remove blacklist directory and references now that p11-kit has been updated.

Rebuilt for IMA sigs, glibc 2.34, aarch64 flags

Rebuilt for RHEL 9 BETA for openssl 3.0

Update to CKBI 2.50 from NSS 3.67
Removing:
# Certificate "QuoVadis Root CA"
# Certificate "Sonera Class 2 Root CA"
# Certificate "Trustis FPS Root CA"
Adding:
# Certificate "GLOBALTRUST 2020"
# Certificate "ANF Secure Server Root CA"
# Certificate "Certum EC-384 CA"
# Certificate "Certum Trusted Root CA"

Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937

Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild

remove unnecessarily divisive terms, take 1.
in ca-certificates there are 3 cases:
1) master refering to the fedora master branch in the fetch.sh script.
This can only be changed once fedora changes the master branch name.
2) a reference to the 'master bundle' in this file: this has been changed
to 'primary bundle'.
3) a couple of blacklist directories owned by this package, but used to
p11-kit. New 'blocklist' directories have been created, but p11-kit
needs to be updated before the old blacklist directories can be removed
and the man pages corrected.

Add cross-distro compatibility symlinks to /etc/ssl (rhbz#1895619)

Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild

Fix up broken %post and %postinstall scriptlet changes from -2

Update to CKBI 2.41 from NSS 3.53.0
Removing:
# Certificate "AddTrust Low-Value Services Root"
# Certificate "AddTrust External Root"
# Certificate "Staat der Nederlanden Root CA - G2"

Update versioned dependency on p11-kit

Update to CKBI 2.40 from NSS 3.48
Removing:
# Certificate "UTN USERFirst Email Root CA"
# Certificate "Certplus Class 2 Primary CA"
# Certificate "Deutsche Telekom Root CA 2"
# Certificate "Swisscom Root CA 2"
# Certificate "Certinomis - Root CA"
Adding:
# Certificate "Entrust Root Certification Authority - G4"
certdata2pem.py: emit flags for CKA_NSS_{SERVER,EMAIL}_DISTRUST_AFTER