//etc/pki/ca-trust/ca-legacy.conf