1 /* This Source Code Form is subject to the terms of the Mozilla Public
2  * License, v. 2.0. If a copy of the MPL was not distributed with this
3  * file, You can obtain one at http://mozilla.org/MPL/2.0/. */
4 
5 /*****************************************************************************/
6 /* This is an automatically generated file. If you're not                    */
7 /* PublicKeyPinningService.cpp, you shouldn't be #including it.              */
8 /*****************************************************************************/
9 #include <stdint.h>
10 /* AddTrust External Root */
11 static const char kAddTrust_External_RootFingerprint[] =
12   "lCppFqbkrlJ3EcVFAkeip0+44VaoJUymbnOaEUk7tEU=";
13 
14 /* AddTrust Low-Value Services Root */
15 static const char kAddTrust_Low_Value_Services_RootFingerprint[] =
16   "BStocQfshOhzA4JFLsKidFF0XXSFpX1vRk4Np6G2ryo=";
17 
18 /* AffirmTrust Commercial */
19 static const char kAffirmTrust_CommercialFingerprint[] =
20   "bEZLmlsjOl6HTadlwm8EUBDS3c/0V5TwtMfkqvpQFJU=";
21 
22 /* AffirmTrust Networking */
23 static const char kAffirmTrust_NetworkingFingerprint[] =
24   "lAcq0/WPcPkwmOWl9sBMlscQvYSdgxhJGa6Q64kK5AA=";
25 
26 /* AffirmTrust Premium */
27 static const char kAffirmTrust_PremiumFingerprint[] =
28   "x/Q7TPW3FWgpT4IrU3YmBfbd0Vyt7Oc56eLDy6YenWc=";
29 
30 /* AffirmTrust Premium ECC */
31 static const char kAffirmTrust_Premium_ECCFingerprint[] =
32   "MhmwkRT/SVo+tusAwu/qs0ACrl8KVsdnnqCHo/oDfk8=";
33 
34 /* Baltimore CyberTrust Root */
35 static const char kBaltimore_CyberTrust_RootFingerprint[] =
36   "Y9mvm0exBk1JoQ57f9Vm28jKo5lFm/woKcVxrYxu80o=";
37 
38 /* COMODO Certification Authority */
39 static const char kCOMODO_Certification_AuthorityFingerprint[] =
40   "AG1751Vd2CAmRCxPGieoDomhmJy4ezREjtIZTBgZbV4=";
41 
42 /* COMODO ECC Certification Authority */
43 static const char kCOMODO_ECC_Certification_AuthorityFingerprint[] =
44   "58qRu/uxh4gFezqAcERupSkRYBlBAvfcw7mEjGPLnNU=";
45 
46 /* COMODO RSA Certification Authority */
47 static const char kCOMODO_RSA_Certification_AuthorityFingerprint[] =
48   "grX4Ta9HpZx6tSHkmCrvpApTQGo67CYDnvprLg5yRME=";
49 
50 /* Comodo AAA Services root */
51 static const char kComodo_AAA_Services_rootFingerprint[] =
52   "vRU+17BDT2iGsXvOi76E7TQMcTLXAqj0+jGPdW7L1vM=";
53 
54 /* Cybertrust Global Root */
55 static const char kCybertrust_Global_RootFingerprint[] =
56   "foeCwVDOOVL4AuY2AjpdPpW7XWjjPoWtsroXgSXOvxU=";
57 
58 /* DST Root CA X3 */
59 static const char kDST_Root_CA_X3Fingerprint[] =
60   "Vjs8r4z+80wjNcr1YKepWQboSIRi63WsWXhIMN+eWys=";
61 
62 /* DigiCert Assured ID Root CA */
63 static const char kDigiCert_Assured_ID_Root_CAFingerprint[] =
64   "I/Lt/z7ekCWanjD0Cvj5EqXls2lOaThEA0H2Bg4BT/o=";
65 
66 /* DigiCert Assured ID Root G2 */
67 static const char kDigiCert_Assured_ID_Root_G2Fingerprint[] =
68   "8ca6Zwz8iOTfUpc8rkIPCgid1HQUT+WAbEIAZOFZEik=";
69 
70 /* DigiCert Assured ID Root G3 */
71 static const char kDigiCert_Assured_ID_Root_G3Fingerprint[] =
72   "Fe7TOVlLME+M+Ee0dzcdjW/sYfTbKwGvWJ58U7Ncrkw=";
73 
74 /* DigiCert Global Root CA */
75 static const char kDigiCert_Global_Root_CAFingerprint[] =
76   "r/mIkG3eEpVdm+u/ko/cwxzOMo1bk4TyHIlByibiA5E=";
77 
78 /* DigiCert Global Root G2 */
79 static const char kDigiCert_Global_Root_G2Fingerprint[] =
80   "i7WTqTvh0OioIruIfFR4kMPnBqrS2rdiVPl/s2uC/CY=";
81 
82 /* DigiCert Global Root G3 */
83 static const char kDigiCert_Global_Root_G3Fingerprint[] =
84   "uUwZgwDOxcBXrQcntwu+kYFpkiVkOaezL0WYEZ3anJc=";
85 
86 /* DigiCert High Assurance EV Root CA */
87 static const char kDigiCert_High_Assurance_EV_Root_CAFingerprint[] =
88   "WoiWRyIOVNa9ihaBciRSC7XHjliYS9VwUGOIud4PB18=";
89 
90 /* DigiCert Trusted Root G4 */
91 static const char kDigiCert_Trusted_Root_G4Fingerprint[] =
92   "Wd8xe/qfTwq3ylFNd3IpaqLHZbh2ZNCLluVzmeNkcpw=";
93 
94 /* End Entity Test Cert */
95 static const char kEnd_Entity_Test_CertFingerprint[] =
96   "VCIlmPM9NkgFQtrs4Oa5TeFcDu6MWRTKSNdePEhOgD8=";
97 
98 /* Entrust Root Certification Authority */
99 static const char kEntrust_Root_Certification_AuthorityFingerprint[] =
100   "bb+uANN7nNc/j7R95lkXrwDg3d9C286sIMF8AnXuIJU=";
101 
102 /* Entrust Root Certification Authority - EC1 */
103 static const char kEntrust_Root_Certification_Authority___EC1Fingerprint[] =
104   "/qK31kX7pz11PB7Jp4cMQOH3sMVh6Se5hb9xGGbjbyI=";
105 
106 /* Entrust Root Certification Authority - G2 */
107 static const char kEntrust_Root_Certification_Authority___G2Fingerprint[] =
108   "du6FkDdMcVQ3u8prumAo6t3i3G27uMP2EOhR8R0at/U=";
109 
110 /* Entrust.net Premium 2048 Secure Server CA */
111 static const char kEntrust_net_Premium_2048_Secure_Server_CAFingerprint[] =
112   "HqPF5D7WbC2imDpCpKebHpBnhs6fG1hiFBmgBGOofTg=";
113 
114 /* FacebookBackup */
115 static const char kFacebookBackupFingerprint[] =
116   "q4PO2G2cbkZhZ82+JgmRUyGMoAeozA+BSXVXQWB8XWQ=";
117 
118 /* GOOGLE_PIN_AddTrustPublicCARoot */
119 static const char kGOOGLE_PIN_AddTrustPublicCARootFingerprint[] =
120   "OGHXtpYfzbISBFb/b8LrdwSxp0G0vZM6g3b14ZFcppg=";
121 
122 /* GOOGLE_PIN_AddTrustQualifiedCARoot */
123 static const char kGOOGLE_PIN_AddTrustQualifiedCARootFingerprint[] =
124   "xzr8Lrp3DQy8HuQfJStS6Kk9ErctzOwDHY2DnL+Bink=";
125 
126 /* GOOGLE_PIN_COMODORSADomainValidationSecureServerCA */
127 static const char kGOOGLE_PIN_COMODORSADomainValidationSecureServerCAFingerprint[] =
128   "klO23nT2ehFDXCfx3eHTDRESMz3asj1muO+4aIdjiuY=";
129 
130 /* GOOGLE_PIN_DigiCertECCSecureServerCA */
131 static const char kGOOGLE_PIN_DigiCertECCSecureServerCAFingerprint[] =
132   "PZXN3lRAy+8tBKk2Ox6F7jIlnzr2Yzmwqc3JnyfXoCw=";
133 
134 /* GOOGLE_PIN_DigiCertSHA2HighAssuranceServerCA */
135 static const char kGOOGLE_PIN_DigiCertSHA2HighAssuranceServerCAFingerprint[] =
136   "k2v657xBsOVe1PQRwOsHsw3bsGT2VzIqz5K+59sNQws=";
137 
138 /* GOOGLE_PIN_Entrust_SSL */
139 static const char kGOOGLE_PIN_Entrust_SSLFingerprint[] =
140   "nsxRNo6G40YPZsKV5JQt1TCA8nseQQr/LRqp1Oa8fnw=";
141 
142 /* GOOGLE_PIN_GTECyberTrustGlobalRoot */
143 static const char kGOOGLE_PIN_GTECyberTrustGlobalRootFingerprint[] =
144   "EGn6R6CqT4z3ERscrqNl7q7RC//zJmDe9uBhS/rnCHU=";
145 
146 /* GOOGLE_PIN_GTSCA1O1 */
147 static const char kGOOGLE_PIN_GTSCA1O1Fingerprint[] =
148   "YZPgTZ+woNCCCIW3LH2CxQeLzB/1m42QcCTBSdgayjs=";
149 
150 /* GOOGLE_PIN_GeoTrustGlobal2 */
151 static const char kGOOGLE_PIN_GeoTrustGlobal2Fingerprint[] =
152   "F3VaXClfPS1y5vAxofB/QAxYi55YKyLxfq4xoVkNEYU=";
153 
154 /* GOOGLE_PIN_GoDaddySecure */
155 static const char kGOOGLE_PIN_GoDaddySecureFingerprint[] =
156   "MrZLZnJ6IGPkBm87lYywqu5Xal7O/ZUzmbuIdHMdlYc=";
157 
158 /* GOOGLE_PIN_GoogleG2 */
159 static const char kGOOGLE_PIN_GoogleG2Fingerprint[] =
160   "7HIpactkIAq2Y49orFOOQKurWxmmSFZhBCoQYcRhJ3Y=";
161 
162 /* GOOGLE_PIN_GoogleG3 */
163 static const char kGOOGLE_PIN_GoogleG3Fingerprint[] =
164   "f8NnEFZxQ4ExFOhSN7EiFWtiudZQVD2oY60uauV/n78=";
165 
166 /* GOOGLE_PIN_RapidSSL */
167 static const char kGOOGLE_PIN_RapidSSLFingerprint[] =
168   "lT09gPUeQfbYrlxRtpsHrjDblj9Rpz+u7ajfCrg4qDM=";
169 
170 /* GOOGLE_PIN_SecureCertificateServices */
171 static const char kGOOGLE_PIN_SecureCertificateServicesFingerprint[] =
172   "RpHL/ehKa2BS3b4VK7DCFq4lqG5XR4E9vA8UfzOFcL4=";
173 
174 /* GOOGLE_PIN_SymantecClass3EVG3 */
175 static const char kGOOGLE_PIN_SymantecClass3EVG3Fingerprint[] =
176   "gMxWOrX4PMQesK9qFNbYBxjBfjUvlkn/vN1n+L9lE5E=";
177 
178 /* GOOGLE_PIN_TrustedCertificateServices */
179 static const char kGOOGLE_PIN_TrustedCertificateServicesFingerprint[] =
180   "4tiR77c4ZpEF1TDeXtcuKyrD9KZweLU0mz/ayklvXrg=";
181 
182 /* GOOGLE_PIN_UTNDATACorpSGC */
183 static const char kGOOGLE_PIN_UTNDATACorpSGCFingerprint[] =
184   "QAL80xHQczFWfnG82XHkYEjI3OjRZZcRdTs9qiommvo=";
185 
186 /* GOOGLE_PIN_UTNUSERFirstHardware */
187 static const char kGOOGLE_PIN_UTNUSERFirstHardwareFingerprint[] =
188   "TUDnr0MEoJ3of7+YliBMBVFB4/gJsv5zO7IxD9+YoWI=";
189 
190 /* GOOGLE_PIN_UTNUSERFirstObject */
191 static const char kGOOGLE_PIN_UTNUSERFirstObjectFingerprint[] =
192   "D+FMJksXu28NZT56cOs2Pb9UvhWAOe3a5cJXEd9IwQM=";
193 
194 /* GOOGLE_PIN_VeriSignClass1 */
195 static const char kGOOGLE_PIN_VeriSignClass1Fingerprint[] =
196   "LclHC+Y+9KzxvYKGCUArt7h72ZY4pkOTTohoLRvowwg=";
197 
198 /* GOOGLE_PIN_VeriSignClass2_G2 */
199 static const char kGOOGLE_PIN_VeriSignClass2_G2Fingerprint[] =
200   "2oALgLKofTmeZvoZ1y/fSZg7R9jPMix8eVA6DH4o/q8=";
201 
202 /* GOOGLE_PIN_VeriSignClass3_G2 */
203 static const char kGOOGLE_PIN_VeriSignClass3_G2Fingerprint[] =
204   "AjyBzOjnxk+pQtPBUEhwfTXZu1uH9PVExb8bxWQ68vo=";
205 
206 /* GOOGLE_PIN_VeriSignClass4_G3 */
207 static const char kGOOGLE_PIN_VeriSignClass4_G3Fingerprint[] =
208   "VnuCEf0g09KD7gzXzgZyy52ZvFtIeljJ1U7Gf3fUqPU=";
209 
210 /* GeoTrust Global CA */
211 static const char kGeoTrust_Global_CAFingerprint[] =
212   "h6801m+z8v3zbgkRHpq6L29Esgfzhj89C1SyUCOQmqU=";
213 
214 /* GeoTrust Primary Certification Authority */
215 static const char kGeoTrust_Primary_Certification_AuthorityFingerprint[] =
216   "SQVGZiOrQXi+kqxcvWWE96HhfydlLVqFr4lQTqI5qqo=";
217 
218 /* GeoTrust Primary Certification Authority - G2 */
219 static const char kGeoTrust_Primary_Certification_Authority___G2Fingerprint[] =
220   "vPtEqrmtAhAVcGtBIep2HIHJ6IlnWQ9vlK50TciLePs=";
221 
222 /* GeoTrust Primary Certification Authority - G3 */
223 static const char kGeoTrust_Primary_Certification_Authority___G3Fingerprint[] =
224   "q5hJUnat8eyv8o81xTBIeB5cFxjaucjmelBPT2pRMo8=";
225 
226 /* GeoTrust Universal CA */
227 static const char kGeoTrust_Universal_CAFingerprint[] =
228   "lpkiXF3lLlbN0y3y6W0c/qWqPKC7Us2JM8I7XCdEOCA=";
229 
230 /* GeoTrust Universal CA 2 */
231 static const char kGeoTrust_Universal_CA_2Fingerprint[] =
232   "fKoDRlEkWQxgHlZ+UhSOlSwM/+iQAFMP4NlbbVDqrkE=";
233 
234 /* GlobalSign ECC Root CA - R4 */
235 static const char kGlobalSign_ECC_Root_CA___R4Fingerprint[] =
236   "CLOmM1/OXvSPjw5UOYbAf9GKOxImEp9hhku9W90fHMk=";
237 
238 /* GlobalSign ECC Root CA - R5 */
239 static const char kGlobalSign_ECC_Root_CA___R5Fingerprint[] =
240   "fg6tdrtoGdwvVFEahDVPboswe53YIFjqbABPAdndpd8=";
241 
242 /* GlobalSign Root CA */
243 static const char kGlobalSign_Root_CAFingerprint[] =
244   "K87oWBWM9UZfyddvDfoxL+8lpNyoUB2ptGtn0fv6G2Q=";
245 
246 /* GlobalSign Root CA - R2 */
247 static const char kGlobalSign_Root_CA___R2Fingerprint[] =
248   "iie1VXtL7HzAMF+/PVPR9xzT80kQxdZeJ+zduCB3uj0=";
249 
250 /* GlobalSign Root CA - R3 */
251 static const char kGlobalSign_Root_CA___R3Fingerprint[] =
252   "cGuxAXyFXFkWm61cF4HPWX8S0srS9j0aSqN0k4AP+4A=";
253 
254 /* Go Daddy Class 2 CA */
255 static const char kGo_Daddy_Class_2_CAFingerprint[] =
256   "VjLZe/p3W/PJnd6lL8JVNBCGQBZynFLdZSTIqcO0SJ8=";
257 
258 /* Go Daddy Root Certificate Authority - G2 */
259 static const char kGo_Daddy_Root_Certificate_Authority___G2Fingerprint[] =
260   "Ko8tivDrEjiY90yGasP6ZpBU4jwXvHqVvQI0GS3GNdA=";
261 
262 /* GoogleBackup2048 */
263 static const char kGoogleBackup2048Fingerprint[] =
264   "IPMbDAjLVSGntGO3WP53X/zilCVndez5YJ2+vJvhJsA=";
265 
266 /* Let's Encrypt Authority X3 */
267 static const char kLet_s_Encrypt_Authority_X3Fingerprint[] =
268   "YLh1dUR9y6Kja30RrAn7JKnbQG/uEtLMkBgFF2Fuihg=";
269 
270 /* Let's Encrypt Authority X4 */
271 static const char kLet_s_Encrypt_Authority_X4Fingerprint[] =
272   "sRHdihwgkaib1P1gxX8HFszlD+7/gTfNvuAybgLPNis=";
273 
274 /* SpiderOak2 */
275 static const char kSpiderOak2Fingerprint[] =
276   "7Y3UnxbffL8aFPXsOJBpGasgpDmngpIhAxGKdQRklQQ=";
277 
278 /* SpiderOak3 */
279 static const char kSpiderOak3Fingerprint[] =
280   "LkER54vOdlygpTsbYvlpMq1CE/lDAG1AP9xmdtwvV2A=";
281 
282 /* Starfield Class 2 CA */
283 static const char kStarfield_Class_2_CAFingerprint[] =
284   "FfFKxFycfaIz00eRZOgTf+Ne4POK6FgYPwhBDqgqxLQ=";
285 
286 /* Starfield Root Certificate Authority - G2 */
287 static const char kStarfield_Root_Certificate_Authority___G2Fingerprint[] =
288   "gI1os/q0iEpflxrOfRBVDXqVoWN3Tz7Dav/7IT++THQ=";
289 
290 /* Swehack */
291 static const char kSwehackFingerprint[] =
292   "FdaffE799rVb3oyAuhJ2mBW/XJwD07Uajb2G6YwSAEw=";
293 
294 /* SwehackBackup */
295 static const char kSwehackBackupFingerprint[] =
296   "z6cuswA6E1vgFkCjUsbEYo0Lf3aP8M8YOvwkoiGzDCo=";
297 
298 /* TestSPKI */
299 static const char kTestSPKIFingerprint[] =
300   "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=";
301 
302 /* Tor1 */
303 static const char kTor1Fingerprint[] =
304   "bYz9JTDk89X3qu3fgswG+lBQso5vI0N1f0Rx4go4nLo=";
305 
306 /* Tor2 */
307 static const char kTor2Fingerprint[] =
308   "xXCxhTdn7uxXneJSbQCqoAvuW3ZtQl2pDVTf2sewS8w=";
309 
310 /* Tor3 */
311 static const char kTor3Fingerprint[] =
312   "CleC1qwUR8JPgH1nXvSe2VHxDe5/KfNs96EusbfSOfo=";
313 
314 /* TumblrBackup */
315 static const char kTumblrBackupFingerprint[] =
316   "avlD96PLERV78IN1fD+ab5cupkUDD9wTZWJjHX6VC9w=";
317 
318 /* Twitter1 */
319 static const char kTwitter1Fingerprint[] =
320   "vU9M48LzD/CF34wE5PPf4nBwRyosy06X21J0ap8yS5s=";
321 
322 /* USERTrust ECC Certification Authority */
323 static const char kUSERTrust_ECC_Certification_AuthorityFingerprint[] =
324   "ICGRfpgmOUXIWcQ/HXPLQTkFPEFPoDyjvH7ohhQpjzs=";
325 
326 /* USERTrust RSA Certification Authority */
327 static const char kUSERTrust_RSA_Certification_AuthorityFingerprint[] =
328   "x4QzPSC810K5/cMjb05Qm4k3Bw5zBn4lTdO/nEW/Td4=";
329 
330 /* UTN USERFirst Email Root CA */
331 static const char kUTN_USERFirst_Email_Root_CAFingerprint[] =
332   "Laj56jRU0hFGRko/nQKNxMf7tXscUsc8KwVyovWZotM=";
333 
334 /* VeriSign Class 3 Public Primary Certification Authority - G4 */
335 static const char kVeriSign_Class_3_Public_Primary_Certification_Authority___G4Fingerprint[] =
336   "UZJDjsNp1+4M5x9cbbdflB779y5YRBcV6Z6rBMLIrO4=";
337 
338 /* VeriSign Class 3 Public Primary Certification Authority - G5 */
339 static const char kVeriSign_Class_3_Public_Primary_Certification_Authority___G5Fingerprint[] =
340   "JbQbUG5JMJUoI6brnx0x3vZF6jilxsapbXGVfjhN8Fg=";
341 
342 /* VeriSign Universal Root Certification Authority */
343 static const char kVeriSign_Universal_Root_Certification_AuthorityFingerprint[] =
344   "lnsM2T/O9/J84sJFdnrpsFp3awZJ+ZZbYpCWhGloaHI=";
345 
346 /* Verisign Class 1 Public Primary Certification Authority - G3 */
347 static const char kVerisign_Class_1_Public_Primary_Certification_Authority___G3Fingerprint[] =
348   "IgduWu9Eu5pBaii30cRDItcFn2D+/6XK9sW+hEeJEwM=";
349 
350 /* Verisign Class 2 Public Primary Certification Authority - G3 */
351 static const char kVerisign_Class_2_Public_Primary_Certification_Authority___G3Fingerprint[] =
352   "cAajgxHlj7GTSEIzIYIQxmEloOSoJq7VOaxWHfv72QM=";
353 
354 /* Verisign Class 3 Public Primary Certification Authority - G3 */
355 static const char kVerisign_Class_3_Public_Primary_Certification_Authority___G3Fingerprint[] =
356   "SVqWumuteCQHvVIaALrOZXuzVVVeS7f4FGxxu6V+es4=";
357 
358 /* YahooBackup1 */
359 static const char kYahooBackup1Fingerprint[] =
360   "2fRAUXyxl4A1/XHrKNBmc8bTkzA7y4FB/GLJuNAzCqY=";
361 
362 /* YahooBackup2 */
363 static const char kYahooBackup2Fingerprint[] =
364   "dolnbtzEBnELx/9lOEQ22e6OZO/QNb6VSSX2XHA3E7A=";
365 
366 /* thawte Primary Root CA */
367 static const char kthawte_Primary_Root_CAFingerprint[] =
368   "HXXQgxueCIU5TTLHob/bPbwcKOKw6DkfsTWYHbxbqTY=";
369 
370 /* thawte Primary Root CA - G2 */
371 static const char kthawte_Primary_Root_CA___G2Fingerprint[] =
372   "Z9xPMvoQ59AaeaBzqgyeAhLsL/w9d54Kp/nA8OHCyJM=";
373 
374 /* thawte Primary Root CA - G3 */
375 static const char kthawte_Primary_Root_CA___G3Fingerprint[] =
376   "GQbGEk27Q4V40A4GbVBUxsN/D6YCjAVUXgmU7drshik=";
377 
378 /* Pinsets are each an ordered list by the actual value of the fingerprint */
379 struct StaticFingerprints {
380   // See bug 1338873 about making these fields const.
381   size_t size;
382   const char* const* data;
383 };
384 
385 /* PreloadedHPKPins.json pinsets */
386 static const char* const kPinset_google_root_pems_Data[] = {
387   kEntrust_Root_Certification_Authority___EC1Fingerprint,
388   kCOMODO_ECC_Certification_AuthorityFingerprint,
389   kDigiCert_Assured_ID_Root_G2Fingerprint,
390   kCOMODO_Certification_AuthorityFingerprint,
391   kAddTrust_Low_Value_Services_RootFingerprint,
392   kGlobalSign_ECC_Root_CA___R4Fingerprint,
393   kDigiCert_Assured_ID_Root_G3Fingerprint,
394   kStarfield_Class_2_CAFingerprint,
395   kthawte_Primary_Root_CA___G3Fingerprint,
396   kthawte_Primary_Root_CAFingerprint,
397   kEntrust_net_Premium_2048_Secure_Server_CAFingerprint,
398   kDigiCert_Assured_ID_Root_CAFingerprint,
399   kUSERTrust_ECC_Certification_AuthorityFingerprint,
400   kVeriSign_Class_3_Public_Primary_Certification_Authority___G5Fingerprint,
401   kGlobalSign_Root_CAFingerprint,
402   kGo_Daddy_Root_Certificate_Authority___G2Fingerprint,
403   kAffirmTrust_Premium_ECCFingerprint,
404   kGeoTrust_Primary_Certification_AuthorityFingerprint,
405   kVerisign_Class_3_Public_Primary_Certification_Authority___G3Fingerprint,
406   kVeriSign_Class_3_Public_Primary_Certification_Authority___G4Fingerprint,
407   kGo_Daddy_Class_2_CAFingerprint,
408   kDigiCert_Trusted_Root_G4Fingerprint,
409   kDigiCert_High_Assurance_EV_Root_CAFingerprint,
410   kBaltimore_CyberTrust_RootFingerprint,
411   kthawte_Primary_Root_CA___G2Fingerprint,
412   kAffirmTrust_CommercialFingerprint,
413   kEntrust_Root_Certification_AuthorityFingerprint,
414   kGlobalSign_Root_CA___R3Fingerprint,
415   kEntrust_Root_Certification_Authority___G2Fingerprint,
416   kGeoTrust_Universal_CA_2Fingerprint,
417   kGlobalSign_ECC_Root_CA___R5Fingerprint,
418   kCybertrust_Global_RootFingerprint,
419   kStarfield_Root_Certificate_Authority___G2Fingerprint,
420   kCOMODO_RSA_Certification_AuthorityFingerprint,
421   kGeoTrust_Global_CAFingerprint,
422   kDigiCert_Global_Root_G2Fingerprint,
423   kGlobalSign_Root_CA___R2Fingerprint,
424   kAffirmTrust_NetworkingFingerprint,
425   kAddTrust_External_RootFingerprint,
426   kVeriSign_Universal_Root_Certification_AuthorityFingerprint,
427   kGeoTrust_Universal_CAFingerprint,
428   kGeoTrust_Primary_Certification_Authority___G3Fingerprint,
429   kDigiCert_Global_Root_CAFingerprint,
430   kDigiCert_Global_Root_G3Fingerprint,
431   kGeoTrust_Primary_Certification_Authority___G2Fingerprint,
432   kComodo_AAA_Services_rootFingerprint,
433   kAffirmTrust_PremiumFingerprint,
434   kUSERTrust_RSA_Certification_AuthorityFingerprint,
435 };
436 static const StaticFingerprints kPinset_google_root_pems = {
437   sizeof(kPinset_google_root_pems_Data) / sizeof(const char*),
438   kPinset_google_root_pems_Data
439 };
440 
441 static const char* const kPinset_mozilla_services_Data[] = {
442   kDigiCert_High_Assurance_EV_Root_CAFingerprint,
443   kLet_s_Encrypt_Authority_X3Fingerprint,
444   kDigiCert_Global_Root_CAFingerprint,
445   kLet_s_Encrypt_Authority_X4Fingerprint,
446 };
447 static const StaticFingerprints kPinset_mozilla_services = {
448   sizeof(kPinset_mozilla_services_Data) / sizeof(const char*),
449   kPinset_mozilla_services_Data
450 };
451 
452 static const char* const kPinset_mozilla_test_Data[] = {
453   kEnd_Entity_Test_CertFingerprint,
454 };
455 static const StaticFingerprints kPinset_mozilla_test = {
456   sizeof(kPinset_mozilla_test_Data) / sizeof(const char*),
457   kPinset_mozilla_test_Data
458 };
459 
460 /* Chrome static pinsets */
461 static const char* const kPinset_test_Data[] = {
462   kTestSPKIFingerprint,
463 };
464 static const StaticFingerprints kPinset_test = {
465   sizeof(kPinset_test_Data) / sizeof(const char*),
466   kPinset_test_Data
467 };
468 
469 static const char* const kPinset_google_Data[] = {
470   kGOOGLE_PIN_GoogleG2Fingerprint,
471   kGoogleBackup2048Fingerprint,
472   kGOOGLE_PIN_GTSCA1O1Fingerprint,
473   kGOOGLE_PIN_GoogleG3Fingerprint,
474   kGlobalSign_Root_CA___R2Fingerprint,
475 };
476 static const StaticFingerprints kPinset_google = {
477   sizeof(kPinset_google_Data) / sizeof(const char*),
478   kPinset_google_Data
479 };
480 
481 static const char* const kPinset_tor_Data[] = {
482   kTor3Fingerprint,
483   kDigiCert_High_Assurance_EV_Root_CAFingerprint,
484   kLet_s_Encrypt_Authority_X3Fingerprint,
485   kTor1Fingerprint,
486   kGOOGLE_PIN_RapidSSLFingerprint,
487   kLet_s_Encrypt_Authority_X4Fingerprint,
488   kTor2Fingerprint,
489 };
490 static const StaticFingerprints kPinset_tor = {
491   sizeof(kPinset_tor_Data) / sizeof(const char*),
492   kPinset_tor_Data
493 };
494 
495 static const char* const kPinset_twitterCom_Data[] = {
496   kGOOGLE_PIN_VeriSignClass2_G2Fingerprint,
497   kGOOGLE_PIN_VeriSignClass3_G2Fingerprint,
498   kGOOGLE_PIN_GeoTrustGlobal2Fingerprint,
499   kDigiCert_Assured_ID_Root_CAFingerprint,
500   kVerisign_Class_1_Public_Primary_Certification_Authority___G3Fingerprint,
501   kVeriSign_Class_3_Public_Primary_Certification_Authority___G5Fingerprint,
502   kGOOGLE_PIN_VeriSignClass1Fingerprint,
503   kGeoTrust_Primary_Certification_AuthorityFingerprint,
504   kVerisign_Class_3_Public_Primary_Certification_Authority___G3Fingerprint,
505   kVeriSign_Class_3_Public_Primary_Certification_Authority___G4Fingerprint,
506   kGOOGLE_PIN_VeriSignClass4_G3Fingerprint,
507   kDigiCert_High_Assurance_EV_Root_CAFingerprint,
508   kVerisign_Class_2_Public_Primary_Certification_Authority___G3Fingerprint,
509   kGeoTrust_Universal_CA_2Fingerprint,
510   kGeoTrust_Global_CAFingerprint,
511   kVeriSign_Universal_Root_Certification_AuthorityFingerprint,
512   kGeoTrust_Universal_CAFingerprint,
513   kGeoTrust_Primary_Certification_Authority___G3Fingerprint,
514   kDigiCert_Global_Root_CAFingerprint,
515   kGeoTrust_Primary_Certification_Authority___G2Fingerprint,
516   kTwitter1Fingerprint,
517 };
518 static const StaticFingerprints kPinset_twitterCom = {
519   sizeof(kPinset_twitterCom_Data) / sizeof(const char*),
520   kPinset_twitterCom_Data
521 };
522 
523 static const char* const kPinset_twitterCDN_Data[] = {
524   kGOOGLE_PIN_VeriSignClass2_G2Fingerprint,
525   kGOOGLE_PIN_TrustedCertificateServicesFingerprint,
526   kCOMODO_Certification_AuthorityFingerprint,
527   kGOOGLE_PIN_VeriSignClass3_G2Fingerprint,
528   kAddTrust_Low_Value_Services_RootFingerprint,
529   kGOOGLE_PIN_UTNUSERFirstObjectFingerprint,
530   kGOOGLE_PIN_GTECyberTrustGlobalRootFingerprint,
531   kGOOGLE_PIN_GeoTrustGlobal2Fingerprint,
532   kEntrust_net_Premium_2048_Secure_Server_CAFingerprint,
533   kDigiCert_Assured_ID_Root_CAFingerprint,
534   kVerisign_Class_1_Public_Primary_Certification_Authority___G3Fingerprint,
535   kVeriSign_Class_3_Public_Primary_Certification_Authority___G5Fingerprint,
536   kGlobalSign_Root_CAFingerprint,
537   kUTN_USERFirst_Email_Root_CAFingerprint,
538   kGOOGLE_PIN_VeriSignClass1Fingerprint,
539   kGOOGLE_PIN_AddTrustPublicCARootFingerprint,
540   kGOOGLE_PIN_UTNDATACorpSGCFingerprint,
541   kGOOGLE_PIN_SecureCertificateServicesFingerprint,
542   kGeoTrust_Primary_Certification_AuthorityFingerprint,
543   kVerisign_Class_3_Public_Primary_Certification_Authority___G3Fingerprint,
544   kGOOGLE_PIN_UTNUSERFirstHardwareFingerprint,
545   kVeriSign_Class_3_Public_Primary_Certification_Authority___G4Fingerprint,
546   kGOOGLE_PIN_VeriSignClass4_G3Fingerprint,
547   kDigiCert_High_Assurance_EV_Root_CAFingerprint,
548   kBaltimore_CyberTrust_RootFingerprint,
549   kEntrust_Root_Certification_AuthorityFingerprint,
550   kVerisign_Class_2_Public_Primary_Certification_Authority___G3Fingerprint,
551   kGlobalSign_Root_CA___R3Fingerprint,
552   kEntrust_Root_Certification_Authority___G2Fingerprint,
553   kGeoTrust_Universal_CA_2Fingerprint,
554   kGeoTrust_Global_CAFingerprint,
555   kGlobalSign_Root_CA___R2Fingerprint,
556   kAddTrust_External_RootFingerprint,
557   kVeriSign_Universal_Root_Certification_AuthorityFingerprint,
558   kGeoTrust_Universal_CAFingerprint,
559   kGOOGLE_PIN_Entrust_SSLFingerprint,
560   kGeoTrust_Primary_Certification_Authority___G3Fingerprint,
561   kDigiCert_Global_Root_CAFingerprint,
562   kGeoTrust_Primary_Certification_Authority___G2Fingerprint,
563   kComodo_AAA_Services_rootFingerprint,
564   kTwitter1Fingerprint,
565   kGOOGLE_PIN_AddTrustQualifiedCARootFingerprint,
566 };
567 static const StaticFingerprints kPinset_twitterCDN = {
568   sizeof(kPinset_twitterCDN_Data) / sizeof(const char*),
569   kPinset_twitterCDN_Data
570 };
571 
572 static const char* const kPinset_dropbox_Data[] = {
573   kEntrust_Root_Certification_Authority___EC1Fingerprint,
574   kEntrust_net_Premium_2048_Secure_Server_CAFingerprint,
575   kDigiCert_Assured_ID_Root_CAFingerprint,
576   kGo_Daddy_Root_Certificate_Authority___G2Fingerprint,
577   kGOOGLE_PIN_GoDaddySecureFingerprint,
578   kGo_Daddy_Class_2_CAFingerprint,
579   kDigiCert_High_Assurance_EV_Root_CAFingerprint,
580   kEntrust_Root_Certification_AuthorityFingerprint,
581   kEntrust_Root_Certification_Authority___G2Fingerprint,
582   kDigiCert_Global_Root_CAFingerprint,
583 };
584 static const StaticFingerprints kPinset_dropbox = {
585   sizeof(kPinset_dropbox_Data) / sizeof(const char*),
586   kPinset_dropbox_Data
587 };
588 
589 static const char* const kPinset_facebook_Data[] = {
590   kGOOGLE_PIN_DigiCertECCSecureServerCAFingerprint,
591   kDigiCert_High_Assurance_EV_Root_CAFingerprint,
592   kGOOGLE_PIN_SymantecClass3EVG3Fingerprint,
593   kFacebookBackupFingerprint,
594 };
595 static const StaticFingerprints kPinset_facebook = {
596   sizeof(kPinset_facebook_Data) / sizeof(const char*),
597   kPinset_facebook_Data
598 };
599 
600 static const char* const kPinset_spideroak_Data[] = {
601   kSpiderOak2Fingerprint,
602   kSpiderOak3Fingerprint,
603   kDigiCert_High_Assurance_EV_Root_CAFingerprint,
604   kGeoTrust_Global_CAFingerprint,
605 };
606 static const StaticFingerprints kPinset_spideroak = {
607   sizeof(kPinset_spideroak_Data) / sizeof(const char*),
608   kPinset_spideroak_Data
609 };
610 
611 static const char* const kPinset_yahoo_Data[] = {
612   kYahooBackup1Fingerprint,
613   kDigiCert_Assured_ID_Root_CAFingerprint,
614   kGlobalSign_Root_CAFingerprint,
615   kDigiCert_Trusted_Root_G4Fingerprint,
616   kDigiCert_High_Assurance_EV_Root_CAFingerprint,
617   kGlobalSign_Root_CA___R3Fingerprint,
618   kYahooBackup2Fingerprint,
619   kDigiCert_Global_Root_G2Fingerprint,
620   kDigiCert_Global_Root_CAFingerprint,
621   kDigiCert_Global_Root_G3Fingerprint,
622 };
623 static const StaticFingerprints kPinset_yahoo = {
624   sizeof(kPinset_yahoo_Data) / sizeof(const char*),
625   kPinset_yahoo_Data
626 };
627 
628 static const char* const kPinset_swehackCom_Data[] = {
629   kSwehackFingerprint,
630   kDST_Root_CA_X3Fingerprint,
631   kLet_s_Encrypt_Authority_X3Fingerprint,
632   kGOOGLE_PIN_COMODORSADomainValidationSecureServerCAFingerprint,
633   kLet_s_Encrypt_Authority_X4Fingerprint,
634   kSwehackBackupFingerprint,
635 };
636 static const StaticFingerprints kPinset_swehackCom = {
637   sizeof(kPinset_swehackCom_Data) / sizeof(const char*),
638   kPinset_swehackCom_Data
639 };
640 
641 static const char* const kPinset_tumblr_Data[] = {
642   kDigiCert_High_Assurance_EV_Root_CAFingerprint,
643   kTumblrBackupFingerprint,
644   kGOOGLE_PIN_DigiCertSHA2HighAssuranceServerCAFingerprint,
645 };
646 static const StaticFingerprints kPinset_tumblr = {
647   sizeof(kPinset_tumblr_Data) / sizeof(const char*),
648   kPinset_tumblr_Data
649 };
650 
651 /* Domainlist */
652 struct TransportSecurityPreload {
653   // See bug 1338873 about making these fields const.
654   const char* mHost;
655   bool mIncludeSubdomains;
656   bool mTestMode;
657   bool mIsMoz;
658   int32_t mId;
659   const StaticFingerprints* pinset;
660 };
661 
662 /* Sort hostnames for binary search. */
663 static const TransportSecurityPreload kPublicKeyPinningPreloadList[] = {
664   { "2mdn.net", true, false, false, -1, &kPinset_google_root_pems },
665   { "accounts.firefox.com", true, false, true, 4, &kPinset_mozilla_services },
666   { "accounts.google.com", true, false, false, -1, &kPinset_google_root_pems },
667   { "addons.mozilla.net", true, false, true, 2, &kPinset_mozilla_services },
668   { "addons.mozilla.org", true, false, true, 1, &kPinset_mozilla_services },
669   { "admin.google.com", true, false, false, -1, &kPinset_google_root_pems },
670   { "android.com", true, false, false, -1, &kPinset_google_root_pems },
671   { "api.accounts.firefox.com", true, false, true, 5, &kPinset_mozilla_services },
672   { "api.twitter.com", true, false, false, -1, &kPinset_twitterCDN },
673   { "apis.google.com", true, false, false, -1, &kPinset_google_root_pems },
674   { "appengine.google.com", true, false, false, -1, &kPinset_google_root_pems },
675   { "apps.facebook.com", true, false, false, -1, &kPinset_facebook },
676   { "appspot.com", true, false, false, -1, &kPinset_google_root_pems },
677   { "at.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
678   { "au.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
679   { "aus4.mozilla.org", true, true, true, 3, &kPinset_mozilla_services },
680   { "aus5.mozilla.org", true, true, true, 7, &kPinset_mozilla_services },
681   { "az.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
682   { "be.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
683   { "bi.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
684   { "blog.torproject.org", true, false, false, -1, &kPinset_tor },
685   { "blogger.com", true, false, false, -1, &kPinset_google_root_pems },
686   { "blogspot.com", true, false, false, -1, &kPinset_google_root_pems },
687   { "br.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
688   { "bugs.chromium.org", true, false, false, -1, &kPinset_google_root_pems },
689   { "build.chromium.org", true, false, false, -1, &kPinset_google_root_pems },
690   { "business.facebook.com", true, false, false, -1, &kPinset_facebook },
691   { "business.twitter.com", true, false, false, -1, &kPinset_twitterCom },
692   { "ca.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
693   { "calendar.google.com", true, false, false, -1, &kPinset_google_root_pems },
694   { "cd.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
695   { "cdn.ampproject.org", true, false, false, -1, &kPinset_google_root_pems },
696   { "cdn.mozilla.net", true, false, true, -1, &kPinset_mozilla_services },
697   { "cdn.mozilla.org", true, false, true, -1, &kPinset_mozilla_services },
698   { "cg.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
699   { "ch.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
700   { "check.torproject.org", true, false, false, -1, &kPinset_tor },
701   { "checkout.google.com", true, false, false, -1, &kPinset_google_root_pems },
702   { "chfr.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
703   { "chit.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
704   { "chrome-devtools-frontend.appspot.com", true, false, false, -1, &kPinset_google_root_pems },
705   { "chrome.com", true, false, false, -1, &kPinset_google_root_pems },
706   { "chrome.google.com", true, false, false, -1, &kPinset_google_root_pems },
707   { "chromereporting-pa.googleapis.com", true, false, false, -1, &kPinset_google_root_pems },
708   { "chromiumbugs.appspot.com", true, false, false, -1, &kPinset_google_root_pems },
709   { "chromiumcodereview.appspot.com", true, false, false, -1, &kPinset_google_root_pems },
710   { "cl.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
711   { "classroom.google.com", true, false, false, -1, &kPinset_google_root_pems },
712   { "cloud.google.com", true, false, false, -1, &kPinset_google_root_pems },
713   { "cn.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
714   { "co.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
715   { "code.facebook.com", true, false, false, -1, &kPinset_facebook },
716   { "code.google.com", true, false, false, -1, &kPinset_google_root_pems },
717   { "codereview.appspot.com", true, false, false, -1, &kPinset_google_root_pems },
718   { "codereview.chromium.org", true, false, false, -1, &kPinset_google_root_pems },
719   { "contributor.google.com", true, false, false, -1, &kPinset_google_root_pems },
720   { "corp.goog", true, false, false, -1, &kPinset_google_root_pems },
721   { "cr.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
722   { "crash-reports-xpsp2.mozilla.com", false, false, true, 11, &kPinset_mozilla_services },
723   { "crash-reports.mozilla.com", false, false, true, 10, &kPinset_mozilla_services },
724   { "crash-stats.mozilla.com", false, false, true, 12, &kPinset_mozilla_services },
725   { "crbug.com", true, false, false, -1, &kPinset_google_root_pems },
726   { "crosbug.com", true, false, false, -1, &kPinset_google_root_pems },
727   { "crrev.com", true, false, false, -1, &kPinset_google_root_pems },
728   { "ct.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
729   { "de.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
730   { "dev.twitter.com", true, false, false, -1, &kPinset_twitterCom },
731   { "developer.android.com", true, false, false, -1, &kPinset_google_root_pems },
732   { "developers.facebook.com", true, false, false, -1, &kPinset_facebook },
733   { "dist.torproject.org", true, false, false, -1, &kPinset_tor },
734   { "dk.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
735   { "dl.google.com", true, false, false, -1, &kPinset_google_root_pems },
736   { "dns.google.com", true, false, false, -1, &kPinset_google_root_pems },
737   { "do.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
738   { "docs.google.com", true, false, false, -1, &kPinset_google_root_pems },
739   { "domains.google.com", true, false, false, -1, &kPinset_google_root_pems },
740   { "doubleclick.net", true, false, false, -1, &kPinset_google_root_pems },
741   { "download.mozilla.org", false, false, true, 14, &kPinset_mozilla_services },
742   { "drive.google.com", true, false, false, -1, &kPinset_google_root_pems },
743   { "dropbox.com", true, false, false, -1, &kPinset_dropbox },
744   { "dropboxstatic.com", false, true, false, -1, &kPinset_dropbox },
745   { "dropboxusercontent.com", false, true, false, -1, &kPinset_dropbox },
746   { "edit.yahoo.com", true, true, false, -1, &kPinset_yahoo },
747   { "en-maktoob.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
748   { "encrypted.google.com", true, false, false, -1, &kPinset_google_root_pems },
749   { "es.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
750   { "espanol.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
751   { "example.test", true, true, false, -1, &kPinset_test },
752   { "exclude-subdomains.pinning.example.com", false, false, false, 0, &kPinset_mozilla_test },
753   { "facebook.com", false, false, false, -1, &kPinset_facebook },
754   { "fi.google.com", true, false, false, -1, &kPinset_google_root_pems },
755   { "fi.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
756   { "firebaseio.com", true, false, false, -1, &kPinset_google_root_pems },
757   { "fj.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
758   { "fr.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
759   { "g.co", false, false, false, -1, &kPinset_google_root_pems },
760   { "g4w.co", true, false, false, -1, &kPinset_google_root_pems },
761   { "ggpht.com", true, false, false, -1, &kPinset_google_root_pems },
762   { "gl.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
763   { "glass.google.com", true, false, false, -1, &kPinset_google_root_pems },
764   { "gm.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
765   { "gmail.com", false, false, false, -1, &kPinset_google_root_pems },
766   { "goo.gl", true, false, false, -1, &kPinset_google_root_pems },
767   { "google", true, false, false, -1, &kPinset_google_root_pems },
768   { "google-analytics.com", true, false, false, -1, &kPinset_google_root_pems },
769   { "google.ac", true, false, false, -1, &kPinset_google_root_pems },
770   { "google.ad", true, false, false, -1, &kPinset_google_root_pems },
771   { "google.ae", true, false, false, -1, &kPinset_google_root_pems },
772   { "google.af", true, false, false, -1, &kPinset_google_root_pems },
773   { "google.ag", true, false, false, -1, &kPinset_google_root_pems },
774   { "google.am", true, false, false, -1, &kPinset_google_root_pems },
775   { "google.as", true, false, false, -1, &kPinset_google_root_pems },
776   { "google.at", true, false, false, -1, &kPinset_google_root_pems },
777   { "google.az", true, false, false, -1, &kPinset_google_root_pems },
778   { "google.ba", true, false, false, -1, &kPinset_google_root_pems },
779   { "google.be", true, false, false, -1, &kPinset_google_root_pems },
780   { "google.bf", true, false, false, -1, &kPinset_google_root_pems },
781   { "google.bg", true, false, false, -1, &kPinset_google_root_pems },
782   { "google.bi", true, false, false, -1, &kPinset_google_root_pems },
783   { "google.bj", true, false, false, -1, &kPinset_google_root_pems },
784   { "google.bs", true, false, false, -1, &kPinset_google_root_pems },
785   { "google.by", true, false, false, -1, &kPinset_google_root_pems },
786   { "google.ca", true, false, false, -1, &kPinset_google_root_pems },
787   { "google.cat", true, false, false, -1, &kPinset_google_root_pems },
788   { "google.cc", true, false, false, -1, &kPinset_google_root_pems },
789   { "google.cd", true, false, false, -1, &kPinset_google_root_pems },
790   { "google.cf", true, false, false, -1, &kPinset_google_root_pems },
791   { "google.cg", true, false, false, -1, &kPinset_google_root_pems },
792   { "google.ch", true, false, false, -1, &kPinset_google_root_pems },
793   { "google.ci", true, false, false, -1, &kPinset_google_root_pems },
794   { "google.cl", true, false, false, -1, &kPinset_google_root_pems },
795   { "google.cm", true, false, false, -1, &kPinset_google_root_pems },
796   { "google.cn", true, false, false, -1, &kPinset_google_root_pems },
797   { "google.co.ao", true, false, false, -1, &kPinset_google_root_pems },
798   { "google.co.bw", true, false, false, -1, &kPinset_google_root_pems },
799   { "google.co.ck", true, false, false, -1, &kPinset_google_root_pems },
800   { "google.co.cr", true, false, false, -1, &kPinset_google_root_pems },
801   { "google.co.hu", true, false, false, -1, &kPinset_google_root_pems },
802   { "google.co.id", true, false, false, -1, &kPinset_google_root_pems },
803   { "google.co.il", true, false, false, -1, &kPinset_google_root_pems },
804   { "google.co.im", true, false, false, -1, &kPinset_google_root_pems },
805   { "google.co.in", true, false, false, -1, &kPinset_google_root_pems },
806   { "google.co.je", true, false, false, -1, &kPinset_google_root_pems },
807   { "google.co.jp", true, false, false, -1, &kPinset_google_root_pems },
808   { "google.co.ke", true, false, false, -1, &kPinset_google_root_pems },
809   { "google.co.kr", true, false, false, -1, &kPinset_google_root_pems },
810   { "google.co.ls", true, false, false, -1, &kPinset_google_root_pems },
811   { "google.co.ma", true, false, false, -1, &kPinset_google_root_pems },
812   { "google.co.mz", true, false, false, -1, &kPinset_google_root_pems },
813   { "google.co.nz", true, false, false, -1, &kPinset_google_root_pems },
814   { "google.co.th", true, false, false, -1, &kPinset_google_root_pems },
815   { "google.co.tz", true, false, false, -1, &kPinset_google_root_pems },
816   { "google.co.ug", true, false, false, -1, &kPinset_google_root_pems },
817   { "google.co.uk", true, false, false, -1, &kPinset_google_root_pems },
818   { "google.co.uz", true, false, false, -1, &kPinset_google_root_pems },
819   { "google.co.ve", true, false, false, -1, &kPinset_google_root_pems },
820   { "google.co.vi", true, false, false, -1, &kPinset_google_root_pems },
821   { "google.co.za", true, false, false, -1, &kPinset_google_root_pems },
822   { "google.co.zm", true, false, false, -1, &kPinset_google_root_pems },
823   { "google.co.zw", true, false, false, -1, &kPinset_google_root_pems },
824   { "google.com", true, false, false, -1, &kPinset_google_root_pems },
825   { "google.com.af", true, false, false, -1, &kPinset_google_root_pems },
826   { "google.com.ag", true, false, false, -1, &kPinset_google_root_pems },
827   { "google.com.ai", true, false, false, -1, &kPinset_google_root_pems },
828   { "google.com.ar", true, false, false, -1, &kPinset_google_root_pems },
829   { "google.com.au", true, false, false, -1, &kPinset_google_root_pems },
830   { "google.com.bd", true, false, false, -1, &kPinset_google_root_pems },
831   { "google.com.bh", true, false, false, -1, &kPinset_google_root_pems },
832   { "google.com.bn", true, false, false, -1, &kPinset_google_root_pems },
833   { "google.com.bo", true, false, false, -1, &kPinset_google_root_pems },
834   { "google.com.br", true, false, false, -1, &kPinset_google_root_pems },
835   { "google.com.by", true, false, false, -1, &kPinset_google_root_pems },
836   { "google.com.bz", true, false, false, -1, &kPinset_google_root_pems },
837   { "google.com.cn", true, false, false, -1, &kPinset_google_root_pems },
838   { "google.com.co", true, false, false, -1, &kPinset_google_root_pems },
839   { "google.com.cu", true, false, false, -1, &kPinset_google_root_pems },
840   { "google.com.cy", true, false, false, -1, &kPinset_google_root_pems },
841   { "google.com.do", true, false, false, -1, &kPinset_google_root_pems },
842   { "google.com.ec", true, false, false, -1, &kPinset_google_root_pems },
843   { "google.com.eg", true, false, false, -1, &kPinset_google_root_pems },
844   { "google.com.et", true, false, false, -1, &kPinset_google_root_pems },
845   { "google.com.fj", true, false, false, -1, &kPinset_google_root_pems },
846   { "google.com.ge", true, false, false, -1, &kPinset_google_root_pems },
847   { "google.com.gh", true, false, false, -1, &kPinset_google_root_pems },
848   { "google.com.gi", true, false, false, -1, &kPinset_google_root_pems },
849   { "google.com.gr", true, false, false, -1, &kPinset_google_root_pems },
850   { "google.com.gt", true, false, false, -1, &kPinset_google_root_pems },
851   { "google.com.hk", true, false, false, -1, &kPinset_google_root_pems },
852   { "google.com.iq", true, false, false, -1, &kPinset_google_root_pems },
853   { "google.com.jm", true, false, false, -1, &kPinset_google_root_pems },
854   { "google.com.jo", true, false, false, -1, &kPinset_google_root_pems },
855   { "google.com.kh", true, false, false, -1, &kPinset_google_root_pems },
856   { "google.com.kw", true, false, false, -1, &kPinset_google_root_pems },
857   { "google.com.lb", true, false, false, -1, &kPinset_google_root_pems },
858   { "google.com.ly", true, false, false, -1, &kPinset_google_root_pems },
859   { "google.com.mt", true, false, false, -1, &kPinset_google_root_pems },
860   { "google.com.mx", true, false, false, -1, &kPinset_google_root_pems },
861   { "google.com.my", true, false, false, -1, &kPinset_google_root_pems },
862   { "google.com.na", true, false, false, -1, &kPinset_google_root_pems },
863   { "google.com.nf", true, false, false, -1, &kPinset_google_root_pems },
864   { "google.com.ng", true, false, false, -1, &kPinset_google_root_pems },
865   { "google.com.ni", true, false, false, -1, &kPinset_google_root_pems },
866   { "google.com.np", true, false, false, -1, &kPinset_google_root_pems },
867   { "google.com.nr", true, false, false, -1, &kPinset_google_root_pems },
868   { "google.com.om", true, false, false, -1, &kPinset_google_root_pems },
869   { "google.com.pa", true, false, false, -1, &kPinset_google_root_pems },
870   { "google.com.pe", true, false, false, -1, &kPinset_google_root_pems },
871   { "google.com.ph", true, false, false, -1, &kPinset_google_root_pems },
872   { "google.com.pk", true, false, false, -1, &kPinset_google_root_pems },
873   { "google.com.pl", true, false, false, -1, &kPinset_google_root_pems },
874   { "google.com.pr", true, false, false, -1, &kPinset_google_root_pems },
875   { "google.com.py", true, false, false, -1, &kPinset_google_root_pems },
876   { "google.com.qa", true, false, false, -1, &kPinset_google_root_pems },
877   { "google.com.ru", true, false, false, -1, &kPinset_google_root_pems },
878   { "google.com.sa", true, false, false, -1, &kPinset_google_root_pems },
879   { "google.com.sb", true, false, false, -1, &kPinset_google_root_pems },
880   { "google.com.sg", true, false, false, -1, &kPinset_google_root_pems },
881   { "google.com.sl", true, false, false, -1, &kPinset_google_root_pems },
882   { "google.com.sv", true, false, false, -1, &kPinset_google_root_pems },
883   { "google.com.tj", true, false, false, -1, &kPinset_google_root_pems },
884   { "google.com.tn", true, false, false, -1, &kPinset_google_root_pems },
885   { "google.com.tr", true, false, false, -1, &kPinset_google_root_pems },
886   { "google.com.tw", true, false, false, -1, &kPinset_google_root_pems },
887   { "google.com.ua", true, false, false, -1, &kPinset_google_root_pems },
888   { "google.com.uy", true, false, false, -1, &kPinset_google_root_pems },
889   { "google.com.vc", true, false, false, -1, &kPinset_google_root_pems },
890   { "google.com.ve", true, false, false, -1, &kPinset_google_root_pems },
891   { "google.com.vn", true, false, false, -1, &kPinset_google_root_pems },
892   { "google.cv", true, false, false, -1, &kPinset_google_root_pems },
893   { "google.cz", true, false, false, -1, &kPinset_google_root_pems },
894   { "google.de", true, false, false, -1, &kPinset_google_root_pems },
895   { "google.dj", true, false, false, -1, &kPinset_google_root_pems },
896   { "google.dk", true, false, false, -1, &kPinset_google_root_pems },
897   { "google.dm", true, false, false, -1, &kPinset_google_root_pems },
898   { "google.dz", true, false, false, -1, &kPinset_google_root_pems },
899   { "google.ee", true, false, false, -1, &kPinset_google_root_pems },
900   { "google.es", true, false, false, -1, &kPinset_google_root_pems },
901   { "google.fi", true, false, false, -1, &kPinset_google_root_pems },
902   { "google.fm", true, false, false, -1, &kPinset_google_root_pems },
903   { "google.fr", true, false, false, -1, &kPinset_google_root_pems },
904   { "google.ga", true, false, false, -1, &kPinset_google_root_pems },
905   { "google.ge", true, false, false, -1, &kPinset_google_root_pems },
906   { "google.gg", true, false, false, -1, &kPinset_google_root_pems },
907   { "google.gl", true, false, false, -1, &kPinset_google_root_pems },
908   { "google.gm", true, false, false, -1, &kPinset_google_root_pems },
909   { "google.gp", true, false, false, -1, &kPinset_google_root_pems },
910   { "google.gr", true, false, false, -1, &kPinset_google_root_pems },
911   { "google.gy", true, false, false, -1, &kPinset_google_root_pems },
912   { "google.hk", true, false, false, -1, &kPinset_google_root_pems },
913   { "google.hn", true, false, false, -1, &kPinset_google_root_pems },
914   { "google.hr", true, false, false, -1, &kPinset_google_root_pems },
915   { "google.ht", true, false, false, -1, &kPinset_google_root_pems },
916   { "google.hu", true, false, false, -1, &kPinset_google_root_pems },
917   { "google.ie", true, false, false, -1, &kPinset_google_root_pems },
918   { "google.im", true, false, false, -1, &kPinset_google_root_pems },
919   { "google.info", true, false, false, -1, &kPinset_google_root_pems },
920   { "google.iq", true, false, false, -1, &kPinset_google_root_pems },
921   { "google.is", true, false, false, -1, &kPinset_google_root_pems },
922   { "google.it", true, false, false, -1, &kPinset_google_root_pems },
923   { "google.it.ao", true, false, false, -1, &kPinset_google_root_pems },
924   { "google.je", true, false, false, -1, &kPinset_google_root_pems },
925   { "google.jo", true, false, false, -1, &kPinset_google_root_pems },
926   { "google.jobs", true, false, false, -1, &kPinset_google_root_pems },
927   { "google.jp", true, false, false, -1, &kPinset_google_root_pems },
928   { "google.kg", true, false, false, -1, &kPinset_google_root_pems },
929   { "google.ki", true, false, false, -1, &kPinset_google_root_pems },
930   { "google.kz", true, false, false, -1, &kPinset_google_root_pems },
931   { "google.la", true, false, false, -1, &kPinset_google_root_pems },
932   { "google.li", true, false, false, -1, &kPinset_google_root_pems },
933   { "google.lk", true, false, false, -1, &kPinset_google_root_pems },
934   { "google.lt", true, false, false, -1, &kPinset_google_root_pems },
935   { "google.lu", true, false, false, -1, &kPinset_google_root_pems },
936   { "google.lv", true, false, false, -1, &kPinset_google_root_pems },
937   { "google.md", true, false, false, -1, &kPinset_google_root_pems },
938   { "google.me", true, false, false, -1, &kPinset_google_root_pems },
939   { "google.mg", true, false, false, -1, &kPinset_google_root_pems },
940   { "google.mk", true, false, false, -1, &kPinset_google_root_pems },
941   { "google.ml", true, false, false, -1, &kPinset_google_root_pems },
942   { "google.mn", true, false, false, -1, &kPinset_google_root_pems },
943   { "google.ms", true, false, false, -1, &kPinset_google_root_pems },
944   { "google.mu", true, false, false, -1, &kPinset_google_root_pems },
945   { "google.mv", true, false, false, -1, &kPinset_google_root_pems },
946   { "google.mw", true, false, false, -1, &kPinset_google_root_pems },
947   { "google.ne", true, false, false, -1, &kPinset_google_root_pems },
948   { "google.ne.jp", true, false, false, -1, &kPinset_google_root_pems },
949   { "google.net", true, false, false, -1, &kPinset_google_root_pems },
950   { "google.nl", true, false, false, -1, &kPinset_google_root_pems },
951   { "google.no", true, false, false, -1, &kPinset_google_root_pems },
952   { "google.nr", true, false, false, -1, &kPinset_google_root_pems },
953   { "google.nu", true, false, false, -1, &kPinset_google_root_pems },
954   { "google.off.ai", true, false, false, -1, &kPinset_google_root_pems },
955   { "google.pk", true, false, false, -1, &kPinset_google_root_pems },
956   { "google.pl", true, false, false, -1, &kPinset_google_root_pems },
957   { "google.pn", true, false, false, -1, &kPinset_google_root_pems },
958   { "google.ps", true, false, false, -1, &kPinset_google_root_pems },
959   { "google.pt", true, false, false, -1, &kPinset_google_root_pems },
960   { "google.ro", true, false, false, -1, &kPinset_google_root_pems },
961   { "google.rs", true, false, false, -1, &kPinset_google_root_pems },
962   { "google.ru", true, false, false, -1, &kPinset_google_root_pems },
963   { "google.rw", true, false, false, -1, &kPinset_google_root_pems },
964   { "google.sc", true, false, false, -1, &kPinset_google_root_pems },
965   { "google.se", true, false, false, -1, &kPinset_google_root_pems },
966   { "google.sh", true, false, false, -1, &kPinset_google_root_pems },
967   { "google.si", true, false, false, -1, &kPinset_google_root_pems },
968   { "google.sk", true, false, false, -1, &kPinset_google_root_pems },
969   { "google.sm", true, false, false, -1, &kPinset_google_root_pems },
970   { "google.sn", true, false, false, -1, &kPinset_google_root_pems },
971   { "google.so", true, false, false, -1, &kPinset_google_root_pems },
972   { "google.st", true, false, false, -1, &kPinset_google_root_pems },
973   { "google.td", true, false, false, -1, &kPinset_google_root_pems },
974   { "google.tg", true, false, false, -1, &kPinset_google_root_pems },
975   { "google.tk", true, false, false, -1, &kPinset_google_root_pems },
976   { "google.tl", true, false, false, -1, &kPinset_google_root_pems },
977   { "google.tm", true, false, false, -1, &kPinset_google_root_pems },
978   { "google.tn", true, false, false, -1, &kPinset_google_root_pems },
979   { "google.to", true, false, false, -1, &kPinset_google_root_pems },
980   { "google.tt", true, false, false, -1, &kPinset_google_root_pems },
981   { "google.us", true, false, false, -1, &kPinset_google_root_pems },
982   { "google.uz", true, false, false, -1, &kPinset_google_root_pems },
983   { "google.vg", true, false, false, -1, &kPinset_google_root_pems },
984   { "google.vu", true, false, false, -1, &kPinset_google_root_pems },
985   { "google.ws", true, false, false, -1, &kPinset_google_root_pems },
986   { "googleadservices.com", true, false, false, -1, &kPinset_google_root_pems },
987   { "googleapis.com", true, false, false, -1, &kPinset_google_root_pems },
988   { "googlecode.com", true, false, false, -1, &kPinset_google_root_pems },
989   { "googlecommerce.com", true, false, false, -1, &kPinset_google_root_pems },
990   { "googlegroups.com", true, false, false, -1, &kPinset_google_root_pems },
991   { "googlemail.com", false, false, false, -1, &kPinset_google_root_pems },
992   { "googleplex.com", true, false, false, -1, &kPinset_google_root_pems },
993   { "googlesource.com", true, false, false, -1, &kPinset_google_root_pems },
994   { "googlesyndication.com", true, false, false, -1, &kPinset_google_root_pems },
995   { "googletagmanager.com", true, false, false, -1, &kPinset_google_root_pems },
996   { "googletagservices.com", true, false, false, -1, &kPinset_google_root_pems },
997   { "googleusercontent.com", true, false, false, -1, &kPinset_google_root_pems },
998   { "googlevideo.com", true, false, false, -1, &kPinset_google_root_pems },
999   { "googleweblight.com", true, false, false, -1, &kPinset_google_root_pems },
1000   { "goto.google.com", true, false, false, -1, &kPinset_google_root_pems },
1001   { "gr.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
1002   { "groups.google.com", true, false, false, -1, &kPinset_google_root_pems },
1003   { "gstatic.cn", true, false, false, -1, &kPinset_google_root_pems },
1004   { "gstatic.com", true, false, false, -1, &kPinset_google_root_pems },
1005   { "gvt1.com", true, false, false, -1, &kPinset_google_root_pems },
1006   { "gvt2.com", true, false, false, -1, &kPinset_google_root_pems },
1007   { "gvt3.com", true, false, false, -1, &kPinset_google_root_pems },
1008   { "hangout", true, false, false, -1, &kPinset_google_root_pems },
1009   { "hangouts.google.com", true, false, false, -1, &kPinset_google_root_pems },
1010   { "history.google.com", true, false, false, -1, &kPinset_google_root_pems },
1011   { "hk.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
1012   { "hn.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
1013   { "hostedtalkgadget.google.com", true, false, false, -1, &kPinset_google_root_pems },
1014   { "hu.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
1015   { "id.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
1016   { "ie.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
1017   { "in.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
1018   { "inbox.google.com", true, false, false, -1, &kPinset_google_root_pems },
1019   { "include-subdomains.pinning.example.com", true, false, false, -1, &kPinset_mozilla_test },
1020   { "it.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
1021   { "kr.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
1022   { "kz.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
1023   { "li.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
1024   { "login.corp.google.com", true, false, false, -1, &kPinset_google_root_pems },
1025   { "login.yahoo.com", true, true, false, -1, &kPinset_yahoo },
1026   { "lt.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
1027   { "lu.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
1028   { "lv.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
1029   { "m.facebook.com", true, false, false, -1, &kPinset_facebook },
1030   { "mail-settings.google.com", true, false, false, -1, &kPinset_google_root_pems },
1031   { "mail.google.com", true, false, false, -1, &kPinset_google_root_pems },
1032   { "mail.yahoo.com", false, true, false, -1, &kPinset_yahoo },
1033   { "maktoob.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
1034   { "malaysia.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
1035   { "market.android.com", true, false, false, -1, &kPinset_google_root_pems },
1036   { "mbasic.facebook.com", true, false, false, -1, &kPinset_facebook },
1037   { "meet.google.com", true, false, false, -1, &kPinset_google_root_pems },
1038   { "messenger.com", false, false, false, -1, &kPinset_facebook },
1039   { "mobile.twitter.com", true, false, false, -1, &kPinset_twitterCom },
1040   { "mt.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
1041   { "mtouch.facebook.com", true, false, false, -1, &kPinset_facebook },
1042   { "mu.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
1043   { "mw.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
1044   { "mx.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
1045   { "myaccount.google.com", true, false, false, -1, &kPinset_google_root_pems },
1046   { "myactivity.google.com", true, false, false, -1, &kPinset_google_root_pems },
1047   { "ni.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
1048   { "nl.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
1049   { "no.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
1050   { "np.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
1051   { "nz.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
1052   { "oauth.twitter.com", true, false, false, -1, &kPinset_twitterCom },
1053   { "pa.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
1054   { "passwords.google.com", true, false, false, -1, &kPinset_google_root_pems },
1055   { "payments.google.com", true, false, false, -1, &kPinset_google_root_pems },
1056   { "pe.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
1057   { "ph.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
1058   { "pinning-test.badssl.com", true, false, false, -1, &kPinset_test },
1059   { "pinningtest.appspot.com", true, false, false, -1, &kPinset_test },
1060   { "pixel.facebook.com", true, false, false, -1, &kPinset_facebook },
1061   { "pixel.google.com", true, false, false, -1, &kPinset_google_root_pems },
1062   { "pk.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
1063   { "pl.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
1064   { "platform.twitter.com", true, false, false, -1, &kPinset_twitterCDN },
1065   { "play.google.com", true, false, false, -1, &kPinset_google_root_pems },
1066   { "plus.google.com", true, false, false, -1, &kPinset_google_root_pems },
1067   { "plus.sandbox.google.com", true, false, false, -1, &kPinset_google_root_pems },
1068   { "pr.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
1069   { "profiles.google.com", true, false, false, -1, &kPinset_google_root_pems },
1070   { "py.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
1071   { "qc.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
1072   { "remotedesktop.corp.google.com", true, false, false, -1, &kPinset_google_root_pems },
1073   { "research.facebook.com", true, false, false, -1, &kPinset_facebook },
1074   { "ro.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
1075   { "ru.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
1076   { "rw.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
1077   { "script.google.com", true, false, false, -1, &kPinset_google_root_pems },
1078   { "se.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
1079   { "search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
1080   { "secure.facebook.com", true, false, false, -1, &kPinset_facebook },
1081   { "security.google.com", true, false, false, -1, &kPinset_google_root_pems },
1082   { "services.mozilla.com", true, false, true, 6, &kPinset_mozilla_services },
1083   { "sg.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
1084   { "sites.google.com", true, false, false, -1, &kPinset_google_root_pems },
1085   { "spideroak.com", true, false, false, -1, &kPinset_spideroak },
1086   { "spreadsheets.google.com", true, false, false, -1, &kPinset_google_root_pems },
1087   { "static.googleadsserving.cn", true, false, false, -1, &kPinset_google_root_pems },
1088   { "stats.g.doubleclick.net", true, false, false, -1, &kPinset_google_root_pems },
1089   { "sv.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
1090   { "swehack.org", true, true, false, -1, &kPinset_swehackCom },
1091   { "sync.services.mozilla.com", true, false, true, 13, &kPinset_mozilla_services },
1092   { "t.facebook.com", true, false, false, -1, &kPinset_facebook },
1093   { "tablet.facebook.com", true, false, false, -1, &kPinset_facebook },
1094   { "talk.google.com", true, false, false, -1, &kPinset_google_root_pems },
1095   { "talkgadget.google.com", true, false, false, -1, &kPinset_google_root_pems },
1096   { "telemetry.mozilla.org", true, true, true, 8, &kPinset_mozilla_services },
1097   { "test-mode.pinning.example.com", true, true, false, -1, &kPinset_mozilla_test },
1098   { "testpilot.firefox.com", false, false, true, 9, &kPinset_mozilla_services },
1099   { "th.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
1100   { "torproject.org", false, false, false, -1, &kPinset_tor },
1101   { "touch.facebook.com", true, false, false, -1, &kPinset_facebook },
1102   { "tr.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
1103   { "translate.googleapis.com", true, false, false, -1, &kPinset_google_root_pems },
1104   { "tv.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
1105   { "tw.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
1106   { "twimg.com", true, false, false, -1, &kPinset_twitterCDN },
1107   { "twitter.com", true, false, false, -1, &kPinset_twitterCDN },
1108   { "ua.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
1109   { "uk.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
1110   { "upload.facebook.com", true, false, false, -1, &kPinset_facebook },
1111   { "urchin.com", true, false, false, -1, &kPinset_google_root_pems },
1112   { "uy.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
1113   { "uz.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
1114   { "ve.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
1115   { "vn.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
1116   { "w-spotlight.appspot.com", true, false, false, -1, &kPinset_google_root_pems },
1117   { "wallet.google.com", true, false, false, -1, &kPinset_google_root_pems },
1118   { "webfilings-eu-mirror.appspot.com", true, false, false, -1, &kPinset_google_root_pems },
1119   { "webfilings-eu.appspot.com", true, false, false, -1, &kPinset_google_root_pems },
1120   { "webfilings-mirror-hrd.appspot.com", true, false, false, -1, &kPinset_google_root_pems },
1121   { "webfilings.appspot.com", true, false, false, -1, &kPinset_google_root_pems },
1122   { "wf-bigsky-master.appspot.com", true, false, false, -1, &kPinset_google_root_pems },
1123   { "wf-demo-eu.appspot.com", true, false, false, -1, &kPinset_google_root_pems },
1124   { "wf-demo-hrd.appspot.com", true, false, false, -1, &kPinset_google_root_pems },
1125   { "wf-dogfood-hrd.appspot.com", true, false, false, -1, &kPinset_google_root_pems },
1126   { "wf-pentest.appspot.com", true, false, false, -1, &kPinset_google_root_pems },
1127   { "wf-staging-hr.appspot.com", true, false, false, -1, &kPinset_google_root_pems },
1128   { "wf-training-hrd.appspot.com", true, false, false, -1, &kPinset_google_root_pems },
1129   { "wf-training-master.appspot.com", true, false, false, -1, &kPinset_google_root_pems },
1130   { "wf-trial-hrd.appspot.com", true, false, false, -1, &kPinset_google_root_pems },
1131   { "withgoogle.com", true, false, false, -1, &kPinset_google_root_pems },
1132   { "withyoutube.com", true, false, false, -1, &kPinset_google_root_pems },
1133   { "www.dropbox.com", true, false, false, -1, &kPinset_dropbox },
1134   { "www.facebook.com", true, false, false, -1, &kPinset_facebook },
1135   { "www.g.co", false, false, false, -1, &kPinset_google_root_pems },
1136   { "www.gmail.com", false, false, false, -1, &kPinset_google_root_pems },
1137   { "www.googlegroups.com", true, false, false, -1, &kPinset_google_root_pems },
1138   { "www.googlemail.com", false, false, false, -1, &kPinset_google_root_pems },
1139   { "www.messenger.com", true, false, false, -1, &kPinset_facebook },
1140   { "www.torproject.org", true, false, false, -1, &kPinset_tor },
1141   { "www.tumblr.com", false, true, false, -1, &kPinset_tumblr },
1142   { "www.twitter.com", true, false, false, -1, &kPinset_twitterCom },
1143   { "xa.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
1144   { "xbrlsuccess.appspot.com", true, false, false, -1, &kPinset_google_root_pems },
1145   { "xn--7xa.google.com", true, false, false, -1, &kPinset_google_root_pems },
1146   { "youtu.be", true, false, false, -1, &kPinset_google_root_pems },
1147   { "youtube-nocookie.com", true, false, false, -1, &kPinset_google_root_pems },
1148   { "youtube.com", true, false, false, -1, &kPinset_google_root_pems },
1149   { "ytimg.com", true, false, false, -1, &kPinset_google_root_pems },
1150   { "za.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
1151   { "zh.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
1152 };
1153 
1154 // Pinning Preload List Length = 488;
1155 
1156 static const int32_t kUnknownId = -1;
1157 
1158 static const PRTime kPreloadPKPinsExpirationTime = INT64_C(1575551133599000);
1159