit: www.digicert.com, Organization: DigiCert Inc, Country: US
Package Control: Exported certificate: Common Name: TWCA Root Certification Authority, Organizational Unit: Root CA, Organization: TAIWAN-CA, Country: TW
Package Control: Exported certificate: Common Name: Symantec Class 1 Public Primary Certification Authority - G6, Organizational Unit: Symantec Trust Network, Organization: Symantec Corporation, Country: US
Package Control: Exported certificate: Organizational Unit: certSIGN ROOT CA, Organization: certSIGN, Country: RO
Package Control: Exported certificate: Organizational Unit: Go Daddy Class 2 Certification Authority; Organization: The Go Daddy Group, Inc.; Country: US
Package Control: Exported certificate: Common Name: DST Root CA X4, Organization: Digital Signature Trust Co.
Package Control: Exported certificate: Common Name: VeriSign Class 1 Public Primary Certification Authority - G3; Organizational Unit: (c) 1999 VeriSign, Inc. - For authorized use only, VeriSign Trust Network; Organization: VeriSign, Inc.; Country: US
Package Control: Exported certificate: Common Name: Amazon Root CA 1, Organization: Amazon, Country: US
Package Control: Exported certificate: Common Name: D-TRUST Root Class 3 CA 2 2009, Organization: D-Trust GmbH, Country: DE
Package Control: Exported certificate: Common Name: QuoVadis Root CA 3 G3, Organization: QuoVadis Limited, Country: BM
Package Control: Exported certificate: Common Name: DST Root CA X3, Organization: Digital Signature Trust Co.
Package Control: Exported certificate: Common Name: Chambers of Commerce Root, Organizational Unit: http://www.chambersign.org, Organization: AC Camerfirma SA CIF A82743287, Country: EU
Package Control: Exported certificate: Common Name: Belgium Root CA2, Country: BE
Package Control: Exported certificate: Common Name: TeliaSonera Root CA v1, Organization: TeliaSonera
Package Control: Exported certificate: Common Name: OISTE WISeKey Global Root GA CA; Organizational Unit: OISTE Foundation Endorsed, Copyright (c) 2005; Organization: WISeKey; Country: CH
Package Control: Exported certificate: Common Name: StartCom Certification Authority, Organizational Unit: Secure Digital Certificate Signing, Organization: StartCom Ltd., Country: IL
Package Control: Exported certificate: Common Name: UCA Global Root, Organization: UniTrust, Country: CN
Package Control: Exported certificate: Common Name: Symantec Class 2 Public Primary Certification Authority - G4, Organizational Unit: Symantec Trust Network, Organization: Symantec Corporation, Country: US
Package Control: Exported certificate: Common Name: DigiCert Global Root G2, Organizational Unit: www.digicert.com, Organization: DigiCert Inc, Country: US
Package Control: Exported certificate: Common Name: AffirmTrust Networking, Organization: AffirmTrust, Country: US
Package Control: Exported certificate: Common Name: Sonera Class2 CA, Organization: Sonera, Country: FI
Package Control: Exported certificate: Common Name: UCA Root, Organization: UniTrust, Country: CN
Package Control: Exported certificate: Common Name: Staat der Nederlanden Root CA - G2, Organization: Staat der Nederlanden, Country: NL
Package Control: Exported certificate: Organizational Unit: I.CA - Accredited Provider of Certification Services; Organization: První certifikační autorita, a.s.; Common Name: I.CA - Qualified Certification Authority, 09/2009; Country: CZ
Package Control: Exported certificate: Common Name: ApplicationCA2 Root, Organizational Unit: GPKI, Organization: Japanese Government, Country: JP
Package Control: Exported certificate: Common Name: Symantec Class 2 Public Primary Certification Authority - G6, Organizational Unit: Symantec Trust Network, Organization: Symantec Corporation, Country: US
Package Control: Exported certificate: Common Name: Baltimore CyberTrust Root, Organizational Unit: CyberTrust, Organization: Baltimore, Country: IE
Package Control: Exported certificate: Common Name: ISRG Root X1, Organization: Internet Security Research Group, Country: US
Package Control: Exported certificate: Common Name: Global Chambersign Root - 2008, Organization: AC Camerfirma S.A., Serial Number: A82743287, Locality: Madrid (see current address at www.camerfirma.com/address), Country: EU
Package Control: Exported certificate: Common Name: ANF Global Root CA, Serial Number: G63287510, Email Address: info@anf.es, Organizational Unit: ANF Clase 1 CA, Organization: ANF Autoridad de Certificacion, Locality: Barcelona (see current address at http://www.anf.es/es/address-direccion.html ), State/Province: Barcelona, Country: ES
Package Control: Exported certificate: Common Name: T-TeleSec GlobalRoot Class 3, Organizational Unit: T-Systems Trust Center, Organization: T-Systems Enterprise Services GmbH, Country: DE
Package Control: Exported certificate: Common Name: VeriSign Class 3 Public Primary Certification Authority - G3; Organizational Unit: (c) 1999 VeriSign, Inc. - For authorized use only, VeriSign Trust Network; Organization: VeriSign, Inc.; Country: US
Package Control: Exported certificate: Common Name: QuoVadis Root CA 2 G3, Organization: QuoVadis Limited, Country: BM
Package Control: Exported certificate: Common Name: Certinomis - Root CA, Organizational Unit: 0002 433998903, Organization: Certinomis, Country: FR
Package Control: Exported certificate: Common Name: Class 2 Primary CA, Organization: Certplus, Country: FR
Package Control: Exported certificate: Common Name: GlobalSign Root CA, Organizational Unit: Root CA, Organization: GlobalSign nv-sa, Country: BE
Package Control: Exported certificate: Common Name: AffirmTrust Premium, Organization: AffirmTrust, Country: US
Package Control: Exported certificate: Common Name: NetLock Arany (Class Gold) Főtanúsítvány, Organizational Unit: Tanúsítványkiadók (Certification Services), Organization: NetLock Kft., Locality: Budapest, Country: HU
Package Control: Exported certificate: Common Name: Atos TrustedRoot 2011, Organization: Atos, Country: DE
Package Control: Exported certificate: Common Name: XRamp Global Certification Authority, Organization: XRamp Security Services Inc, Organizational Unit: www.xrampsecurity.com, Country: US
Package Control: Exported certificate: Organization: Government Root Certification Authority, Country: TW
Package Control: Exported certificate: Common Name: VRK Gov. Root CA; Organizational Unit: Varmennepalvelut, Certification Authority Services; Organization: Vaestorekisterikeskus CA; State/Province: Finland; Country: FI
Package Control: Exported certificate: Common Name: ComSign CA, Organization: ComSign, Country: IL
Package Control: Exported certificate: Common Name: Staat der Nederlanden EV Root CA, Organization: Staat der Nederlanden, Country: NL
Package Control: Skipped certificate: Common Name: GeoTrust Global CA, Organization: GeoTrust Inc., Country: US - reason implicitly distrusted for TLS
Package Control: Exported certificate: Common Name: QuoVadis Root CA 3, Organization: QuoVadis Limited, Country: BM
Package Control: Exported certificate: Common Name: COMODO RSA Certification Authority, Organization: COMODO CA Limited, Locality: Salford, State/Province: Greater Manchester, Country: GB
Package Control: Exported certificate: Common Name: D-TRUST Root Class 3 CA 2 EV 2009, Organization: D-Trust GmbH, Country: DE
Package Control: Exported certificate: Common Name: thawte Primary Root CA - G2; Organizational Unit: (c) 2007 thawte, Inc. - For authorized use only; Organization: thawte, Inc.; Country: US
Package Control: Exported certificate: Common Name: Apple Root CA - G3, Organizational Unit: Apple Certification Authority, Organization: Apple Inc., Country: US
Package Control: Exported certificate: Common Name: Swisscom Root CA 1, Organizational Unit: Digital Certificate Services, Organization: Swisscom, Country: ch
Package Control: Exported certificate: Common Name: GeoTrust Primary Certification Authority - G3, Organizational Unit: (c) 2008 GeoTrust Inc. - For authorized use only, Organization: GeoTrust Inc., Country: US
Package Control: Exported certificate: Common Name: IdenTrust Commercial Root CA 1, Organization: IdenTrust, Country: US
Package Control: Exported certificate: Organizational Unit: ePKI Root Certification Authority; Organization: Chunghwa Telecom Co., Ltd.; Country: TW
Package Control: Exported certificate: Common Name: GeoTrust Primary Certification Authority, Organization: GeoTrust Inc., Country: US
Package Control: Exported certificate: Common Name: Hongkong Post Root CA 1, Organization: Hongkong Post, Country: HK
Package Control: Exported certificate: Common Name: CA Disig Root R1, Organization: Disig a.s., Locality: Bratislava, Country: SK
Package Control: Skipped certificate: Common Name: AddTrust External CA Root, Organizational Unit: AddTrust External TTP Network, Organization: AddTrust AB, Country: SE - reason implicitly distrusted for TLS
Package Control: Exported certificate: Common Name: USERTrust ECC Certification Authority, Organization: The USERTRUST Network, Locality: Jersey City, State/Province: New Jersey, Country: US
Package Control: Exported certificate: Common Name: GlobalSign, Organization: GlobalSign, Organizational Unit: GlobalSign ECC Root CA - R4
Package Control: Exported certificate: Organizational Unit: Starfield Class 2 Certification Authority; Organization: Starfield Technologies, Inc.; Country: US
Package Control: Exported certificate: Common Name: Amazon Root CA 4, Organization: Amazon, Country: US
Package Control: Exported certificate: Common Name: OpenTrust Root CA G1, Organization: OpenTrust, Country: FR
Package Control: Exported certificate: Common Name: Certum Trusted Network CA, Organizational Unit: Certum Certification Authority, Organization: Unizeto Technologies S.A., Country: PL
Package Control: Exported certificate: Common Name: AffirmTrust Premium ECC, Organization: AffirmTrust, Country: US
Package Control: Exported certificate: Common Name: UTN-USERFirst-Client Authentication and Email, Organizational Unit: http://www.usertrust.com, Organization: The USERTRUST Network, Locality: Salt Lake City, State/Province: UT, Country: US
Package Control: Exported certificate: Common Name: TÜBİTAK UEKAE Kök Sertifika Hizmet Sağlayıcısı - Sürüm 3; Organizational Unit: Kamu Sertifikasyon Merkezi, Ulusal Elektronik ve Kriptoloji Araştırma Enstitüsü - UEKAE; Organization: Türkiye Bilimsel ve Teknolojik Araştırma Kurumu - TÜBİTAK; Locality: Gebze - Kocaeli; Country: TR
Package Control: Exported certificate: Common Name: Deutsche Telekom Root CA 2, Organizational Unit: T-TeleSec Trust Center, Organization: Deutsche Telekom AG, Country: DE
Package Control: Exported certificate: Organization: TÜRKTRUST Bilgi İletişim ve Bilişim Güvenliği Hizmetleri A.Ş. (c) Aralık 2007, Locality: Ankara, Country: TR, Common Name: TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı
Package Control: Exported certificate: Common Name: Starfield Services Root Certificate Authority - G2; Organization: Starfield Technologies, Inc.; Locality: Scottsdale; State/Province: Arizona; Country: US
Package Control: Exported certificate: Common Name: GlobalSign, Organization: GlobalSign, Organizational Unit: GlobalSign Root CA - R3
Package Control: Exported certificate: Common Name: OpenTrust Root CA G2, Organization: OpenTrust, Country: FR
Package Control: Exported certificate: Common Name: Network Solutions Certificate Authority, Organization: Network Solutions L.L.C., Country: US
Package Control: Exported certificate: Common Name: StartCom Certification Authority, Organizational Unit: Secure Digital Certificate Signing, Organization: StartCom Ltd., Country: IL
Package Control: Exported certificate: Common Name: QuoVadis Root CA 1 G3, Organization: QuoVadis Limited, Country: BM
Package Control: Exported certificate: Common Name: Apple Root CA, Organizational Unit: Apple Certification Authority, Organization: Apple Inc., Country: US
Package Control: Exported certificate: Common Name: Visa Information Delivery Root CA, Organizational Unit: Visa International Service Association, Organization: VISA, Country: US
Package Control: Exported certificate: Common Name: thawte Primary Root CA - G3; Organizational Unit: (c) 2008 thawte, Inc. - For authorized use only, Certification Services Division; Organization: thawte, Inc.; Country: US
Package Control: Exported certificate: Common Name: Global Chambersign Root, Organizational Unit: http://www.chambersign.org, Organization: AC Camerfirma SA CIF A82743287, Country: EU
Package Control: Exported certificate: Common Name: StartCom Certification Authority G2, Organization: StartCom Ltd., Country: IL
Package Control: Exported certificate: Common Name: COMODO Certification Authority, Organization: COMODO CA Limited, Locality: Salford, State/Province: Greater Manchester, Country: GB
Package Control: Exported certificate: Common Name: SwissSign Silver CA - G2, Organization: SwissSign AG, Country: CH
Package Control: Exported certificate: Common Name: Certplus Root CA G1, Organization: Certplus, Country: FR
Package Control: Exported certificate: Common Name: IdenTrust Public Sector Root CA 1, Organization: IdenTrust, Country: US
Package Control: Exported certificate: Common Name: GeoTrust Primary Certification Authority - G2, Organizational Unit: (c) 2007 GeoTrust Inc. - For authorized use only, Organization: GeoTrust Inc., Country: US
Package Control: Exported certificate: Common Name: TWCA Global Root CA, Organizational Unit: Root CA, Organization: TAIWAN-CA, Country: TW
Package Control: Exported certificate: Common Name: Certum CA, Organization: Unizeto Sp. z o.o., Country: PL
Package Control: Exported certificate: Common Name: Secure Global CA, Organization: SecureTrust Corporation, Country: US
Package Control: Exported certificate: Common Name: Admin-Root-CA; Organizational Unit: Certification Authorities, Services; Organization: admin; Country: ch
Package Control: Exported certificate: Common Name: UTN-USERFirst-Object, Organizational Unit: http://www.usertrust.com, Organization: The USERTRUST Network, Locality: Salt Lake City, State/Province: UT, Country: US
Package Control: Exported certificate: Common Name: Izenpe.com, Organization: IZENPE S.A., Country: ES
Package Control: Exported certificate: Email Address: info@e-szigno.hu, Common Name: Microsec e-Szigno Root CA 2009, Organization: Microsec Ltd., Locality: Budapest, Country: HU
Package Control: Exported certificate: Common Name: Common Policy, Organizational Unit: FBCA, Organization: U.S. Government, Country: us
Package Control: Exported certificate: Common Name: Buypass Class 3 Root CA, Organization: Buypass AS-983163327, Country: NO
Package Control: Exported certificate: Common Name: Swisscom Root EV CA 2, Organizational Unit: Digital Certificate Services, Organization: Swisscom, Country: ch
Package Control: Exported certificate: Common Name: SwissSign Platinum Root CA - G3, Organization: SwissSign AG, Country: CH
Package Control: Exported certificate: Common Name: Autoridad de Certificacion Firmaprofesional CIF A62634068, Country: ES
Package Control: Exported certificate: Common Name: DigiCert High Assurance EV Root CA, Organizational Unit: www.digicert.com, Organization: DigiCert Inc, Country: US
Package Control: Exported certificate: Common Name: SwissSign Silver Root CA - G3, Organization: SwissSign AG, Country: CH
Package Control: Exported certificate: Common Name: AddTrust Class 1 CA Root, Organizational Unit: AddTrust TTP Network, Organization: AddTrust AB, Country: SE
Package Control: Exported certificate: Common Name: Swisscom Root CA 2, Organizational Unit: Digital Certificate Services, Organization: Swisscom, Country: ch
Package Control: Exported certificate: Common Name: T-TeleSec GlobalRoot Class 2, Organizational Unit: T-Systems Trust Center, Organization: T-Systems Enterprise Services GmbH, Country: DE
Package Control: Exported certificate: Common Name: OISTE WISeKey Global Root GB CA, Organizational Unit: OISTE Foundation Endorsed, Organization: WISeKey, Country: CH
Package Control: Exported certificate: Common Name: UTN-USERFirst-Hardware, Organizational Unit: http://www.usertrust.com, Organization: The USERTRUST Network, Locality: Salt Lake City, State/Province: UT, Country: US
Package Control: Exported certificate: Common Name: ComSign Secured CA, Organization: ComSign, Country: IL
Package Control: Exported certificate: Common Name: TRUST2408 OCES Primary CA, Organization: TRUST2408, Country: DK
Package Control: Exported certificate: Common Name: CFCA EV ROOT, Organization: China Financial Certification Authority, Country: CN
Package Control: Exported certificate: Common Name: DigiCert Global Root G3, Organizational Unit: www.digicert.com, Organization: DigiCert Inc, Country: US
Package Control: Exported certificate: Common Name: thawte Primary Root CA; Organizational Unit: (c) 2006 thawte, Inc. - For authorized use only, Certification Services Division; Organization: thawte, Inc.; Country: US
Package Control: Exported certificate: Organizational Unit: Security Communication RootCA1, Organization: SECOM Trust.net, Country: JP
Package Control: Exported certificate: Common Name: GlobalSign, Organization: GlobalSign, Organizational Unit: GlobalSign Root CA - R2
Package Control: Exported certificate: Organizational Unit: Security Communication EV RootCA1; Organization: SECOM Trust Systems CO.,LTD.; Country: JP
Package Control: Exported certificate: Common Name: Entrust.net Certification Authority (2048); Organizational Unit: (c) 1999 Entrust.net Limited, www.entrust.net/CPS_2048 incorp. by ref. (limits liab.); Organization: Entrust.net
Package Control: Exported certificate: Common Name: Entrust.net Certification Authority (2048); Organizational Unit: (c) 1999 Entrust.net Limited, www.entrust.net/CPS_2048 incorp. by ref. (limits liab.); Organization: Entrust.net
Package Control: Exported certificate: Common Name: Apple Root CA - G2, Organizational Unit: Apple Certification Authority, Organization: Apple Inc., Country: US
Package Control: Exported certificate: Common Name: SecureTrust CA, Organization: SecureTrust Corporation, Country: US
Package Control: Exported certificate: Organizational Unit: Security Communication RootCA2; Organization: SECOM Trust Systems CO.,LTD.; Country: JP
Package Control: Exported certificate: Email Address: acraiz@suscerte.gob.ve, Organizational Unit: Superintendencia de Servicios de Certificacion Electronica, Organization: Sistema Nacional de Certificacion Electronica, State/Province: Distrito Capital, Locality: Caracas, Country: VE, Common Name: Autoridad de Certificacion Raiz del Estado Venezolano
Package Control: Exported certificate: Common Name: COMODO ECC Certification Authority, Organization: COMODO CA Limited, Locality: Salford, State/Province: Greater Manchester, Country: GB
Package Control: Exported certificate: Common Name: Staat der Nederlanden Root CA - G3, Organization: Staat der Nederlanden, Country: NL
Package Control: Exported certificate: Common Name: OpenTrust Root CA G3, Organization: OpenTrust, Country: FR
Package Control: Exported certificate: Common Name: E-Tugra Certification Authority, Organizational Unit: E-Tugra Sertifikasyon Merkezi, Organization: E-Tuğra EBG Bilişim Teknolojileri ve Hizmetleri A.Ş., Locality: Ankara, Country: TR
Package Control: Exported certificate: Common Name: Entrust Root Certification Authority; Organizational Unit: (c) 2006 Entrust, Inc., www.entrust.net/CPS is incorporated by reference; Organization: Entrust, Inc.; Country: US
Package Control: Exported certificate: Common Name: Amazon Root CA 3, Organization: Amazon, Country: US
Package Control: Exported certificate: Email Address: pki@sk.ee, Common Name: EE Certification Centre Root CA, Organization: AS Sertifitseerimiskeskus, Country: EE
Package Control: Exported certificate: Common Name: VeriSign Class 3 Public Primary Certification Authority - G4; Organizational Unit: (c) 2007 VeriSign, Inc. - For authorized use only, VeriSign Trust Network; Organization: VeriSign, Inc.; Country: US
Package Control: Exported certificate: Common Name: Entrust Root Certification Authority - G2; Organizational Unit: (c) 2009 Entrust, Inc. - for authorized use only, See www.entrust.net/legal-terms; Organization: Entrust, Inc.; Country: US
Package Control: Finished generating new CA bundle at /Users/jonahpaul/Library/Application Support/Sublime Text 3/Packages/User/oscrypto-ca-bundle.crt (272395 bytes)
Package Control: Created blank user CA bundle
Package Control: Regenerated the merged CA bundle from the system and user CA bundles
Package Control: Urllib HTTPS Debug General
  Connecting to packagecontrol.io on port 443
Package Control: Urllib HTTPS Debug General
  Upgrading connection to SSL using CA certs file at /Users/jonahpaul/Library/Application Support/Sublime Text 3/Packages/User/Package Control.merged-ca-bundle
  Using hostname "packagecontrol.io" for TLS SNI extension
Package Control: Error downloading channel. HTTP exception InvalidCertificateException (Host packagecontrol.io returned an invalid certificate ([SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:548))) downloading https://packagecontrol.io/channel_v3.json.
Package Control: Fetching list of available packages and dependencies
  Platform: osx-x64
  Sublime Text Version: 3156
  Package Control Version: 3.3.1-beta2
Package Control: Download Debug
  URL: https://packagecontrol.io/channel_v3.json
  Timeout: 30
  Resolved IP: 50.116.34.243
  Resolved IPv6: 2600:3c02:e000:42::1
Package Control: Urllib HTTPS Debug General
  Connecting to packagecontrol.io on port 443
Package Control: Urllib HTTPS Debug General
  Upgrading connection to SSL using CA certs file at /Users/jonahpaul/Library/Application Support/Sublime Text 3/Packages/User/Package Control.merged-ca-bundle
  Using hostname "packagecontrol.io" for TLS SNI extension
Package Control: Error downloading channel. HTTP exception InvalidCertificateException (Host packagecontrol.io returned an invalid certificate ([SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:548))) downloading https://packagecontrol.io/channel_v3.json.
Package Control: No updated packages
Package Control: Fetching list of available packages and dependencies
  Platform: osx-x64
  Sublime Text Version: 3156
  Package Control Version: 3.3.1-beta2
Package Control: Download Debug
  URL: https://packagecontrol.io/channel_v3.json
  Timeout: 30
  Resolved IP: 50.116.34.243
  Resolved IPv6: 2600:3c02:e000:42::1
Package Control: Urllib HTTPS Debug General
  Connecting to packagecontrol.io on port 443
Package Control: Urllib HTTPS Debug General
  Upgrading connection to SSL using CA certs file at /Users/jonahpaul/Library/Application Support/Sublime Text 3/Packages/User/Package Control.merged-ca-bundle
  Using hostname "packagecontrol.io" for TLS SNI extension
Package Control: Error downloading channel. HTTP exception InvalidCertificateException (Host packagecontrol.io returned an invalid certificate ([SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:548))) downloading https://packagecontrol.io/channel_v3.json.
environment variables loaded using: /bin/zsh -l

[wbond]

Mind sending me your merged ca bundle once more?

[wbond]

It looks like your machine is set to distrust the CA cert for the packagecontrol.io cert:

Package Control: Skipped certificate: Common Name: GeoTrust Global CA, Organization: GeoTrust Inc., Country: US - reason implicitly distrusted for TLS

[wbond]

If you don't mind, could you post a screenshot of the GeoTrust Global CA trust settings from Keychain Access? I am curious what exact trust settings on your machine triggered the implicit distrust. That should normally happen if you have the CA set to be trusted for certain purposes, but SSL is not one of them. This is different than explicitly distrusting the SSL purpose. I want to make sure the way I am interpreting the trust settings is working properly against how the Apple UI displays it.

[jonahpaul]

Hmm I'm perplexed. Just now I added the packagecontrol.io cert to my keychain and made it trusted for all users

And yet it's still not trusting the cert for the same reason stated above.

---

environment variables loaded using: /bin/zsh -l
Package Control: Fetching list of available packages and dependencies
  Platform: osx-x64
  Sublime Text Version: 3156
  Package Control Version: 3.3.1-beta2
Package Control: Download Debug
  URL: https://packagecontrol.io/channel_v3.json
  Timeout: 30
  Resolved IP: 50.116.34.243
  Resolved IPv6: 2600:3c02:e000:42::1
Package Control: Urllib Debug Proxy
  http_proxy: 
  https_proxy: 
  proxy_username: 
  proxy_password: 
Package Control: Generating new CA bundle from system keychain
Package Control: Exported certificate: Common Name: SwissSign Gold CA - G2, Organization: SwissSign AG, Country: CH
Package Control: Exported certificate: Organizational Unit: certSIGN ROOT CA, Organization: certSIGN, Country: RO
Package Control: Exported certificate: Common Name: Hongkong Post Root CA 1, Organization: Hongkong Post, Country: HK
Package Control: Exported certificate: Common Name: VeriSign Class 3 Public Primary Certification Authority - G5; Organizational Unit: (c) 2006 VeriSign, Inc. - For authorized use only, VeriSign Trust Network; Organization: VeriSign, Inc.; Country: US
Package Control: Exported certificate: Common Name: Certigna, Organization: Dhimyotis, Country: FR
Package Control: Exported certificate: Common Name: USERTrust RSA Certification Authority, Organization: The USERTRUST Network, Locality: Jersey City, State/Province: New Jersey, Country: US
Package Control: Exported certificate: Common Name: IdenTrust Commercial Root CA 1, Organization: IdenTrust, Country: US
Package Control: Exported certificate: Common Name: Apple Root CA, Organizational Unit: Apple Certification Authority, Organization: Apple Inc., Country: US
Package Control: Exported certificate: Common Name: Symantec Class 1 Public Primary Certification Authority - G4, Organizational Unit: Symantec Trust Network, Organization: Symantec Corporation, Country: US
Package Control: Exported certificate: Common Name: Staat der Nederlanden Root CA - G2, Organization: Staat der Nederlanden, Country: NL
Package Control: Exported certificate: Common Name: D-TRUST Root CA 3 2013, Organization: D-Trust GmbH, Country: DE
Package Control: Exported certificate: Common Name: DigiCert Assured ID Root CA, Organizational Unit: www.digicert.com, Organization: DigiCert Inc, Country: US
Package Control: Exported certificate: Common Name: Cisco Root CA 2048, Organization: Cisco Systems
Package Control: Exported certificate: Common Name: GlobalSign, Organization: GlobalSign, Organizational Unit: GlobalSign ECC Root CA - R4
Package Control: Exported certificate: Common Name: Apple Root CA - G2, Organizational Unit: Apple Certification Authority, Organization: Apple Inc., Country: US
Package Control: Exported certificate: Common Name: Symantec Class 3 Public Primary Certification Authority - G6, Organizational Unit: Symantec Trust Network, Organization: Symantec Corporation, Country: US
Package Control: Exported certificate: Common Name: Amazon Root CA 2, Organization: Amazon, Country: US
Package Control: Exported certificate: Common Name: CA Disig Root R1, Organization: Disig a.s., Locality: Bratislava, Country: SK
Package Control: Exported certificate: Common Name: COMODO ECC Certification Authority, Organization: COMODO CA Limited, Locality: Salford, State/Province: Greater Manchester, Country: GB
Package Control: Exported certificate: Common Name: Autoridad de Certificacion Firmaprofesional CIF A62634068, Country: ES
Package Control: Exported certificate: Common Name: Certinomis - Autorité Racine, Organizational Unit: 0002 433998903, Organization: Certinomis, Country: FR
Package Control: Exported certificate: Common Name: Actalis Authentication Root CA, Organization: Actalis S.p.A./03358520967, Locality: Milan, Country: IT
Package Control: Exported certificate: Common Name: AffirmTrust Commercial, Organization: AffirmTrust, Country: US
Package Control: Exported certificate: Common Name: Swisscom Root CA 2, Organizational Unit: Digital Certificate Services, Organization: Swisscom, Country: ch
Package Control: Exported certificate: Common Name: Izenpe.com, Organization: IZENPE S.A., Country: ES
Package Control: Exported certificate: Common Name: Izenpe.com, Organization: IZENPE S.A., Country: ES
Package Control: Exported certificate: Common Name: GlobalSign, Organization: GlobalSign, Organizational Unit: GlobalSign ECC Root CA - R5
Package Control: Exported certificate: Common Name: UTN-USERFirst-Object, Organizational Unit: http://www.usertrust.com, Organization: The USERTRUST Network, Locality: Salt Lake City, State/Province: UT, Country: US
Package Control: Exported certificate: Common Name: ISRG Root X1, Organization: Internet Security Research Group, Country: US
Package Control: Exported certificate: Common Name: Entrust Root Certification Authority - G2; Organizational Unit: (c) 2009 Entrust, Inc. - for authorized use only, See www.entrust.net/legal-terms; Organization: Entrust, Inc.; Country: US
Package Control: Exported certificate: Organizational Unit: Go Daddy Class 2 Certification Authority; Organization: The Go Daddy Group, Inc.; Country: US
Package Control: Exported certificate: Common Name: E-Tugra Certification Authority, Organizational Unit: E-Tugra Sertifikasyon Merkezi, Organization: E-Tuğra EBG Bilişim Teknolojileri ve Hizmetleri A.Ş., Locality: Ankara, Country: TR
Package Control: Exported certificate: Common Name: UCA Global Root, Organization: UniTrust, Country: CN
Package Control: Exported certificate: Common Name: GeoTrust Primary Certification Authority, Organization: GeoTrust Inc., Country: US
Package Control: Exported certificate: Common Name: Common Policy, Organizational Unit: FBCA, Organization: U.S. Government, Country: us
Package Control: Exported certificate: Common Name: Chambers of Commerce Root, Organizational Unit: http://www.chambersign.org, Organization: AC Camerfirma SA CIF A82743287, Country: EU
Package Control: Exported certificate: Common Name: ApplicationCA2 Root, Organizational Unit: GPKI, Organization: Japanese Government, Country: JP
Package Control: Exported certificate: Common Name: UTN-USERFirst-Client Authentication and Email, Organizational Unit: http://www.usertrust.com, Organization: The USERTRUST Network, Locality: Salt Lake City, State/Province: UT, Country: US
Package Control: Skipped certificate: Common Name: GeoTrust Global CA, Organization: GeoTrust Inc., Country: US - reason implicitly distrusted for TLS
Package Control: Exported certificate: Common Name: QuoVadis Root CA 2, Organization: QuoVadis Limited, Country: BM
Package Control: Exported certificate: Common Name: SecureTrust CA, Organization: SecureTrust Corporation, Country: US
Package Control: Exported certificate: Common Name: Amazon Root CA 3, Organization: Amazon, Country: US
Package Control: Exported certificate: Common Name: SZAFIR ROOT CA, Organization: Krajowa Izba Rozliczeniowa S.A., Country: PL
Package Control: Exported certificate: Common Name: Go Daddy Root Certificate Authority - G2; Organization: GoDaddy.com, Inc.; Locality: Scottsdale; State/Province: Arizona; Country: US
Package Control: Exported certificate: Common Name: Certinomis - Root CA, Organizational Unit: 0002 433998903, Organization: Certinomis, Country: FR
Package Control: Exported certificate: Common Name: Global Chambersign Root - 2008, Organization: AC Camerfirma S.A., Serial Number: A82743287, Locality: Madrid (see current address at www.camerfirma.com/address), Country: EU
Package Control: Exported certificate: Common Name: Echoworx Root CA2, Organizational Unit: Certification Services, Organization: Echoworx Corporation, Locality: Toronto, State/Province: Ontario, Country: CA
Package Control: Exported certificate: Common Name: DigiCert Trusted Root G4, Organizational Unit: www.digicert.com, Organization: DigiCert Inc, Country: US
Package Control: Exported certificate: Common Name: KISA RootCA 1, Organizational Unit: Korea Certification Authority Central, Organization: KISA, Country: KR
Package Control: Exported certificate: Common Name: Certum CA, Organization: Unizeto Sp. z o.o., Country: PL
Package Control: Exported certificate: Common Name: QuoVadis Root CA 2 G3, Organization: QuoVadis Limited, Country: BM
Package Control: Exported certificate: Common Name: CFCA EV ROOT, Organization: China Financial Certification Authority, Country: CN
Package Control: Exported certificate: Common Name: OISTE WISeKey Global Root GA CA; Organizational Unit: OISTE Foundation Endorsed, Copyright (c) 2005; Organization: WISeKey; Country: CH
Package Control: Exported certificate: Common Name: D-TRUST Root Class 3 CA 2 EV 2009, Organization: D-Trust GmbH, Country: DE
Package Control: Exported certificate: Organizational Unit: Security Communication RootCA2; Organization: SECOM Trust Systems CO.,LTD.; Country: JP
Package Control: Exported certificate: Common Name: Apple Root CA - G3, Organizational Unit: Apple Certification Authority, Organization: Apple Inc., Country: US
Package Control: Exported certificate: Common Name: VRK Gov. Root CA; Organizational Unit: Varmennepalvelut, Certification Authority Services; Organization: Vaestorekisterikeskus CA; State/Province: Finland; Country: FI
Package Control: Exported certificate: Common Name: Visa Information Delivery Root CA, Organizational Unit: Visa International Service Association, Organization: VISA, Country: US
Package Control: Exported certificate: Common Name: Certum Trusted Network CA, Organizational Unit: Certum Certification Authority, Organization: Unizeto Technologies S.A., Country: PL
Package Control: Exported certificate: Common Name: T-TeleSec GlobalRoot Class 3, Organizational Unit: T-Systems Trust Center, Organization: T-Systems Enterprise Services GmbH, Country: DE
Package Control: Exported certificate: Common Name: Starfield Root Certificate Authority - G2; Organization: Starfield Technologies, Inc.; Locality: Scottsdale; State/Province: Arizona; Country: US
Package Control: Exported certificate: Common Name: Network Solutions Certificate Authority, Organization: Network Solutions L.L.C., Country: US
Package Control: Exported certificate: Common Name: DST Root CA X4, Organization: Digital Signature Trust Co.
Package Control: Exported certificate: Common Name: Certum Trusted Network CA 2, Organizational Unit: Certum Certification Authority, Organization: Unizeto Technologies S.A., Country: PL
Package Control: Exported certificate: Common Name: Starfield Services Root Certificate Authority - G2; Organization: Starfield Technologies, Inc.; Locality: Scottsdale; State/Province: Arizona; Country: US
Package Control: Exported certificate: Common Name: AffirmTrust Premium, Organization: AffirmTrust, Country: US
Package Control: Exported certificate: Organization: Government Root Certification Authority, Country: TW
Package Control: Exported certificate: Organizational Unit: Security Communication EV RootCA1; Organization: SECOM Trust Systems CO.,LTD.; Country: JP
Package Control: Exported certificate: Common Name: IdenTrust Public Sector Root CA 1, Organization: IdenTrust, Country: US
Package Control: Exported certificate: Common Name: GeoTrust Primary Certification Authority - G2, Organizational Unit: (c) 2007 GeoTrust Inc. - For authorized use only, Organization: GeoTrust Inc., Country: US
Package Control: Exported certificate: Common Name: OpenTrust Root CA G2, Organization: OpenTrust, Country: FR
Package Control: Exported certificate: Common Name: DigiCert Assured ID Root G2, Organizational Unit: www.digicert.com, Organization: DigiCert Inc, Country: US
Package Control: Exported certificate: Common Name: TWCA Root Certification Authority, Organizational Unit: Root CA, Organization: TAIWAN-CA, Country: TW
Package Control: Exported certificate: Common Name: Secure Global CA, Organization: SecureTrust Corporation, Country: US
Package Control: Exported certificate: Common Name: Atos TrustedRoot 2011, Organization: Atos, Country: DE
Package Control: Exported certificate: Common Name: VeriSign Class 3 Public Primary Certification Authority - G4; Organizational Unit: (c) 2007 VeriSign, Inc. - For authorized use only, VeriSign Trust Network; Organization: VeriSign, Inc.; Country: US
Package Control: Exported certificate: Common Name: XRamp Global Certification Authority, Organization: XRamp Security Services Inc, Organizational Unit: www.xrampsecurity.com, Country: US
Package Control: Exported certificate: Common Name: CA Disig Root R2, Organization: Disig a.s., Locality: Bratislava, Country: SK
Package Control: Exported certificate: Common Name: Belgium Root CA2, Country: BE
Package Control: Exported certificate: Common Name: OpenTrust Root CA G1, Organization: OpenTrust, Country: FR
Package Control: Exported certificate: Common Name: Sonera Class2 CA, Organization: Sonera, Country: FI
Package Control: Exported certificate: Email Address: acraiz@suscerte.gob.ve, Organizational Unit: Superintendencia de Servicios de Certificacion Electronica, Organization: Sistema Nacional de Certificacion Electronica, State/Province: Distrito Capital, Locality: Caracas, Country: VE, Common Name: Autoridad de Certificacion Raiz del Estado Venezolano
Package Control: Exported certificate: Email Address: pki@sk.ee, Common Name: EE Certification Centre Root CA, Organization: AS Sertifitseerimiskeskus, Country: EE
Package Control: Exported certificate: Common Name: Certplus Root CA G2, Organization: Certplus, Country: FR
Package Control: Exported certificate: Common Name: Buypass Class 3 Root CA, Organization: Buypass AS-983163327, Country: NO
Package Control: Exported certificate: Common Name: TRUST2408 OCES Primary CA, Organization: TRUST2408, Country: DK
Package Control: Exported certificate: Common Name: QuoVadis Root CA 3 G3, Organization: QuoVadis Limited, Country: BM
Package Control: Exported certificate: Common Name: Admin-Root-CA; Organizational Unit: Certification Authorities, Services; Organization: admin; Country: ch
Package Control: Exported certificate: Email Address: info@e-szigno.hu, Common Name: Microsec e-Szigno Root CA 2009, Organization: Microsec Ltd., Locality: Budapest, Country: HU
Package Control: Exported certificate: Common Name: Visa eCommerce Root, Organizational Unit: Visa International Service Association, Organization: VISA, Country: US
Package Control: Exported certificate: Common Name: DigiCert Global Root G2, Organizational Unit: www.digicert.com, Organization: DigiCert Inc, Country: US
Package Control: Exported certificate: Common Name: StartCom Certification Authority G2, Organization: StartCom Ltd., Country: IL
Package Control: Exported certificate: Common Name: DST Root CA X3, Organization: Digital Signature Trust Co.
Package Control: Exported certificate: Common Name: UCA Root, Organization: UniTrust, Country: CN
Package Control: Exported certificate: Common Name: COMODO RSA Certification Authority, Organization: COMODO CA Limited, Locality: Salford, State/Province: Greater Manchester, Country: GB
Package Control: Exported certificate: Common Name: AffirmTrust Networking, Organization: AffirmTrust, Country: US
Package Control: Exported certificate: Common Name: Symantec Class 3 Public Primary Certification Authority - G4, Organizational Unit: Symantec Trust Network, Organization: Symantec Corporation, Country: US
Package Control: Exported certificate: Common Name: Buypass Class 2 Root CA, Organization: Buypass AS-983163327, Country: NO
Package Control: Exported certificate: Common Name: ANF Global Root CA, Serial Number: G63287510, Email Address: info@anf.es, Organizational Unit: ANF Clase 1 CA, Organization: ANF Autoridad de Certificacion, Locality: Barcelona (see current address at http://www.anf.es/es/address-direccion.html ), State/Province: Barcelona, Country: ES
Package Control: Exported certificate: Common Name: thawte Primary Root CA; Organizational Unit: (c) 2006 thawte, Inc. - For authorized use only, Certification Services Division; Organization: thawte, Inc.; Country: US
Package Control: Exported certificate: Common Name: AAA Certificate Services, Organization: Comodo CA Limited, Locality: Salford, State/Province: Greater Manchester, Country: GB
Package Control: Exported certificate: Email Address: Info@izenpe.com, Common Name: Izenpe.com, Locality: Avda del Mediterraneo Etorbidea 3 - 01010 Vitoria-Gasteiz, Organization: IZENPE S.A. - CIF A-01337260-RMerc.Vitoria-Gasteiz T1055 F62 S8, Country: ES
Package Control: Exported certificate: Organizational Unit: I.CA - Accredited Provider of Certification Services; Organization: První certifikační autorita, a.s.; Common Name: I.CA - Qualified Certification Authority, 09/2009; Country: CZ
Package Control: Exported certificate: Common Name: GlobalSign, Organization: GlobalSign, Organizational Unit: GlobalSign Root CA - R2
Package Control: Exported certificate: Common Name: Amazon Root CA 1, Organization: Amazon, Country: US
Package Control: Exported certificate: Common Name: TÜBİTAK UEKAE Kök Sertifika Hizmet Sağlayıcısı - Sürüm 3; Organizational Unit: Kamu Sertifikasyon Merkezi, Ulusal Elektronik ve Kriptoloji Araştırma Enstitüsü - UEKAE; Organization: Türkiye Bilimsel ve Teknolojik Araştırma Kurumu - TÜBİTAK; Locality: Gebze - Kocaeli; Country: TR
Package Control: Exported certificate: Common Name: QuoVadis Root CA 1 G3, Organization: QuoVadis Limited, Country: BM
Package Control: Exported certificate: Common Name: OISTE WISeKey Global Root GB CA, Organizational Unit: OISTE Foundation Endorsed, Organization: WISeKey, Country: CH
Package Control: Exported certificate: Organizational Unit: Security Communication RootCA1, Organization: SECOM Trust.net, Country: JP
Package Control: Exported certificate: Common Name: StartCom Certification Authority, Organizational Unit: Secure Digital Certificate Signing, Organization: StartCom Ltd., Country: IL
Package Control: Exported certificate: Organizational Unit: ePKI Root Certification Authority; Organization: Chunghwa Telecom Co., Ltd.; Country: TW
Package Control: Exported certificate: Common Name: thawte Primary Root CA - G2; Organizational Unit: (c) 2007 thawte, Inc. - For authorized use only; Organization: thawte, Inc.; Country: US
Package Control: Exported certificate: Common Name: StartCom Certification Authority, Organizational Unit: Secure Digital Certificate Signing, Organization: StartCom Ltd., Country: IL
Package Control: Exported certificate: Common Name: VeriSign Class 3 Public Primary Certification Authority - G3; Organizational Unit: (c) 1999 VeriSign, Inc. - For authorized use only, VeriSign Trust Network; Organization: VeriSign, Inc.; Country: US
Package Control: Exported certificate: Common Name: Entrust Root Certification Authority; Organizational Unit: (c) 2006 Entrust, Inc., www.entrust.net/CPS is incorporated by reference; Organization: Entrust, Inc.; Country: US
Package Control: Exported certificate: Common Name: VeriSign Class 2 Public Primary Certification Authority - G3; Organizational Unit: (c) 1999 VeriSign, Inc. - For authorized use only, VeriSign Trust Network; Organization: VeriSign, Inc.; Country: US
Package Control: Exported certificate: Common Name: Entrust Root Certification Authority - EC1; Organizational Unit: (c) 2012 Entrust, Inc. - for authorized use only, See www.entrust.net/legal-terms; Organization: Entrust, Inc.; Country: US
Package Control: Exported certificate: Common Name: AddTrust Class 1 CA Root, Organizational Unit: AddTrust TTP Network, Organization: AddTrust AB, Country: SE
Package Control: Exported certificate: Common Name: Swisscom Root EV CA 2, Organizational Unit: Digital Certificate Services, Organization: Swisscom, Country: ch
Package Control: Exported certificate: Common Name: Deutsche Telekom Root CA 2, Organizational Unit: T-TeleSec Trust Center, Organization: Deutsche Telekom AG, Country: DE
Package Control: Exported certificate: Common Name: Certplus Root CA G1, Organization: Certplus, Country: FR
Package Control: Exported certificate: Common Name: Federal Common Policy CA, Organizational Unit: FPKI, Organization: U.S. Government, Country: US
Package Control: Exported certificate: Common Name: TWCA Global Root CA, Organizational Unit: Root CA, Organization: TAIWAN-CA, Country: TW
Package Control: Exported certificate: Common Name: SwissSign Silver Root CA - G3, Organization: SwissSign AG, Country: CH
Package Control: Exported certificate: Common Name: Staat der Nederlanden EV Root CA, Organization: Staat der Nederlanden, Country: NL
Package Control: Exported certificate: Common Name: USERTrust ECC Certification Authority, Organization: The USERTRUST Network, Locality: Jersey City, State/Province: New Jersey, Country: US
Package Control: Exported certificate: Common Name: Apple Root Certificate Authority; Organizational Unit: Apple Computer Certificate Authority; Organization: Apple Computer, Inc.; Country: US
Package Control: Exported certificate: Common Name: Class 2 Primary CA, Organization: Certplus, Country: FR
Package Control: Exported certificate: Common Name: AffirmTrust Premium ECC, Organization: AffirmTrust, Country: US
Package Control: Exported certificate: Organizational Unit: Starfield Class 2 Certification Authority; Organization: Starfield Technologies, Inc.; Country: US
Package Control: Exported certificate: Common Name: Global Chambersign Root, Organizational Unit: http://www.chambersign.org, Organization: AC Camerfirma SA CIF A82743287, Country: EU
Package Control: Exported certificate: Common Name: DigiCert Global Root G3, Organizational Unit: www.digicert.com, Organization: DigiCert Inc, Country: US
Package Control: Exported certificate: Common Name: Symantec Class 2 Public Primary Certification Authority - G6, Organizational Unit: Symantec Trust Network, Organization: Symantec Corporation, Country: US
Package Control: Exported certificate: Common Name: GlobalSign, Organization: GlobalSign, Organizational Unit: GlobalSign Root CA - R3
Package Control: Exported certificate: Common Name: thawte Primary Root CA - G3; Organizational Unit: (c) 2008 thawte, Inc. - For authorized use only, Certification Services Division; Organization: thawte, Inc.; Country: US
Package Control: Exported certificate: Common Name: D-TRUST Root Class 3 CA 2 2009, Organization: D-Trust GmbH, Country: DE
Package Control: Exported certificate: Common Name: DST ACES CA X6, Organizational Unit: DST ACES, Organization: Digital Signature Trust, Country: US
Package Control: Exported certificate: Common Name: QuoVadis Root CA 3, Organization: QuoVadis Limited, Country: BM
Package Control: Exported certificate: Common Name: Chambers of Commerce Root - 2008, Organization: AC Camerfirma S.A., Serial Number: A82743287, Locality: Madrid (see current address at www.camerfirma.com/address), Country: EU
Package Control: Exported certificate: Common Name: VeriSign Universal Root Certification Authority; Organizational Unit: (c) 2008 VeriSign, Inc. - For authorized use only, VeriSign Trust Network; Organization: VeriSign, Inc.; Country: US
Package Control: Exported certificate: Organizational Unit: Trustis FPS Root CA, Organization: Trustis Limited, Country: GB
Package Control: Exported certificate: Common Name: Amazon Root CA 4, Organization: Amazon, Country: US
Package Control: Exported certificate: Common Name: DigiCert Assured ID Root G3, Organizational Unit: www.digicert.com, Organization: DigiCert Inc, Country: US
Package Control: Exported certificate: Common Name: SwissSign Silver CA - G2, Organization: SwissSign AG, Country: CH
Package Control: Exported certificate: Common Name: COMODO Certification Authority, Organization: COMODO CA Limited, Locality: Salford, State/Province: Greater Manchester, Country: GB
Package Control: Exported certificate: Common Name: SwissSign Platinum CA - G2, Organization: SwissSign AG, Country: CH
Package Control: Exported certificate: Common Name: GeoTrust Primary Certification Authority - G3, Organizational Unit: (c) 2008 GeoTrust Inc. - For authorized use only, Organization: GeoTrust Inc., Country: US
Package Control: Exported certificate: Common Name: OpenTrust Root CA G3, Organization: OpenTrust, Country: FR
Package Control: Exported certificate: Common Name: DigiCert Global Root CA, Organizational Unit: www.digicert.com, Organization: DigiCert Inc, Country: US
Package Control: Exported certificate: Common Name: Hellenic Academic and Research Institutions RootCA 2011, Organization: Hellenic Academic and Research Institutions Cert. Authority, Country: GR
Package Control: Exported certificate: Common Name: SwissSign Platinum Root CA - G3, Organization: SwissSign AG, Country: CH
Package Control: Exported certificate: Common Name: DigiCert High Assurance EV Root CA, Organizational Unit: www.digicert.com, Organization: DigiCert Inc, Country: US
Package Control: Exported certificate: Common Name: UTN - DATACorp SGC, Organizational Unit: http://www.usertrust.com, Organization: The USERTRUST Network, Locality: Salt Lake City, State/Province: UT, Country: US
Package Control: Exported certificate: Common Name: UTN-USERFirst-Hardware, Organizational Unit: http://www.usertrust.com, Organization: The USERTRUST Network, Locality: Salt Lake City, State/Province: UT, Country: US
Package Control: Exported certificate: Common Name: ComSign CA, Organization: ComSign, Country: IL
Package Control: Exported certificate: Common Name: ComSign Secured CA, Organization: ComSign, Country: IL
Package Control: Exported certificate: Common Name: ComSign Global Root CA, Organization: ComSign Ltd., Country: IL
Package Control: Exported certificate: Common Name: Symantec Class 2 Public Primary Certification Authority - G4, Organizational Unit: Symantec Trust Network, Organization: Symantec Corporation, Country: US
Package Control: Exported certificate: Common Name: QuoVadis Root Certification Authority, Organizational Unit: Root Certification Authority, Organization: QuoVadis Limited, Country: BM
Package Control: Exported certificate: Common Name: TeliaSonera Root CA v1, Organization: TeliaSonera
Package Control: Exported certificate: Common Name: Swisscom Root CA 1, Organizational Unit: Digital Certificate Services, Organization: Swisscom, Country: ch
Package Control: Exported certificate: Common Name: Baltimore CyberTrust Root, Organizational Unit: CyberTrust, Organization: Baltimore, Country: IE
Package Control: Exported certificate: Common Name: NetLock Arany (Class Gold) Főtanúsítvány, Organizational Unit: Tanúsítványkiadók (Certification Services), Organization: NetLock Kft., Locality: Budapest, Country: HU
Package Control: Skipped certificate: Common Name: AddTrust External CA Root, Organizational Unit: AddTrust External TTP Network, Organization: AddTrust AB, Country: SE - reason implicitly distrusted for TLS
Package Control: Exported certificate: Common Name: T-TeleSec GlobalRoot Class 2, Organizational Unit: T-Systems Trust Center, Organization: T-Systems Enterprise Services GmbH, Country: DE
Package Control: Exported certificate: Common Name: Staat der Nederlanden Root CA - G3, Organization: Staat der Nederlanden, Country: NL
Package Control: Exported certificate: Common Name: Symantec Class 1 Public Primary Certification Authority - G6, Organizational Unit: Symantec Trust Network, Organization: Symantec Corporation, Country: US
Package Control: Exported certificate: Organization: TÜRKTRUST Bilgi İletişim ve Bilişim Güvenliği Hizmetleri A.Ş. (c) Aralık 2007, Locality: Ankara, Country: TR, Common Name: TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı
Package Control: Exported certificate: Common Name: VeriSign Class 1 Public Primary Certification Authority - G3; Organizational Unit: (c) 1999 VeriSign, Inc. - For authorized use only, VeriSign Trust Network; Organization: VeriSign, Inc.; Country: US
Package Control: Exported certificate: Common Name: SwissSign Gold Root CA - G3, Organization: SwissSign AG, Country: CH
Package Control: Exported certificate: Common Name: GlobalSign Root CA, Organizational Unit: Root CA, Organization: GlobalSign nv-sa, Country: BE
Package Control: Exported certificate: Common Name: Entrust.net Certification Authority (2048); Organizational Unit: (c) 1999 Entrust.net Limited, www.entrust.net/CPS_2048 incorp. by ref. (limits liab.); Organization: Entrust.net
Package Control: Exported certificate: Common Name: Entrust.net Certification Authority (2048); Organizational Unit: (c) 1999 Entrust.net Limited, www.entrust.net/CPS_2048 incorp. by ref. (limits liab.); Organization: Entrust.net
Package Control: Finished generating new CA bundle at /Users/jonahpaul/Library/Application Support/Sublime Text 3/Packages/User/oscrypto-ca-bundle.crt (272395 bytes)
Package Control: Created blank user CA bundle
Package Control: Regenerated the merged CA bundle from the system and user CA bundles
Package Control: Urllib HTTPS Debug General
  Connecting to packagecontrol.io on port 443
Package Control: Urllib HTTPS Debug General
  Upgrading connection to SSL using CA certs file at /Users/jonahpaul/Library/Application Support/Sublime Text 3/Packages/User/Package Control.merged-ca-bundle
  Using hostname "packagecontrol.io" for TLS SNI extension
Package Control: Error downloading channel. HTTP exception InvalidCertificateException (Host packagecontrol.io returned an invalid certificate ([SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:548))) downloading https://packagecontrol.io/channel_v3.json.

[wbond]

What keychain did you add it to? We export the System and System Roots keychains. I don't see it listed in your debug log, either as exported or excluded.

Also, I am not sure that would work anyway, since the cert is not constructed by the CA to be a valid CA, so OpenSSL may reject it for the purpose of being a CA.

[wbond]

If you don't want to change your system CA settings, you could place this in the file /Users/jonahpaul/Library/Application Support/Sublime Text 3/Packages/User/Package Control.user-ca-bundle:

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

This will add the GeoTrust Global CA root to the CA bundle used by Package Control only. At some point in the next few months I either need to regenerate the cert for the site, or get a new one since apparently Symantec didn't follow the rules, and Chrome is blacklisting all of their certs.

[jonahpaul]

Well that did the trick. I'm closing the issue. Thanks for being so attentive!

[dwasss]

@wbond I tried all of the above fixes and still nothing has worked. I changed my System CA settings, added the above cert to my user CA bundle, tried using Package Control prerelease version, tried changing the downloader preference to any one of the three, etc. but nothing has worked.

Here is my debug output when simply trying to Install Packages:

Package Control: Fetching list of available packages and dependencies
  Platform: osx-x64
  Sublime Text Version: 3176
  Package Control Version: 3.3.1-beta4
Package Control: Download Debug
  URL: https://packagecontrol.io/channel_v3.json
  Timeout: 30
  Resolved IP: 1.2.3.4
  Resolved IPv6: foo
Package Control: Found previously exported CA bundle at /Users/zzz/Library/Application Support/Sublime Text 3/Packages/User/oscrypto-ca-bundle.crt (273379 bytes)
Package Control: Curl Debug Proxy
  http_proxy: 
  https_proxy: 
  proxy_username: 
  proxy_password: 
Package Control: Trying to execute command /usr/local/opt/curl/bin/curl --connect-timeout 30 -sSL --tlsv1 --dump-header /var/folders/z4/2fgbggcx6zgc6f01k1bcmd7r0012lj/T/tmphwixre --user-agent 'Package Control v3.3.1-beta4' --header 'Accept-Encoding: bzip2,gzip,deflate' --cacert '/Users/zzz/Library/Application Support/Sublime Text 3/Packages/User/Package Control.merged-ca-bundle' -v https://packagecontrol.io/channel_v3.json
Package Control: Curl HTTP Debug General
    Trying 2600:3c02:e000:42::1...
  TCP_NODELAY set
  Connected to packagecontrol.io (2600:3c02:e000:42::1) port 443 (#0)
  ALPN, offering http/1.1
  Cipher selection: ALL:!EXPORT:!EXPORT40:!EXPORT56:!aNULL:!LOW:!RC4:@STRENGTH
  successfully set certificate verify locations:
    CAfile: /Users/zzz/Library/Application Support/Sublime Text 3/Packages/User/Package Control.merged-ca-bundle
    CApath: /usr/local/etc/openssl/certs
  TLSv1.2 (OUT), TLS header, Certificate Status (22):
  TLSv1.2 (OUT), TLS handshake, Client hello (1):
  TLSv1.2 (IN), TLS handshake, Server hello (2):
  NPN, negotiated HTTP1.1
  TLSv1.2 (IN), TLS handshake, Certificate (11):
  TLSv1.2 (OUT), TLS alert, Server hello (2):
  SSL certificate problem: unable to get issuer certificate
  Closing connection 0
Package Control: Error downloading channel. } [5 bytes data] } [512 bytes data] } [2 bytes data] curl: (60) SSL certificate problem: unable to get issuer certificate More details here: https://curl.haxx.se/docs/sslcerts.html curl failed to verify the legitimacy of the server and therefore could not establish a secure connection to it. To learn more about this situation and how to fix it, please visit the web page mentioned above. downloading https://packagecontrol.io/channel_v3.json.

Any ideas?

[dwasss]

I can confirm following the steps in https://github.com/wbond/package_control/issues/1302#issuecomment-352076439 (basically deleting anything Package Control related and installing the prerelease version) I was able to finally get it to work and install packages. Previously, I did not try to delete all of the Package Control related files so it was still broken even when using prerelease.