1 /* This Source Code Form is subject to the terms of the Mozilla Public
2  * License, v. 2.0. If a copy of the MPL was not distributed with this
3  * file, You can obtain one at http://mozilla.org/MPL/2.0/. */
4 
5 /*****************************************************************************/
6 /* This is an automatically generated file. If you're not                    */
7 /* PublicKeyPinningService.cpp, you shouldn't be #including it.              */
8 /*****************************************************************************/
9 #include <stdint.h>
10 /* AddTrust External Root */
11 static const char kAddTrust_External_RootFingerprint[] =
12   "lCppFqbkrlJ3EcVFAkeip0+44VaoJUymbnOaEUk7tEU=";
13 
14 /* AddTrust Low-Value Services Root */
15 static const char kAddTrust_Low_Value_Services_RootFingerprint[] =
16   "BStocQfshOhzA4JFLsKidFF0XXSFpX1vRk4Np6G2ryo=";
17 
18 /* AffirmTrust Commercial */
19 static const char kAffirmTrust_CommercialFingerprint[] =
20   "bEZLmlsjOl6HTadlwm8EUBDS3c/0V5TwtMfkqvpQFJU=";
21 
22 /* AffirmTrust Networking */
23 static const char kAffirmTrust_NetworkingFingerprint[] =
24   "lAcq0/WPcPkwmOWl9sBMlscQvYSdgxhJGa6Q64kK5AA=";
25 
26 /* AffirmTrust Premium */
27 static const char kAffirmTrust_PremiumFingerprint[] =
28   "x/Q7TPW3FWgpT4IrU3YmBfbd0Vyt7Oc56eLDy6YenWc=";
29 
30 /* AffirmTrust Premium ECC */
31 static const char kAffirmTrust_Premium_ECCFingerprint[] =
32   "MhmwkRT/SVo+tusAwu/qs0ACrl8KVsdnnqCHo/oDfk8=";
33 
34 /* Baltimore CyberTrust Root */
35 static const char kBaltimore_CyberTrust_RootFingerprint[] =
36   "Y9mvm0exBk1JoQ57f9Vm28jKo5lFm/woKcVxrYxu80o=";
37 
38 /* COMODO Certification Authority */
39 static const char kCOMODO_Certification_AuthorityFingerprint[] =
40   "AG1751Vd2CAmRCxPGieoDomhmJy4ezREjtIZTBgZbV4=";
41 
42 /* COMODO ECC Certification Authority */
43 static const char kCOMODO_ECC_Certification_AuthorityFingerprint[] =
44   "58qRu/uxh4gFezqAcERupSkRYBlBAvfcw7mEjGPLnNU=";
45 
46 /* COMODO RSA Certification Authority */
47 static const char kCOMODO_RSA_Certification_AuthorityFingerprint[] =
48   "grX4Ta9HpZx6tSHkmCrvpApTQGo67CYDnvprLg5yRME=";
49 
50 /* Comodo AAA Services root */
51 static const char kComodo_AAA_Services_rootFingerprint[] =
52   "vRU+17BDT2iGsXvOi76E7TQMcTLXAqj0+jGPdW7L1vM=";
53 
54 /* Cybertrust Global Root */
55 static const char kCybertrust_Global_RootFingerprint[] =
56   "foeCwVDOOVL4AuY2AjpdPpW7XWjjPoWtsroXgSXOvxU=";
57 
58 /* DST Root CA X3 */
59 static const char kDST_Root_CA_X3Fingerprint[] =
60   "Vjs8r4z+80wjNcr1YKepWQboSIRi63WsWXhIMN+eWys=";
61 
62 /* DigiCert Assured ID Root CA */
63 static const char kDigiCert_Assured_ID_Root_CAFingerprint[] =
64   "I/Lt/z7ekCWanjD0Cvj5EqXls2lOaThEA0H2Bg4BT/o=";
65 
66 /* DigiCert Assured ID Root G2 */
67 static const char kDigiCert_Assured_ID_Root_G2Fingerprint[] =
68   "8ca6Zwz8iOTfUpc8rkIPCgid1HQUT+WAbEIAZOFZEik=";
69 
70 /* DigiCert Assured ID Root G3 */
71 static const char kDigiCert_Assured_ID_Root_G3Fingerprint[] =
72   "Fe7TOVlLME+M+Ee0dzcdjW/sYfTbKwGvWJ58U7Ncrkw=";
73 
74 /* DigiCert Global Root CA */
75 static const char kDigiCert_Global_Root_CAFingerprint[] =
76   "r/mIkG3eEpVdm+u/ko/cwxzOMo1bk4TyHIlByibiA5E=";
77 
78 /* DigiCert Global Root G2 */
79 static const char kDigiCert_Global_Root_G2Fingerprint[] =
80   "i7WTqTvh0OioIruIfFR4kMPnBqrS2rdiVPl/s2uC/CY=";
81 
82 /* DigiCert Global Root G3 */
83 static const char kDigiCert_Global_Root_G3Fingerprint[] =
84   "uUwZgwDOxcBXrQcntwu+kYFpkiVkOaezL0WYEZ3anJc=";
85 
86 /* DigiCert High Assurance EV Root CA */
87 static const char kDigiCert_High_Assurance_EV_Root_CAFingerprint[] =
88   "WoiWRyIOVNa9ihaBciRSC7XHjliYS9VwUGOIud4PB18=";
89 
90 /* DigiCert Trusted Root G4 */
91 static const char kDigiCert_Trusted_Root_G4Fingerprint[] =
92   "Wd8xe/qfTwq3ylFNd3IpaqLHZbh2ZNCLluVzmeNkcpw=";
93 
94 /* End Entity Test Cert */
95 static const char kEnd_Entity_Test_CertFingerprint[] =
96   "VCIlmPM9NkgFQtrs4Oa5TeFcDu6MWRTKSNdePEhOgD8=";
97 
98 /* Entrust Root Certification Authority */
99 static const char kEntrust_Root_Certification_AuthorityFingerprint[] =
100   "bb+uANN7nNc/j7R95lkXrwDg3d9C286sIMF8AnXuIJU=";
101 
102 /* Entrust Root Certification Authority - EC1 */
103 static const char kEntrust_Root_Certification_Authority___EC1Fingerprint[] =
104   "/qK31kX7pz11PB7Jp4cMQOH3sMVh6Se5hb9xGGbjbyI=";
105 
106 /* Entrust Root Certification Authority - G2 */
107 static const char kEntrust_Root_Certification_Authority___G2Fingerprint[] =
108   "du6FkDdMcVQ3u8prumAo6t3i3G27uMP2EOhR8R0at/U=";
109 
110 /* Entrust.net Premium 2048 Secure Server CA */
111 static const char kEntrust_net_Premium_2048_Secure_Server_CAFingerprint[] =
112   "HqPF5D7WbC2imDpCpKebHpBnhs6fG1hiFBmgBGOofTg=";
113 
114 /* FacebookBackup */
115 static const char kFacebookBackupFingerprint[] =
116   "q4PO2G2cbkZhZ82+JgmRUyGMoAeozA+BSXVXQWB8XWQ=";
117 
118 /* GOOGLE_PIN_AddTrustPublicCARoot */
119 static const char kGOOGLE_PIN_AddTrustPublicCARootFingerprint[] =
120   "OGHXtpYfzbISBFb/b8LrdwSxp0G0vZM6g3b14ZFcppg=";
121 
122 /* GOOGLE_PIN_AddTrustQualifiedCARoot */
123 static const char kGOOGLE_PIN_AddTrustQualifiedCARootFingerprint[] =
124   "xzr8Lrp3DQy8HuQfJStS6Kk9ErctzOwDHY2DnL+Bink=";
125 
126 /* GOOGLE_PIN_COMODORSADomainValidationSecureServerCA */
127 static const char kGOOGLE_PIN_COMODORSADomainValidationSecureServerCAFingerprint[] =
128   "klO23nT2ehFDXCfx3eHTDRESMz3asj1muO+4aIdjiuY=";
129 
130 /* GOOGLE_PIN_DigiCertECCSecureServerCA */
131 static const char kGOOGLE_PIN_DigiCertECCSecureServerCAFingerprint[] =
132   "PZXN3lRAy+8tBKk2Ox6F7jIlnzr2Yzmwqc3JnyfXoCw=";
133 
134 /* GOOGLE_PIN_Entrust_SSL */
135 static const char kGOOGLE_PIN_Entrust_SSLFingerprint[] =
136   "nsxRNo6G40YPZsKV5JQt1TCA8nseQQr/LRqp1Oa8fnw=";
137 
138 /* GOOGLE_PIN_GTECyberTrustGlobalRoot */
139 static const char kGOOGLE_PIN_GTECyberTrustGlobalRootFingerprint[] =
140   "EGn6R6CqT4z3ERscrqNl7q7RC//zJmDe9uBhS/rnCHU=";
141 
142 /* GOOGLE_PIN_GTSCA1O1 */
143 static const char kGOOGLE_PIN_GTSCA1O1Fingerprint[] =
144   "YZPgTZ+woNCCCIW3LH2CxQeLzB/1m42QcCTBSdgayjs=";
145 
146 /* GOOGLE_PIN_GeoTrustGlobal2 */
147 static const char kGOOGLE_PIN_GeoTrustGlobal2Fingerprint[] =
148   "F3VaXClfPS1y5vAxofB/QAxYi55YKyLxfq4xoVkNEYU=";
149 
150 /* GOOGLE_PIN_GoDaddySecure */
151 static const char kGOOGLE_PIN_GoDaddySecureFingerprint[] =
152   "MrZLZnJ6IGPkBm87lYywqu5Xal7O/ZUzmbuIdHMdlYc=";
153 
154 /* GOOGLE_PIN_R3LetsEncrypt */
155 static const char kGOOGLE_PIN_R3LetsEncryptFingerprint[] =
156   "jQJTbIh0grw0/1TkHSumWb+Fs0Ggogr621gT3PvPKG0=";
157 
158 /* GOOGLE_PIN_R4LetsEncrypt */
159 static const char kGOOGLE_PIN_R4LetsEncryptFingerprint[] =
160   "5VReIRNHJBiRxVSgOTTN6bdJZkpZ0m1hX+WPd5kPLQM=";
161 
162 /* GOOGLE_PIN_RapidSSL */
163 static const char kGOOGLE_PIN_RapidSSLFingerprint[] =
164   "lT09gPUeQfbYrlxRtpsHrjDblj9Rpz+u7ajfCrg4qDM=";
165 
166 /* GOOGLE_PIN_SecureCertificateServices */
167 static const char kGOOGLE_PIN_SecureCertificateServicesFingerprint[] =
168   "RpHL/ehKa2BS3b4VK7DCFq4lqG5XR4E9vA8UfzOFcL4=";
169 
170 /* GOOGLE_PIN_SymantecClass3EVG3 */
171 static const char kGOOGLE_PIN_SymantecClass3EVG3Fingerprint[] =
172   "gMxWOrX4PMQesK9qFNbYBxjBfjUvlkn/vN1n+L9lE5E=";
173 
174 /* GOOGLE_PIN_TrustedCertificateServices */
175 static const char kGOOGLE_PIN_TrustedCertificateServicesFingerprint[] =
176   "4tiR77c4ZpEF1TDeXtcuKyrD9KZweLU0mz/ayklvXrg=";
177 
178 /* GOOGLE_PIN_UTNDATACorpSGC */
179 static const char kGOOGLE_PIN_UTNDATACorpSGCFingerprint[] =
180   "QAL80xHQczFWfnG82XHkYEjI3OjRZZcRdTs9qiommvo=";
181 
182 /* GOOGLE_PIN_UTNUSERFirstClientAuthenticationandEmail */
183 static const char kGOOGLE_PIN_UTNUSERFirstClientAuthenticationandEmailFingerprint[] =
184   "Laj56jRU0hFGRko/nQKNxMf7tXscUsc8KwVyovWZotM=";
185 
186 /* GOOGLE_PIN_UTNUSERFirstHardware */
187 static const char kGOOGLE_PIN_UTNUSERFirstHardwareFingerprint[] =
188   "TUDnr0MEoJ3of7+YliBMBVFB4/gJsv5zO7IxD9+YoWI=";
189 
190 /* GOOGLE_PIN_UTNUSERFirstObject */
191 static const char kGOOGLE_PIN_UTNUSERFirstObjectFingerprint[] =
192   "D+FMJksXu28NZT56cOs2Pb9UvhWAOe3a5cJXEd9IwQM=";
193 
194 /* GOOGLE_PIN_VeriSignClass1 */
195 static const char kGOOGLE_PIN_VeriSignClass1Fingerprint[] =
196   "LclHC+Y+9KzxvYKGCUArt7h72ZY4pkOTTohoLRvowwg=";
197 
198 /* GOOGLE_PIN_VeriSignClass2_G2 */
199 static const char kGOOGLE_PIN_VeriSignClass2_G2Fingerprint[] =
200   "2oALgLKofTmeZvoZ1y/fSZg7R9jPMix8eVA6DH4o/q8=";
201 
202 /* GOOGLE_PIN_VeriSignClass3_G2 */
203 static const char kGOOGLE_PIN_VeriSignClass3_G2Fingerprint[] =
204   "AjyBzOjnxk+pQtPBUEhwfTXZu1uH9PVExb8bxWQ68vo=";
205 
206 /* GOOGLE_PIN_VeriSignClass4_G3 */
207 static const char kGOOGLE_PIN_VeriSignClass4_G3Fingerprint[] =
208   "VnuCEf0g09KD7gzXzgZyy52ZvFtIeljJ1U7Gf3fUqPU=";
209 
210 /* GTS Root R1 */
211 static const char kGTS_Root_R1Fingerprint[] =
212   "hxqRlPTu1bMS/0DITB1SSu0vd4u/8l8TjPgfaAp63Gc=";
213 
214 /* GTS Root R2 */
215 static const char kGTS_Root_R2Fingerprint[] =
216   "Vfd95BwDeSQo+NUYxVEEIlvkOlWY2SalKK1lPhzOx78=";
217 
218 /* GTS Root R3 */
219 static const char kGTS_Root_R3Fingerprint[] =
220   "QXnt2YHvdHR3tJYmQIr0Paosp6t/nggsEGD4QJZ3Q0g=";
221 
222 /* GTS Root R4 */
223 static const char kGTS_Root_R4Fingerprint[] =
224   "mEflZT5enoR1FuXLgYYGqnVEoZvmf9c2bVBpiOjYQ0c=";
225 
226 /* GeoTrust Global CA */
227 static const char kGeoTrust_Global_CAFingerprint[] =
228   "h6801m+z8v3zbgkRHpq6L29Esgfzhj89C1SyUCOQmqU=";
229 
230 /* GeoTrust Primary Certification Authority */
231 static const char kGeoTrust_Primary_Certification_AuthorityFingerprint[] =
232   "SQVGZiOrQXi+kqxcvWWE96HhfydlLVqFr4lQTqI5qqo=";
233 
234 /* GeoTrust Primary Certification Authority - G2 */
235 static const char kGeoTrust_Primary_Certification_Authority___G2Fingerprint[] =
236   "vPtEqrmtAhAVcGtBIep2HIHJ6IlnWQ9vlK50TciLePs=";
237 
238 /* GeoTrust Primary Certification Authority - G3 */
239 static const char kGeoTrust_Primary_Certification_Authority___G3Fingerprint[] =
240   "q5hJUnat8eyv8o81xTBIeB5cFxjaucjmelBPT2pRMo8=";
241 
242 /* GeoTrust Universal CA */
243 static const char kGeoTrust_Universal_CAFingerprint[] =
244   "lpkiXF3lLlbN0y3y6W0c/qWqPKC7Us2JM8I7XCdEOCA=";
245 
246 /* GeoTrust Universal CA 2 */
247 static const char kGeoTrust_Universal_CA_2Fingerprint[] =
248   "fKoDRlEkWQxgHlZ+UhSOlSwM/+iQAFMP4NlbbVDqrkE=";
249 
250 /* GlobalSign ECC Root CA - R4 */
251 static const char kGlobalSign_ECC_Root_CA___R4Fingerprint[] =
252   "CLOmM1/OXvSPjw5UOYbAf9GKOxImEp9hhku9W90fHMk=";
253 
254 /* GlobalSign ECC Root CA - R5 */
255 static const char kGlobalSign_ECC_Root_CA___R5Fingerprint[] =
256   "fg6tdrtoGdwvVFEahDVPboswe53YIFjqbABPAdndpd8=";
257 
258 /* GlobalSign Root CA */
259 static const char kGlobalSign_Root_CAFingerprint[] =
260   "K87oWBWM9UZfyddvDfoxL+8lpNyoUB2ptGtn0fv6G2Q=";
261 
262 /* GlobalSign Root CA - R2 */
263 static const char kGlobalSign_Root_CA___R2Fingerprint[] =
264   "iie1VXtL7HzAMF+/PVPR9xzT80kQxdZeJ+zduCB3uj0=";
265 
266 /* GlobalSign Root CA - R3 */
267 static const char kGlobalSign_Root_CA___R3Fingerprint[] =
268   "cGuxAXyFXFkWm61cF4HPWX8S0srS9j0aSqN0k4AP+4A=";
269 
270 /* Go Daddy Class 2 CA */
271 static const char kGo_Daddy_Class_2_CAFingerprint[] =
272   "VjLZe/p3W/PJnd6lL8JVNBCGQBZynFLdZSTIqcO0SJ8=";
273 
274 /* Go Daddy Root Certificate Authority - G2 */
275 static const char kGo_Daddy_Root_Certificate_Authority___G2Fingerprint[] =
276   "Ko8tivDrEjiY90yGasP6ZpBU4jwXvHqVvQI0GS3GNdA=";
277 
278 /* GoogleBackup2048 */
279 static const char kGoogleBackup2048Fingerprint[] =
280   "IPMbDAjLVSGntGO3WP53X/zilCVndez5YJ2+vJvhJsA=";
281 
282 /* ISRG Root X1 */
283 static const char kISRG_Root_X1Fingerprint[] =
284   "C5+lpZ7tcVwmwQIMcRtPbsQtWLABXhQzejna0wHFr8M=";
285 
286 /* Let's Encrypt Authority X3 */
287 static const char kLet_s_Encrypt_Authority_X3Fingerprint[] =
288   "YLh1dUR9y6Kja30RrAn7JKnbQG/uEtLMkBgFF2Fuihg=";
289 
290 /* Let's Encrypt Authority X4 */
291 static const char kLet_s_Encrypt_Authority_X4Fingerprint[] =
292   "sRHdihwgkaib1P1gxX8HFszlD+7/gTfNvuAybgLPNis=";
293 
294 /* SpiderOak2 */
295 static const char kSpiderOak2Fingerprint[] =
296   "7Y3UnxbffL8aFPXsOJBpGasgpDmngpIhAxGKdQRklQQ=";
297 
298 /* SpiderOak3 */
299 static const char kSpiderOak3Fingerprint[] =
300   "LkER54vOdlygpTsbYvlpMq1CE/lDAG1AP9xmdtwvV2A=";
301 
302 /* Starfield Class 2 CA */
303 static const char kStarfield_Class_2_CAFingerprint[] =
304   "FfFKxFycfaIz00eRZOgTf+Ne4POK6FgYPwhBDqgqxLQ=";
305 
306 /* Starfield Root Certificate Authority - G2 */
307 static const char kStarfield_Root_Certificate_Authority___G2Fingerprint[] =
308   "gI1os/q0iEpflxrOfRBVDXqVoWN3Tz7Dav/7IT++THQ=";
309 
310 /* Swehack */
311 static const char kSwehackFingerprint[] =
312   "FdaffE799rVb3oyAuhJ2mBW/XJwD07Uajb2G6YwSAEw=";
313 
314 /* SwehackBackup */
315 static const char kSwehackBackupFingerprint[] =
316   "z6cuswA6E1vgFkCjUsbEYo0Lf3aP8M8YOvwkoiGzDCo=";
317 
318 /* TestSPKI */
319 static const char kTestSPKIFingerprint[] =
320   "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=";
321 
322 /* Tor1 */
323 static const char kTor1Fingerprint[] =
324   "bYz9JTDk89X3qu3fgswG+lBQso5vI0N1f0Rx4go4nLo=";
325 
326 /* Tor2 */
327 static const char kTor2Fingerprint[] =
328   "xXCxhTdn7uxXneJSbQCqoAvuW3ZtQl2pDVTf2sewS8w=";
329 
330 /* Tor3 */
331 static const char kTor3Fingerprint[] =
332   "CleC1qwUR8JPgH1nXvSe2VHxDe5/KfNs96EusbfSOfo=";
333 
334 /* Twitter1 */
335 static const char kTwitter1Fingerprint[] =
336   "vU9M48LzD/CF34wE5PPf4nBwRyosy06X21J0ap8yS5s=";
337 
338 /* USERTrust ECC Certification Authority */
339 static const char kUSERTrust_ECC_Certification_AuthorityFingerprint[] =
340   "ICGRfpgmOUXIWcQ/HXPLQTkFPEFPoDyjvH7ohhQpjzs=";
341 
342 /* USERTrust RSA Certification Authority */
343 static const char kUSERTrust_RSA_Certification_AuthorityFingerprint[] =
344   "x4QzPSC810K5/cMjb05Qm4k3Bw5zBn4lTdO/nEW/Td4=";
345 
346 /* VeriSign Class 3 Public Primary Certification Authority - G4 */
347 static const char kVeriSign_Class_3_Public_Primary_Certification_Authority___G4Fingerprint[] =
348   "UZJDjsNp1+4M5x9cbbdflB779y5YRBcV6Z6rBMLIrO4=";
349 
350 /* VeriSign Class 3 Public Primary Certification Authority - G5 */
351 static const char kVeriSign_Class_3_Public_Primary_Certification_Authority___G5Fingerprint[] =
352   "JbQbUG5JMJUoI6brnx0x3vZF6jilxsapbXGVfjhN8Fg=";
353 
354 /* VeriSign Universal Root Certification Authority */
355 static const char kVeriSign_Universal_Root_Certification_AuthorityFingerprint[] =
356   "lnsM2T/O9/J84sJFdnrpsFp3awZJ+ZZbYpCWhGloaHI=";
357 
358 /* Verisign Class 1 Public Primary Certification Authority - G3 */
359 static const char kVerisign_Class_1_Public_Primary_Certification_Authority___G3Fingerprint[] =
360   "IgduWu9Eu5pBaii30cRDItcFn2D+/6XK9sW+hEeJEwM=";
361 
362 /* Verisign Class 2 Public Primary Certification Authority - G3 */
363 static const char kVerisign_Class_2_Public_Primary_Certification_Authority___G3Fingerprint[] =
364   "cAajgxHlj7GTSEIzIYIQxmEloOSoJq7VOaxWHfv72QM=";
365 
366 /* Verisign Class 3 Public Primary Certification Authority - G3 */
367 static const char kVerisign_Class_3_Public_Primary_Certification_Authority___G3Fingerprint[] =
368   "SVqWumuteCQHvVIaALrOZXuzVVVeS7f4FGxxu6V+es4=";
369 
370 /* YahooBackup1 */
371 static const char kYahooBackup1Fingerprint[] =
372   "2fRAUXyxl4A1/XHrKNBmc8bTkzA7y4FB/GLJuNAzCqY=";
373 
374 /* YahooBackup2 */
375 static const char kYahooBackup2Fingerprint[] =
376   "dolnbtzEBnELx/9lOEQ22e6OZO/QNb6VSSX2XHA3E7A=";
377 
378 /* thawte Primary Root CA */
379 static const char kthawte_Primary_Root_CAFingerprint[] =
380   "HXXQgxueCIU5TTLHob/bPbwcKOKw6DkfsTWYHbxbqTY=";
381 
382 /* thawte Primary Root CA - G2 */
383 static const char kthawte_Primary_Root_CA___G2Fingerprint[] =
384   "Z9xPMvoQ59AaeaBzqgyeAhLsL/w9d54Kp/nA8OHCyJM=";
385 
386 /* thawte Primary Root CA - G3 */
387 static const char kthawte_Primary_Root_CA___G3Fingerprint[] =
388   "GQbGEk27Q4V40A4GbVBUxsN/D6YCjAVUXgmU7drshik=";
389 
390 /* Pinsets are each an ordered list by the actual value of the fingerprint */
391 struct StaticFingerprints {
392   // See bug 1338873 about making these fields const.
393   size_t size;
394   const char* const* data;
395 };
396 
397 /* PreloadedHPKPins.json pinsets */
398 static const char* const kPinset_google_root_pems_Data[] = {
399   kEntrust_Root_Certification_Authority___EC1Fingerprint,
400   kCOMODO_ECC_Certification_AuthorityFingerprint,
401   kDigiCert_Assured_ID_Root_G2Fingerprint,
402   kCOMODO_Certification_AuthorityFingerprint,
403   kAddTrust_Low_Value_Services_RootFingerprint,
404   kGlobalSign_ECC_Root_CA___R4Fingerprint,
405   kDigiCert_Assured_ID_Root_G3Fingerprint,
406   kStarfield_Class_2_CAFingerprint,
407   kthawte_Primary_Root_CA___G3Fingerprint,
408   kthawte_Primary_Root_CAFingerprint,
409   kEntrust_net_Premium_2048_Secure_Server_CAFingerprint,
410   kDigiCert_Assured_ID_Root_CAFingerprint,
411   kUSERTrust_ECC_Certification_AuthorityFingerprint,
412   kVeriSign_Class_3_Public_Primary_Certification_Authority___G5Fingerprint,
413   kGlobalSign_Root_CAFingerprint,
414   kGo_Daddy_Root_Certificate_Authority___G2Fingerprint,
415   kAffirmTrust_Premium_ECCFingerprint,
416   kGeoTrust_Primary_Certification_AuthorityFingerprint,
417   kVerisign_Class_3_Public_Primary_Certification_Authority___G3Fingerprint,
418   kVeriSign_Class_3_Public_Primary_Certification_Authority___G4Fingerprint,
419   kGo_Daddy_Class_2_CAFingerprint,
420   kDigiCert_Trusted_Root_G4Fingerprint,
421   kDigiCert_High_Assurance_EV_Root_CAFingerprint,
422   kBaltimore_CyberTrust_RootFingerprint,
423   kthawte_Primary_Root_CA___G2Fingerprint,
424   kAffirmTrust_CommercialFingerprint,
425   kEntrust_Root_Certification_AuthorityFingerprint,
426   kGlobalSign_Root_CA___R3Fingerprint,
427   kEntrust_Root_Certification_Authority___G2Fingerprint,
428   kGeoTrust_Universal_CA_2Fingerprint,
429   kGlobalSign_ECC_Root_CA___R5Fingerprint,
430   kCybertrust_Global_RootFingerprint,
431   kStarfield_Root_Certificate_Authority___G2Fingerprint,
432   kCOMODO_RSA_Certification_AuthorityFingerprint,
433   kGeoTrust_Global_CAFingerprint,
434   kDigiCert_Global_Root_G2Fingerprint,
435   kGlobalSign_Root_CA___R2Fingerprint,
436   kAffirmTrust_NetworkingFingerprint,
437   kAddTrust_External_RootFingerprint,
438   kVeriSign_Universal_Root_Certification_AuthorityFingerprint,
439   kGeoTrust_Universal_CAFingerprint,
440   kGeoTrust_Primary_Certification_Authority___G3Fingerprint,
441   kDigiCert_Global_Root_CAFingerprint,
442   kDigiCert_Global_Root_G3Fingerprint,
443   kGeoTrust_Primary_Certification_Authority___G2Fingerprint,
444   kComodo_AAA_Services_rootFingerprint,
445   kAffirmTrust_PremiumFingerprint,
446   kUSERTrust_RSA_Certification_AuthorityFingerprint,
447 };
448 static const StaticFingerprints kPinset_google_root_pems = {
449   sizeof(kPinset_google_root_pems_Data) / sizeof(const char*),
450   kPinset_google_root_pems_Data
451 };
452 
453 static const char* const kPinset_mozilla_services_Data[] = {
454   kISRG_Root_X1Fingerprint,
455   kDigiCert_High_Assurance_EV_Root_CAFingerprint,
456   kDigiCert_Global_Root_CAFingerprint,
457 };
458 static const StaticFingerprints kPinset_mozilla_services = {
459   sizeof(kPinset_mozilla_services_Data) / sizeof(const char*),
460   kPinset_mozilla_services_Data
461 };
462 
463 static const char* const kPinset_mozilla_test_Data[] = {
464   kEnd_Entity_Test_CertFingerprint,
465 };
466 static const StaticFingerprints kPinset_mozilla_test = {
467   sizeof(kPinset_mozilla_test_Data) / sizeof(const char*),
468   kPinset_mozilla_test_Data
469 };
470 
471 /* Chrome static pinsets */
472 static const char* const kPinset_test_Data[] = {
473   kTestSPKIFingerprint,
474 };
475 static const StaticFingerprints kPinset_test = {
476   sizeof(kPinset_test_Data) / sizeof(const char*),
477   kPinset_test_Data
478 };
479 
480 static const char* const kPinset_google_Data[] = {
481   kGoogleBackup2048Fingerprint,
482   kGTS_Root_R3Fingerprint,
483   kGTS_Root_R2Fingerprint,
484   kGOOGLE_PIN_GTSCA1O1Fingerprint,
485   kGTS_Root_R1Fingerprint,
486   kGlobalSign_Root_CA___R2Fingerprint,
487   kGTS_Root_R4Fingerprint,
488 };
489 static const StaticFingerprints kPinset_google = {
490   sizeof(kPinset_google_Data) / sizeof(const char*),
491   kPinset_google_Data
492 };
493 
494 static const char* const kPinset_tor_Data[] = {
495   kGOOGLE_PIN_R4LetsEncryptFingerprint,
496   kTor3Fingerprint,
497   kDigiCert_High_Assurance_EV_Root_CAFingerprint,
498   kLet_s_Encrypt_Authority_X3Fingerprint,
499   kTor1Fingerprint,
500   kGOOGLE_PIN_R3LetsEncryptFingerprint,
501   kGOOGLE_PIN_RapidSSLFingerprint,
502   kLet_s_Encrypt_Authority_X4Fingerprint,
503   kTor2Fingerprint,
504 };
505 static const StaticFingerprints kPinset_tor = {
506   sizeof(kPinset_tor_Data) / sizeof(const char*),
507   kPinset_tor_Data
508 };
509 
510 static const char* const kPinset_twitterCom_Data[] = {
511   kGOOGLE_PIN_VeriSignClass2_G2Fingerprint,
512   kGOOGLE_PIN_VeriSignClass3_G2Fingerprint,
513   kGOOGLE_PIN_GeoTrustGlobal2Fingerprint,
514   kDigiCert_Assured_ID_Root_CAFingerprint,
515   kVerisign_Class_1_Public_Primary_Certification_Authority___G3Fingerprint,
516   kVeriSign_Class_3_Public_Primary_Certification_Authority___G5Fingerprint,
517   kGOOGLE_PIN_VeriSignClass1Fingerprint,
518   kGeoTrust_Primary_Certification_AuthorityFingerprint,
519   kVerisign_Class_3_Public_Primary_Certification_Authority___G3Fingerprint,
520   kVeriSign_Class_3_Public_Primary_Certification_Authority___G4Fingerprint,
521   kGOOGLE_PIN_VeriSignClass4_G3Fingerprint,
522   kDigiCert_High_Assurance_EV_Root_CAFingerprint,
523   kVerisign_Class_2_Public_Primary_Certification_Authority___G3Fingerprint,
524   kGeoTrust_Universal_CA_2Fingerprint,
525   kGeoTrust_Global_CAFingerprint,
526   kVeriSign_Universal_Root_Certification_AuthorityFingerprint,
527   kGeoTrust_Universal_CAFingerprint,
528   kGeoTrust_Primary_Certification_Authority___G3Fingerprint,
529   kDigiCert_Global_Root_CAFingerprint,
530   kGeoTrust_Primary_Certification_Authority___G2Fingerprint,
531   kTwitter1Fingerprint,
532 };
533 static const StaticFingerprints kPinset_twitterCom = {
534   sizeof(kPinset_twitterCom_Data) / sizeof(const char*),
535   kPinset_twitterCom_Data
536 };
537 
538 static const char* const kPinset_twitterCDN_Data[] = {
539   kGOOGLE_PIN_VeriSignClass2_G2Fingerprint,
540   kGOOGLE_PIN_TrustedCertificateServicesFingerprint,
541   kCOMODO_Certification_AuthorityFingerprint,
542   kGOOGLE_PIN_VeriSignClass3_G2Fingerprint,
543   kAddTrust_Low_Value_Services_RootFingerprint,
544   kGOOGLE_PIN_UTNUSERFirstObjectFingerprint,
545   kGOOGLE_PIN_GTECyberTrustGlobalRootFingerprint,
546   kGOOGLE_PIN_GeoTrustGlobal2Fingerprint,
547   kEntrust_net_Premium_2048_Secure_Server_CAFingerprint,
548   kDigiCert_Assured_ID_Root_CAFingerprint,
549   kVerisign_Class_1_Public_Primary_Certification_Authority___G3Fingerprint,
550   kVeriSign_Class_3_Public_Primary_Certification_Authority___G5Fingerprint,
551   kGlobalSign_Root_CAFingerprint,
552   kGOOGLE_PIN_UTNUSERFirstClientAuthenticationandEmailFingerprint,
553   kGOOGLE_PIN_VeriSignClass1Fingerprint,
554   kGOOGLE_PIN_AddTrustPublicCARootFingerprint,
555   kGOOGLE_PIN_UTNDATACorpSGCFingerprint,
556   kGOOGLE_PIN_SecureCertificateServicesFingerprint,
557   kGeoTrust_Primary_Certification_AuthorityFingerprint,
558   kVerisign_Class_3_Public_Primary_Certification_Authority___G3Fingerprint,
559   kGOOGLE_PIN_UTNUSERFirstHardwareFingerprint,
560   kVeriSign_Class_3_Public_Primary_Certification_Authority___G4Fingerprint,
561   kGOOGLE_PIN_VeriSignClass4_G3Fingerprint,
562   kDigiCert_High_Assurance_EV_Root_CAFingerprint,
563   kBaltimore_CyberTrust_RootFingerprint,
564   kEntrust_Root_Certification_AuthorityFingerprint,
565   kVerisign_Class_2_Public_Primary_Certification_Authority___G3Fingerprint,
566   kGlobalSign_Root_CA___R3Fingerprint,
567   kEntrust_Root_Certification_Authority___G2Fingerprint,
568   kGeoTrust_Universal_CA_2Fingerprint,
569   kGeoTrust_Global_CAFingerprint,
570   kGlobalSign_Root_CA___R2Fingerprint,
571   kAddTrust_External_RootFingerprint,
572   kVeriSign_Universal_Root_Certification_AuthorityFingerprint,
573   kGeoTrust_Universal_CAFingerprint,
574   kGOOGLE_PIN_Entrust_SSLFingerprint,
575   kGeoTrust_Primary_Certification_Authority___G3Fingerprint,
576   kDigiCert_Global_Root_CAFingerprint,
577   kGeoTrust_Primary_Certification_Authority___G2Fingerprint,
578   kComodo_AAA_Services_rootFingerprint,
579   kTwitter1Fingerprint,
580   kGOOGLE_PIN_AddTrustQualifiedCARootFingerprint,
581 };
582 static const StaticFingerprints kPinset_twitterCDN = {
583   sizeof(kPinset_twitterCDN_Data) / sizeof(const char*),
584   kPinset_twitterCDN_Data
585 };
586 
587 static const char* const kPinset_dropbox_Data[] = {
588   kEntrust_Root_Certification_Authority___EC1Fingerprint,
589   kEntrust_net_Premium_2048_Secure_Server_CAFingerprint,
590   kDigiCert_Assured_ID_Root_CAFingerprint,
591   kGo_Daddy_Root_Certificate_Authority___G2Fingerprint,
592   kGOOGLE_PIN_GoDaddySecureFingerprint,
593   kGo_Daddy_Class_2_CAFingerprint,
594   kDigiCert_High_Assurance_EV_Root_CAFingerprint,
595   kEntrust_Root_Certification_AuthorityFingerprint,
596   kEntrust_Root_Certification_Authority___G2Fingerprint,
597   kDigiCert_Global_Root_CAFingerprint,
598 };
599 static const StaticFingerprints kPinset_dropbox = {
600   sizeof(kPinset_dropbox_Data) / sizeof(const char*),
601   kPinset_dropbox_Data
602 };
603 
604 static const char* const kPinset_facebook_Data[] = {
605   kGOOGLE_PIN_DigiCertECCSecureServerCAFingerprint,
606   kDigiCert_High_Assurance_EV_Root_CAFingerprint,
607   kGOOGLE_PIN_SymantecClass3EVG3Fingerprint,
608   kFacebookBackupFingerprint,
609 };
610 static const StaticFingerprints kPinset_facebook = {
611   sizeof(kPinset_facebook_Data) / sizeof(const char*),
612   kPinset_facebook_Data
613 };
614 
615 static const char* const kPinset_spideroak_Data[] = {
616   kSpiderOak2Fingerprint,
617   kSpiderOak3Fingerprint,
618   kDigiCert_High_Assurance_EV_Root_CAFingerprint,
619   kGeoTrust_Global_CAFingerprint,
620 };
621 static const StaticFingerprints kPinset_spideroak = {
622   sizeof(kPinset_spideroak_Data) / sizeof(const char*),
623   kPinset_spideroak_Data
624 };
625 
626 static const char* const kPinset_yahoo_Data[] = {
627   kYahooBackup1Fingerprint,
628   kDigiCert_Assured_ID_Root_CAFingerprint,
629   kGlobalSign_Root_CAFingerprint,
630   kDigiCert_Trusted_Root_G4Fingerprint,
631   kDigiCert_High_Assurance_EV_Root_CAFingerprint,
632   kGlobalSign_Root_CA___R3Fingerprint,
633   kYahooBackup2Fingerprint,
634   kDigiCert_Global_Root_G2Fingerprint,
635   kDigiCert_Global_Root_CAFingerprint,
636   kDigiCert_Global_Root_G3Fingerprint,
637 };
638 static const StaticFingerprints kPinset_yahoo = {
639   sizeof(kPinset_yahoo_Data) / sizeof(const char*),
640   kPinset_yahoo_Data
641 };
642 
643 static const char* const kPinset_swehackCom_Data[] = {
644   kSwehackFingerprint,
645   kDST_Root_CA_X3Fingerprint,
646   kLet_s_Encrypt_Authority_X3Fingerprint,
647   kGOOGLE_PIN_COMODORSADomainValidationSecureServerCAFingerprint,
648   kLet_s_Encrypt_Authority_X4Fingerprint,
649   kSwehackBackupFingerprint,
650 };
651 static const StaticFingerprints kPinset_swehackCom = {
652   sizeof(kPinset_swehackCom_Data) / sizeof(const char*),
653   kPinset_swehackCom_Data
654 };
655 
656 /* Domainlist */
657 struct TransportSecurityPreload {
658   // See bug 1338873 about making these fields const.
659   const char* mHost;
660   bool mIncludeSubdomains;
661   bool mTestMode;
662   bool mIsMoz;
663   int32_t mId;
664   const StaticFingerprints* pinset;
665 };
666 
667 /* Sort hostnames for binary search. */
668 static const TransportSecurityPreload kPublicKeyPinningPreloadList[] = {
669   { "2mdn.net", true, false, false, -1, &kPinset_google_root_pems },
670   { "accounts.firefox.com", true, false, true, 4, &kPinset_mozilla_services },
671   { "accounts.google.com", true, false, false, -1, &kPinset_google_root_pems },
672   { "addons.mozilla.net", true, false, true, 2, &kPinset_mozilla_services },
673   { "addons.mozilla.org", true, false, true, 1, &kPinset_mozilla_services },
674   { "admin.google.com", true, false, false, -1, &kPinset_google_root_pems },
675   { "android.com", true, false, false, -1, &kPinset_google_root_pems },
676   { "api.accounts.firefox.com", true, false, true, 5, &kPinset_mozilla_services },
677   { "api.twitter.com", true, false, false, -1, &kPinset_twitterCDN },
678   { "apis.google.com", true, false, false, -1, &kPinset_google_root_pems },
679   { "appengine.google.com", true, false, false, -1, &kPinset_google_root_pems },
680   { "apps.facebook.com", true, false, false, -1, &kPinset_facebook },
681   { "appspot.com", true, false, false, -1, &kPinset_google_root_pems },
682   { "at.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
683   { "au.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
684   { "aus4.mozilla.org", true, true, true, 3, &kPinset_mozilla_services },
685   { "aus5.mozilla.org", true, true, true, 7, &kPinset_mozilla_services },
686   { "az.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
687   { "be.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
688   { "bi.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
689   { "blog.torproject.org", true, false, false, -1, &kPinset_tor },
690   { "blogger.com", true, false, false, -1, &kPinset_google_root_pems },
691   { "blogspot.com", true, false, false, -1, &kPinset_google_root_pems },
692   { "br.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
693   { "bugs.chromium.org", true, false, false, -1, &kPinset_google_root_pems },
694   { "build.chromium.org", true, false, false, -1, &kPinset_google_root_pems },
695   { "business.facebook.com", true, false, false, -1, &kPinset_facebook },
696   { "business.twitter.com", true, false, false, -1, &kPinset_twitterCom },
697   { "ca.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
698   { "calendar.google.com", true, false, false, -1, &kPinset_google_root_pems },
699   { "cd.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
700   { "cdn.ampproject.org", true, false, false, -1, &kPinset_google_root_pems },
701   { "cdn.mozilla.net", true, false, true, 16, &kPinset_mozilla_services },
702   { "cdn.mozilla.org", true, false, true, 17, &kPinset_mozilla_services },
703   { "cg.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
704   { "ch.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
705   { "check.torproject.org", true, false, false, -1, &kPinset_tor },
706   { "checkout.google.com", true, false, false, -1, &kPinset_google_root_pems },
707   { "chfr.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
708   { "chit.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
709   { "chrome-devtools-frontend.appspot.com", true, false, false, -1, &kPinset_google_root_pems },
710   { "chrome.com", true, false, false, -1, &kPinset_google_root_pems },
711   { "chrome.google.com", true, false, false, -1, &kPinset_google_root_pems },
712   { "chromereporting-pa.googleapis.com", true, false, false, -1, &kPinset_google_root_pems },
713   { "chromiumbugs.appspot.com", true, false, false, -1, &kPinset_google_root_pems },
714   { "chromiumcodereview.appspot.com", true, false, false, -1, &kPinset_google_root_pems },
715   { "cl.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
716   { "classroom.google.com", true, false, false, -1, &kPinset_google_root_pems },
717   { "cloud.google.com", true, false, false, -1, &kPinset_google_root_pems },
718   { "cn.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
719   { "co.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
720   { "code.facebook.com", true, false, false, -1, &kPinset_facebook },
721   { "code.google.com", true, false, false, -1, &kPinset_google_root_pems },
722   { "codereview.appspot.com", true, false, false, -1, &kPinset_google_root_pems },
723   { "codereview.chromium.org", true, false, false, -1, &kPinset_google_root_pems },
724   { "contributor.google.com", true, false, false, -1, &kPinset_google_root_pems },
725   { "corp.goog", true, false, false, -1, &kPinset_google_root_pems },
726   { "cr.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
727   { "crash-reports-xpsp2.mozilla.com", false, false, true, 11, &kPinset_mozilla_services },
728   { "crash-reports.mozilla.com", false, false, true, 10, &kPinset_mozilla_services },
729   { "crash-stats.mozilla.org", false, false, true, 12, &kPinset_mozilla_services },
730   { "crbug.com", true, false, false, -1, &kPinset_google_root_pems },
731   { "crosbug.com", true, false, false, -1, &kPinset_google_root_pems },
732   { "crrev.com", true, false, false, -1, &kPinset_google_root_pems },
733   { "ct.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
734   { "datastudio.google.com", true, false, false, -1, &kPinset_google_root_pems },
735   { "de.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
736   { "dev.twitter.com", true, false, false, -1, &kPinset_twitterCom },
737   { "developer.android.com", true, false, false, -1, &kPinset_google_root_pems },
738   { "developers.facebook.com", true, false, false, -1, &kPinset_facebook },
739   { "dist.torproject.org", true, false, false, -1, &kPinset_tor },
740   { "dk.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
741   { "dl.google.com", true, false, false, -1, &kPinset_google_root_pems },
742   { "dns.google.com", true, false, false, -1, &kPinset_google_root_pems },
743   { "do.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
744   { "docs.google.com", true, false, false, -1, &kPinset_google_root_pems },
745   { "domains.google.com", true, false, false, -1, &kPinset_google_root_pems },
746   { "doubleclick.net", true, false, false, -1, &kPinset_google_root_pems },
747   { "download.mozilla.org", false, false, true, 14, &kPinset_mozilla_services },
748   { "drive.google.com", true, false, false, -1, &kPinset_google_root_pems },
749   { "dropbox.com", true, false, false, -1, &kPinset_dropbox },
750   { "dropboxstatic.com", false, true, false, -1, &kPinset_dropbox },
751   { "dropboxusercontent.com", false, true, false, -1, &kPinset_dropbox },
752   { "edit.yahoo.com", true, true, false, -1, &kPinset_yahoo },
753   { "en-maktoob.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
754   { "encrypted.google.com", true, false, false, -1, &kPinset_google_root_pems },
755   { "es.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
756   { "espanol.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
757   { "example.test", true, true, false, -1, &kPinset_test },
758   { "exclude-subdomains.pinning.example.com", false, false, false, -1, &kPinset_mozilla_test },
759   { "facebook.com", false, false, false, -1, &kPinset_facebook },
760   { "fi.google.com", true, false, false, -1, &kPinset_google_root_pems },
761   { "fi.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
762   { "firebaseio.com", true, false, false, -1, &kPinset_google_root_pems },
763   { "firefox.com", true, true, true, 15, &kPinset_mozilla_services },
764   { "fj.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
765   { "fr.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
766   { "g.co", false, false, false, -1, &kPinset_google_root_pems },
767   { "g4w.co", true, false, false, -1, &kPinset_google_root_pems },
768   { "ggpht.com", true, false, false, -1, &kPinset_google_root_pems },
769   { "gl.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
770   { "glass.google.com", true, false, false, -1, &kPinset_google_root_pems },
771   { "gm.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
772   { "gmail.com", false, false, false, -1, &kPinset_google_root_pems },
773   { "goo.gl", true, false, false, -1, &kPinset_google_root_pems },
774   { "google", true, false, false, -1, &kPinset_google_root_pems },
775   { "google-analytics.com", true, false, false, -1, &kPinset_google_root_pems },
776   { "google.ac", true, false, false, -1, &kPinset_google_root_pems },
777   { "google.ad", true, false, false, -1, &kPinset_google_root_pems },
778   { "google.ae", true, false, false, -1, &kPinset_google_root_pems },
779   { "google.af", true, false, false, -1, &kPinset_google_root_pems },
780   { "google.ag", true, false, false, -1, &kPinset_google_root_pems },
781   { "google.am", true, false, false, -1, &kPinset_google_root_pems },
782   { "google.as", true, false, false, -1, &kPinset_google_root_pems },
783   { "google.at", true, false, false, -1, &kPinset_google_root_pems },
784   { "google.az", true, false, false, -1, &kPinset_google_root_pems },
785   { "google.ba", true, false, false, -1, &kPinset_google_root_pems },
786   { "google.be", true, false, false, -1, &kPinset_google_root_pems },
787   { "google.bf", true, false, false, -1, &kPinset_google_root_pems },
788   { "google.bg", true, false, false, -1, &kPinset_google_root_pems },
789   { "google.bi", true, false, false, -1, &kPinset_google_root_pems },
790   { "google.bj", true, false, false, -1, &kPinset_google_root_pems },
791   { "google.bs", true, false, false, -1, &kPinset_google_root_pems },
792   { "google.by", true, false, false, -1, &kPinset_google_root_pems },
793   { "google.ca", true, false, false, -1, &kPinset_google_root_pems },
794   { "google.cat", true, false, false, -1, &kPinset_google_root_pems },
795   { "google.cc", true, false, false, -1, &kPinset_google_root_pems },
796   { "google.cd", true, false, false, -1, &kPinset_google_root_pems },
797   { "google.cf", true, false, false, -1, &kPinset_google_root_pems },
798   { "google.cg", true, false, false, -1, &kPinset_google_root_pems },
799   { "google.ch", true, false, false, -1, &kPinset_google_root_pems },
800   { "google.ci", true, false, false, -1, &kPinset_google_root_pems },
801   { "google.cl", true, false, false, -1, &kPinset_google_root_pems },
802   { "google.cm", true, false, false, -1, &kPinset_google_root_pems },
803   { "google.cn", true, false, false, -1, &kPinset_google_root_pems },
804   { "google.co.ao", true, false, false, -1, &kPinset_google_root_pems },
805   { "google.co.bw", true, false, false, -1, &kPinset_google_root_pems },
806   { "google.co.ck", true, false, false, -1, &kPinset_google_root_pems },
807   { "google.co.cr", true, false, false, -1, &kPinset_google_root_pems },
808   { "google.co.hu", true, false, false, -1, &kPinset_google_root_pems },
809   { "google.co.id", true, false, false, -1, &kPinset_google_root_pems },
810   { "google.co.il", true, false, false, -1, &kPinset_google_root_pems },
811   { "google.co.im", true, false, false, -1, &kPinset_google_root_pems },
812   { "google.co.in", true, false, false, -1, &kPinset_google_root_pems },
813   { "google.co.je", true, false, false, -1, &kPinset_google_root_pems },
814   { "google.co.jp", true, false, false, -1, &kPinset_google_root_pems },
815   { "google.co.ke", true, false, false, -1, &kPinset_google_root_pems },
816   { "google.co.kr", true, false, false, -1, &kPinset_google_root_pems },
817   { "google.co.ls", true, false, false, -1, &kPinset_google_root_pems },
818   { "google.co.ma", true, false, false, -1, &kPinset_google_root_pems },
819   { "google.co.mz", true, false, false, -1, &kPinset_google_root_pems },
820   { "google.co.nz", true, false, false, -1, &kPinset_google_root_pems },
821   { "google.co.th", true, false, false, -1, &kPinset_google_root_pems },
822   { "google.co.tz", true, false, false, -1, &kPinset_google_root_pems },
823   { "google.co.ug", true, false, false, -1, &kPinset_google_root_pems },
824   { "google.co.uk", true, false, false, -1, &kPinset_google_root_pems },
825   { "google.co.uz", true, false, false, -1, &kPinset_google_root_pems },
826   { "google.co.ve", true, false, false, -1, &kPinset_google_root_pems },
827   { "google.co.vi", true, false, false, -1, &kPinset_google_root_pems },
828   { "google.co.za", true, false, false, -1, &kPinset_google_root_pems },
829   { "google.co.zm", true, false, false, -1, &kPinset_google_root_pems },
830   { "google.co.zw", true, false, false, -1, &kPinset_google_root_pems },
831   { "google.com", true, false, false, -1, &kPinset_google_root_pems },
832   { "google.com.af", true, false, false, -1, &kPinset_google_root_pems },
833   { "google.com.ag", true, false, false, -1, &kPinset_google_root_pems },
834   { "google.com.ai", true, false, false, -1, &kPinset_google_root_pems },
835   { "google.com.ar", true, false, false, -1, &kPinset_google_root_pems },
836   { "google.com.au", true, false, false, -1, &kPinset_google_root_pems },
837   { "google.com.bd", true, false, false, -1, &kPinset_google_root_pems },
838   { "google.com.bh", true, false, false, -1, &kPinset_google_root_pems },
839   { "google.com.bn", true, false, false, -1, &kPinset_google_root_pems },
840   { "google.com.bo", true, false, false, -1, &kPinset_google_root_pems },
841   { "google.com.br", true, false, false, -1, &kPinset_google_root_pems },
842   { "google.com.by", true, false, false, -1, &kPinset_google_root_pems },
843   { "google.com.bz", true, false, false, -1, &kPinset_google_root_pems },
844   { "google.com.cn", true, false, false, -1, &kPinset_google_root_pems },
845   { "google.com.co", true, false, false, -1, &kPinset_google_root_pems },
846   { "google.com.cu", true, false, false, -1, &kPinset_google_root_pems },
847   { "google.com.cy", true, false, false, -1, &kPinset_google_root_pems },
848   { "google.com.do", true, false, false, -1, &kPinset_google_root_pems },
849   { "google.com.ec", true, false, false, -1, &kPinset_google_root_pems },
850   { "google.com.eg", true, false, false, -1, &kPinset_google_root_pems },
851   { "google.com.et", true, false, false, -1, &kPinset_google_root_pems },
852   { "google.com.fj", true, false, false, -1, &kPinset_google_root_pems },
853   { "google.com.ge", true, false, false, -1, &kPinset_google_root_pems },
854   { "google.com.gh", true, false, false, -1, &kPinset_google_root_pems },
855   { "google.com.gi", true, false, false, -1, &kPinset_google_root_pems },
856   { "google.com.gr", true, false, false, -1, &kPinset_google_root_pems },
857   { "google.com.gt", true, false, false, -1, &kPinset_google_root_pems },
858   { "google.com.hk", true, false, false, -1, &kPinset_google_root_pems },
859   { "google.com.iq", true, false, false, -1, &kPinset_google_root_pems },
860   { "google.com.jm", true, false, false, -1, &kPinset_google_root_pems },
861   { "google.com.jo", true, false, false, -1, &kPinset_google_root_pems },
862   { "google.com.kh", true, false, false, -1, &kPinset_google_root_pems },
863   { "google.com.kw", true, false, false, -1, &kPinset_google_root_pems },
864   { "google.com.lb", true, false, false, -1, &kPinset_google_root_pems },
865   { "google.com.ly", true, false, false, -1, &kPinset_google_root_pems },
866   { "google.com.mt", true, false, false, -1, &kPinset_google_root_pems },
867   { "google.com.mx", true, false, false, -1, &kPinset_google_root_pems },
868   { "google.com.my", true, false, false, -1, &kPinset_google_root_pems },
869   { "google.com.na", true, false, false, -1, &kPinset_google_root_pems },
870   { "google.com.nf", true, false, false, -1, &kPinset_google_root_pems },
871   { "google.com.ng", true, false, false, -1, &kPinset_google_root_pems },
872   { "google.com.ni", true, false, false, -1, &kPinset_google_root_pems },
873   { "google.com.np", true, false, false, -1, &kPinset_google_root_pems },
874   { "google.com.nr", true, false, false, -1, &kPinset_google_root_pems },
875   { "google.com.om", true, false, false, -1, &kPinset_google_root_pems },
876   { "google.com.pa", true, false, false, -1, &kPinset_google_root_pems },
877   { "google.com.pe", true, false, false, -1, &kPinset_google_root_pems },
878   { "google.com.ph", true, false, false, -1, &kPinset_google_root_pems },
879   { "google.com.pk", true, false, false, -1, &kPinset_google_root_pems },
880   { "google.com.pl", true, false, false, -1, &kPinset_google_root_pems },
881   { "google.com.pr", true, false, false, -1, &kPinset_google_root_pems },
882   { "google.com.py", true, false, false, -1, &kPinset_google_root_pems },
883   { "google.com.qa", true, false, false, -1, &kPinset_google_root_pems },
884   { "google.com.ru", true, false, false, -1, &kPinset_google_root_pems },
885   { "google.com.sa", true, false, false, -1, &kPinset_google_root_pems },
886   { "google.com.sb", true, false, false, -1, &kPinset_google_root_pems },
887   { "google.com.sg", true, false, false, -1, &kPinset_google_root_pems },
888   { "google.com.sl", true, false, false, -1, &kPinset_google_root_pems },
889   { "google.com.sv", true, false, false, -1, &kPinset_google_root_pems },
890   { "google.com.tj", true, false, false, -1, &kPinset_google_root_pems },
891   { "google.com.tn", true, false, false, -1, &kPinset_google_root_pems },
892   { "google.com.tr", true, false, false, -1, &kPinset_google_root_pems },
893   { "google.com.tw", true, false, false, -1, &kPinset_google_root_pems },
894   { "google.com.ua", true, false, false, -1, &kPinset_google_root_pems },
895   { "google.com.uy", true, false, false, -1, &kPinset_google_root_pems },
896   { "google.com.vc", true, false, false, -1, &kPinset_google_root_pems },
897   { "google.com.ve", true, false, false, -1, &kPinset_google_root_pems },
898   { "google.com.vn", true, false, false, -1, &kPinset_google_root_pems },
899   { "google.cv", true, false, false, -1, &kPinset_google_root_pems },
900   { "google.cz", true, false, false, -1, &kPinset_google_root_pems },
901   { "google.de", true, false, false, -1, &kPinset_google_root_pems },
902   { "google.dj", true, false, false, -1, &kPinset_google_root_pems },
903   { "google.dk", true, false, false, -1, &kPinset_google_root_pems },
904   { "google.dm", true, false, false, -1, &kPinset_google_root_pems },
905   { "google.dz", true, false, false, -1, &kPinset_google_root_pems },
906   { "google.ee", true, false, false, -1, &kPinset_google_root_pems },
907   { "google.es", true, false, false, -1, &kPinset_google_root_pems },
908   { "google.fi", true, false, false, -1, &kPinset_google_root_pems },
909   { "google.fm", true, false, false, -1, &kPinset_google_root_pems },
910   { "google.fr", true, false, false, -1, &kPinset_google_root_pems },
911   { "google.ga", true, false, false, -1, &kPinset_google_root_pems },
912   { "google.ge", true, false, false, -1, &kPinset_google_root_pems },
913   { "google.gg", true, false, false, -1, &kPinset_google_root_pems },
914   { "google.gl", true, false, false, -1, &kPinset_google_root_pems },
915   { "google.gm", true, false, false, -1, &kPinset_google_root_pems },
916   { "google.gp", true, false, false, -1, &kPinset_google_root_pems },
917   { "google.gr", true, false, false, -1, &kPinset_google_root_pems },
918   { "google.gy", true, false, false, -1, &kPinset_google_root_pems },
919   { "google.hk", true, false, false, -1, &kPinset_google_root_pems },
920   { "google.hn", true, false, false, -1, &kPinset_google_root_pems },
921   { "google.hr", true, false, false, -1, &kPinset_google_root_pems },
922   { "google.ht", true, false, false, -1, &kPinset_google_root_pems },
923   { "google.hu", true, false, false, -1, &kPinset_google_root_pems },
924   { "google.ie", true, false, false, -1, &kPinset_google_root_pems },
925   { "google.im", true, false, false, -1, &kPinset_google_root_pems },
926   { "google.info", true, false, false, -1, &kPinset_google_root_pems },
927   { "google.iq", true, false, false, -1, &kPinset_google_root_pems },
928   { "google.is", true, false, false, -1, &kPinset_google_root_pems },
929   { "google.it", true, false, false, -1, &kPinset_google_root_pems },
930   { "google.it.ao", true, false, false, -1, &kPinset_google_root_pems },
931   { "google.je", true, false, false, -1, &kPinset_google_root_pems },
932   { "google.jo", true, false, false, -1, &kPinset_google_root_pems },
933   { "google.jobs", true, false, false, -1, &kPinset_google_root_pems },
934   { "google.jp", true, false, false, -1, &kPinset_google_root_pems },
935   { "google.kg", true, false, false, -1, &kPinset_google_root_pems },
936   { "google.ki", true, false, false, -1, &kPinset_google_root_pems },
937   { "google.kz", true, false, false, -1, &kPinset_google_root_pems },
938   { "google.la", true, false, false, -1, &kPinset_google_root_pems },
939   { "google.li", true, false, false, -1, &kPinset_google_root_pems },
940   { "google.lk", true, false, false, -1, &kPinset_google_root_pems },
941   { "google.lt", true, false, false, -1, &kPinset_google_root_pems },
942   { "google.lu", true, false, false, -1, &kPinset_google_root_pems },
943   { "google.lv", true, false, false, -1, &kPinset_google_root_pems },
944   { "google.md", true, false, false, -1, &kPinset_google_root_pems },
945   { "google.me", true, false, false, -1, &kPinset_google_root_pems },
946   { "google.mg", true, false, false, -1, &kPinset_google_root_pems },
947   { "google.mk", true, false, false, -1, &kPinset_google_root_pems },
948   { "google.ml", true, false, false, -1, &kPinset_google_root_pems },
949   { "google.mn", true, false, false, -1, &kPinset_google_root_pems },
950   { "google.ms", true, false, false, -1, &kPinset_google_root_pems },
951   { "google.mu", true, false, false, -1, &kPinset_google_root_pems },
952   { "google.mv", true, false, false, -1, &kPinset_google_root_pems },
953   { "google.mw", true, false, false, -1, &kPinset_google_root_pems },
954   { "google.ne", true, false, false, -1, &kPinset_google_root_pems },
955   { "google.ne.jp", true, false, false, -1, &kPinset_google_root_pems },
956   { "google.net", true, false, false, -1, &kPinset_google_root_pems },
957   { "google.nl", true, false, false, -1, &kPinset_google_root_pems },
958   { "google.no", true, false, false, -1, &kPinset_google_root_pems },
959   { "google.nr", true, false, false, -1, &kPinset_google_root_pems },
960   { "google.nu", true, false, false, -1, &kPinset_google_root_pems },
961   { "google.off.ai", true, false, false, -1, &kPinset_google_root_pems },
962   { "google.pk", true, false, false, -1, &kPinset_google_root_pems },
963   { "google.pl", true, false, false, -1, &kPinset_google_root_pems },
964   { "google.pn", true, false, false, -1, &kPinset_google_root_pems },
965   { "google.ps", true, false, false, -1, &kPinset_google_root_pems },
966   { "google.pt", true, false, false, -1, &kPinset_google_root_pems },
967   { "google.ro", true, false, false, -1, &kPinset_google_root_pems },
968   { "google.rs", true, false, false, -1, &kPinset_google_root_pems },
969   { "google.ru", true, false, false, -1, &kPinset_google_root_pems },
970   { "google.rw", true, false, false, -1, &kPinset_google_root_pems },
971   { "google.sc", true, false, false, -1, &kPinset_google_root_pems },
972   { "google.se", true, false, false, -1, &kPinset_google_root_pems },
973   { "google.sh", true, false, false, -1, &kPinset_google_root_pems },
974   { "google.si", true, false, false, -1, &kPinset_google_root_pems },
975   { "google.sk", true, false, false, -1, &kPinset_google_root_pems },
976   { "google.sm", true, false, false, -1, &kPinset_google_root_pems },
977   { "google.sn", true, false, false, -1, &kPinset_google_root_pems },
978   { "google.so", true, false, false, -1, &kPinset_google_root_pems },
979   { "google.st", true, false, false, -1, &kPinset_google_root_pems },
980   { "google.td", true, false, false, -1, &kPinset_google_root_pems },
981   { "google.tg", true, false, false, -1, &kPinset_google_root_pems },
982   { "google.tk", true, false, false, -1, &kPinset_google_root_pems },
983   { "google.tl", true, false, false, -1, &kPinset_google_root_pems },
984   { "google.tm", true, false, false, -1, &kPinset_google_root_pems },
985   { "google.tn", true, false, false, -1, &kPinset_google_root_pems },
986   { "google.to", true, false, false, -1, &kPinset_google_root_pems },
987   { "google.tt", true, false, false, -1, &kPinset_google_root_pems },
988   { "google.us", true, false, false, -1, &kPinset_google_root_pems },
989   { "google.uz", true, false, false, -1, &kPinset_google_root_pems },
990   { "google.vg", true, false, false, -1, &kPinset_google_root_pems },
991   { "google.vu", true, false, false, -1, &kPinset_google_root_pems },
992   { "google.ws", true, false, false, -1, &kPinset_google_root_pems },
993   { "googleadservices.com", true, false, false, -1, &kPinset_google_root_pems },
994   { "googleapis.com", true, false, false, -1, &kPinset_google_root_pems },
995   { "googlecode.com", true, false, false, -1, &kPinset_google_root_pems },
996   { "googlecommerce.com", true, false, false, -1, &kPinset_google_root_pems },
997   { "googlegroups.com", true, false, false, -1, &kPinset_google_root_pems },
998   { "googlemail.com", false, false, false, -1, &kPinset_google_root_pems },
999   { "googleplex.com", true, false, false, -1, &kPinset_google_root_pems },
1000   { "googlesource.com", true, false, false, -1, &kPinset_google_root_pems },
1001   { "googlesyndication.com", true, false, false, -1, &kPinset_google_root_pems },
1002   { "googletagmanager.com", true, false, false, -1, &kPinset_google_root_pems },
1003   { "googletagservices.com", true, false, false, -1, &kPinset_google_root_pems },
1004   { "googleusercontent.com", true, false, false, -1, &kPinset_google_root_pems },
1005   { "googlevideo.com", true, false, false, -1, &kPinset_google_root_pems },
1006   { "googleweblight.com", true, false, false, -1, &kPinset_google_root_pems },
1007   { "goto.google.com", true, false, false, -1, &kPinset_google_root_pems },
1008   { "gr.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
1009   { "groups.google.com", true, false, false, -1, &kPinset_google_root_pems },
1010   { "gstatic.cn", true, false, false, -1, &kPinset_google_root_pems },
1011   { "gstatic.com", true, false, false, -1, &kPinset_google_root_pems },
1012   { "gvt1.com", true, false, false, -1, &kPinset_google_root_pems },
1013   { "gvt2.com", true, false, false, -1, &kPinset_google_root_pems },
1014   { "gvt3.com", true, false, false, -1, &kPinset_google_root_pems },
1015   { "hangout", true, false, false, -1, &kPinset_google_root_pems },
1016   { "hangouts.google.com", true, false, false, -1, &kPinset_google_root_pems },
1017   { "history.google.com", true, false, false, -1, &kPinset_google_root_pems },
1018   { "hk.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
1019   { "hn.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
1020   { "hostedtalkgadget.google.com", true, false, false, -1, &kPinset_google_root_pems },
1021   { "hu.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
1022   { "id.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
1023   { "ie.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
1024   { "in.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
1025   { "inbox.google.com", true, false, false, -1, &kPinset_google_root_pems },
1026   { "include-subdomains.pinning.example.com", true, false, false, -1, &kPinset_mozilla_test },
1027   { "it.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
1028   { "kr.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
1029   { "kz.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
1030   { "lens.google.com", true, false, false, -1, &kPinset_google_root_pems },
1031   { "li.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
1032   { "login.corp.google.com", true, false, false, -1, &kPinset_google_root_pems },
1033   { "login.yahoo.com", true, true, false, -1, &kPinset_yahoo },
1034   { "lt.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
1035   { "lu.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
1036   { "lv.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
1037   { "m.facebook.com", true, false, false, -1, &kPinset_facebook },
1038   { "mail-settings.google.com", true, false, false, -1, &kPinset_google_root_pems },
1039   { "mail.google.com", true, false, false, -1, &kPinset_google_root_pems },
1040   { "mail.yahoo.com", false, true, false, -1, &kPinset_yahoo },
1041   { "maktoob.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
1042   { "malaysia.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
1043   { "market.android.com", true, false, false, -1, &kPinset_google_root_pems },
1044   { "mbasic.facebook.com", true, false, false, -1, &kPinset_facebook },
1045   { "meet.google.com", true, false, false, -1, &kPinset_google_root_pems },
1046   { "messenger.com", false, false, false, -1, &kPinset_facebook },
1047   { "mobile.twitter.com", true, false, false, -1, &kPinset_twitterCom },
1048   { "mt.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
1049   { "mtouch.facebook.com", true, false, false, -1, &kPinset_facebook },
1050   { "mu.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
1051   { "mw.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
1052   { "mx.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
1053   { "myaccount.google.com", true, false, false, -1, &kPinset_google_root_pems },
1054   { "myactivity.google.com", true, false, false, -1, &kPinset_google_root_pems },
1055   { "ni.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
1056   { "nl.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
1057   { "no.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
1058   { "np.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
1059   { "nz.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
1060   { "oauth.twitter.com", true, false, false, -1, &kPinset_twitterCom },
1061   { "oauthaccountmanager.googleapis.com", true, false, false, -1, &kPinset_google_root_pems },
1062   { "pa.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
1063   { "passwords.google.com", true, false, false, -1, &kPinset_google_root_pems },
1064   { "passwordsleakcheck-pa.googleapis.com", true, false, false, -1, &kPinset_google_root_pems },
1065   { "payments.google.com", true, false, false, -1, &kPinset_google_root_pems },
1066   { "pe.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
1067   { "ph.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
1068   { "pinning-test.badssl.com", true, false, false, -1, &kPinset_test },
1069   { "pinningtest.appspot.com", true, false, false, -1, &kPinset_test },
1070   { "pixel.facebook.com", true, false, false, -1, &kPinset_facebook },
1071   { "pixel.google.com", true, false, false, -1, &kPinset_google_root_pems },
1072   { "pk.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
1073   { "pl.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
1074   { "platform.twitter.com", true, false, false, -1, &kPinset_twitterCDN },
1075   { "play.google.com", true, false, false, -1, &kPinset_google_root_pems },
1076   { "plus.google.com", true, false, false, -1, &kPinset_google_root_pems },
1077   { "plus.sandbox.google.com", true, false, false, -1, &kPinset_google_root_pems },
1078   { "pr.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
1079   { "profiles.google.com", true, false, false, -1, &kPinset_google_root_pems },
1080   { "py.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
1081   { "qc.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
1082   { "remotedesktop.corp.google.com", true, false, false, -1, &kPinset_google_root_pems },
1083   { "research.facebook.com", true, false, false, -1, &kPinset_facebook },
1084   { "ro.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
1085   { "ru.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
1086   { "rw.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
1087   { "script.google.com", true, false, false, -1, &kPinset_google_root_pems },
1088   { "se.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
1089   { "search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
1090   { "secure.facebook.com", true, false, false, -1, &kPinset_facebook },
1091   { "security.google.com", true, false, false, -1, &kPinset_google_root_pems },
1092   { "services.mozilla.com", true, false, true, 6, &kPinset_mozilla_services },
1093   { "sg.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
1094   { "sites.google.com", true, false, false, -1, &kPinset_google_root_pems },
1095   { "spideroak.com", true, false, false, -1, &kPinset_spideroak },
1096   { "spreadsheets.google.com", true, false, false, -1, &kPinset_google_root_pems },
1097   { "static.googleadsserving.cn", true, false, false, -1, &kPinset_google_root_pems },
1098   { "stats.g.doubleclick.net", true, false, false, -1, &kPinset_google_root_pems },
1099   { "sv.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
1100   { "swehack.org", true, true, false, -1, &kPinset_swehackCom },
1101   { "sync.services.mozilla.com", true, false, true, 13, &kPinset_mozilla_services },
1102   { "t.facebook.com", true, false, false, -1, &kPinset_facebook },
1103   { "tablet.facebook.com", true, false, false, -1, &kPinset_facebook },
1104   { "talk.google.com", true, false, false, -1, &kPinset_google_root_pems },
1105   { "talkgadget.google.com", true, false, false, -1, &kPinset_google_root_pems },
1106   { "telemetry.mozilla.org", true, true, true, 8, &kPinset_mozilla_services },
1107   { "test-mode.pinning.example.com", true, true, false, -1, &kPinset_mozilla_test },
1108   { "testpilot.firefox.com", false, false, true, 9, &kPinset_mozilla_services },
1109   { "th.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
1110   { "torproject.org", false, false, false, -1, &kPinset_tor },
1111   { "touch.facebook.com", true, false, false, -1, &kPinset_facebook },
1112   { "tr.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
1113   { "translate.googleapis.com", true, false, false, -1, &kPinset_google_root_pems },
1114   { "tv.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
1115   { "tw.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
1116   { "twimg.com", true, false, false, -1, &kPinset_twitterCDN },
1117   { "twitter.com", true, false, false, -1, &kPinset_twitterCDN },
1118   { "ua.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
1119   { "ua5v.com", true, false, false, -1, &kPinset_google_root_pems },
1120   { "uk.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
1121   { "upload.facebook.com", true, false, false, -1, &kPinset_facebook },
1122   { "urchin.com", true, false, false, -1, &kPinset_google_root_pems },
1123   { "uy.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
1124   { "uz.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
1125   { "ve.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
1126   { "vn.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
1127   { "w-spotlight.appspot.com", true, false, false, -1, &kPinset_google_root_pems },
1128   { "wallet.google.com", true, false, false, -1, &kPinset_google_root_pems },
1129   { "webfilings-eu-mirror.appspot.com", true, false, false, -1, &kPinset_google_root_pems },
1130   { "webfilings-eu.appspot.com", true, false, false, -1, &kPinset_google_root_pems },
1131   { "webfilings-mirror-hrd.appspot.com", true, false, false, -1, &kPinset_google_root_pems },
1132   { "webfilings.appspot.com", true, false, false, -1, &kPinset_google_root_pems },
1133   { "wf-bigsky-master.appspot.com", true, false, false, -1, &kPinset_google_root_pems },
1134   { "wf-demo-eu.appspot.com", true, false, false, -1, &kPinset_google_root_pems },
1135   { "wf-demo-hrd.appspot.com", true, false, false, -1, &kPinset_google_root_pems },
1136   { "wf-dogfood-hrd.appspot.com", true, false, false, -1, &kPinset_google_root_pems },
1137   { "wf-pentest.appspot.com", true, false, false, -1, &kPinset_google_root_pems },
1138   { "wf-staging-hr.appspot.com", true, false, false, -1, &kPinset_google_root_pems },
1139   { "wf-training-hrd.appspot.com", true, false, false, -1, &kPinset_google_root_pems },
1140   { "wf-training-master.appspot.com", true, false, false, -1, &kPinset_google_root_pems },
1141   { "wf-trial-hrd.appspot.com", true, false, false, -1, &kPinset_google_root_pems },
1142   { "withgoogle.com", true, false, false, -1, &kPinset_google_root_pems },
1143   { "withyoutube.com", true, false, false, -1, &kPinset_google_root_pems },
1144   { "www.dropbox.com", true, false, false, -1, &kPinset_dropbox },
1145   { "www.facebook.com", true, false, false, -1, &kPinset_facebook },
1146   { "www.g.co", false, false, false, -1, &kPinset_google_root_pems },
1147   { "www.gmail.com", false, false, false, -1, &kPinset_google_root_pems },
1148   { "www.googlegroups.com", true, false, false, -1, &kPinset_google_root_pems },
1149   { "www.googlemail.com", false, false, false, -1, &kPinset_google_root_pems },
1150   { "www.messenger.com", true, false, false, -1, &kPinset_facebook },
1151   { "www.torproject.org", true, false, false, -1, &kPinset_tor },
1152   { "www.twitter.com", true, false, false, -1, &kPinset_twitterCom },
1153   { "xa.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
1154   { "xbrlsuccess.appspot.com", true, false, false, -1, &kPinset_google_root_pems },
1155   { "xn--7xa.google.com", true, false, false, -1, &kPinset_google_root_pems },
1156   { "youtu.be", true, false, false, -1, &kPinset_google_root_pems },
1157   { "youtube-nocookie.com", true, false, false, -1, &kPinset_google_root_pems },
1158   { "youtube.com", true, false, false, -1, &kPinset_google_root_pems },
1159   { "ytimg.com", true, false, false, -1, &kPinset_google_root_pems },
1160   { "za.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
1161   { "zh.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
1162 };
1163 
1164 // Pinning Preload List Length = 493;
1165 
1166 static const int32_t kUnknownId = -1;
1167 
1168 static const PRTime kPreloadPKPinsExpirationTime = INT64_C(1623682168163000);
1169