CA	Critical	Policies
Comodo
Comodo DV	✗	2.5.29.32.0 2.23.140.1.2.1
Comodo EV	✗	2.5.29.32.0: https://secure.comodo.com/CPS
DST X3
DigiCert EV Root
DigiCert Global Root
DigiCert HA Intermediate	✗	2.5.29.32.0: https://www.digicert.com/CPS
DigiCert Secure Server	✗	2.5.29.32.0: https://www.digicert.com/CPS
GeoTrust
GlobalSign
GlobalSign DV	✗	2.5.29.32.0: https://www.globalsign.com/repository/
GlobalSign R2
Go Daddy G2
Go Daddy G2 Intermediate	✗	2.5.29.32.0: https://certs.godaddy.com/repository/
Google G3	✗	2.23.140.1.2.2: https://pki.goog/repository/
IdenTrust
Let’s Encrypt X1	✗	2.23.140.1.2.1 1.3.6.1.4.1.44947.1.1.1: http://cps.root-x1.letsencrypt.org
Let’s Encrypt X3	✗	2.23.140.1.2.1 1.3.6.1.4.1.44947.1.1.1: http://cps.root-x1.letsencrypt.org
RapidSSL G3	✗	2.16.840.1.113733.1.7.54: http://www.geotrust.com/resources/cps
StartSSL	✗	1.3.6.1.4.1.23223.1.1.1: http://www.startssl.com/policy.pdf http://www.startssl.com/intermediate.pdf User Notice: Start Commercial (StartCom) Ltd.: 1: Limited Liability, read the section Legal Limitations of the StartCom Certification Authority Policy available at http://www.startssl.com/policy.pdf
StartSSL class 2	✗	2.5.29.32.0: http://www.startssl.com/policy
StartSSL class 2	✗	2.5.29.32.0: http://www.startssl.com/policy.pdf
TrustID Server A52	✗	2.5.29.32.0: User Notice: https://secure.identrust.com/certificates/policy/ts/index.html: User Notice: This TrustID Server Certificate has been issued in accordance with IdenTrust’s TrustID Certificate Policy found at https://secure.identrust.com/certificates/policy/ts/index.html