Update to CKBI 2.69_v8.0.401 from NSS 3.103
Adding:
# Certificate "Sectigo Public Code Signing Root R46"
# Certificate "Sectigo Public Code Signing Root E46"

Update to CKBI 2.68_v8.0.302 from NSS 3.101
Removing:
# Certificate "Verisign Class 1 Public Primary Certification Authority - G3"
# Certificate "Verisign Class 2 Public Primary Certification Authority - G3"
# Certificate "Security Communication Root CA"
# Certificate "Camerfirma Chambers of Commerce Root"
# Certificate "Hongkong Post Root CA 1"
# Certificate "Autoridad de Certificacion Firmaprofesional CIF A62634068"
# Certificate "Symantec Class 1 Public Primary Certification Authority - G6"
# Certificate "Symantec Class 2 Public Primary Certification Authority - G6"
# Certificate "TrustCor RootCert CA-1"
# Certificate "TrustCor RootCert CA-2"
# Certificate "TrustCor ECA-1"
# Certificate "FNMT-RCM"
Adding:
# Certificate "LAWtrust Root CA2 (4096)"
# Certificate "Sectigo Public Email Protection Root E46"
# Certificate "Sectigo Public Email Protection Root R46"
# Certificate "Sectigo Public Server Authentication Root E46"
# Certificate "Sectigo Public Server Authentication Root R46"
# Certificate "SSL.com TLS RSA Root CA 2022"
# Certificate "SSL.com TLS ECC Root CA 2022"
# Certificate "SSL.com Client ECC Root CA 2022"
# Certificate "SSL.com Client RSA Root CA 2022"
# Certificate "Atos TrustedRoot Root CA ECC G2 2020"
# Certificate "Atos TrustedRoot Root CA RSA G2 2020"
# Certificate "Atos TrustedRoot Root CA ECC TLS 2021"
# Certificate "Atos TrustedRoot Root CA RSA TLS 2021"
# Certificate "TrustAsia Global Root CA G3"
# Certificate "TrustAsia Global Root CA G4"
# Certificate "CommScope Public Trust ECC Root-01"
# Certificate "CommScope Public Trust ECC Root-02"
# Certificate "CommScope Public Trust RSA Root-01"
# Certificate "CommScope Public Trust RSA Root-02"
# Certificate "D-Trust SBR Root CA 1 2022"
# Certificate "D-Trust SBR Root CA 2 2022"
# Certificate "Telekom Security SMIME ECC Root 2021"
# Certificate "Telekom Security TLS ECC Root 2020"
# Certificate "Telekom Security SMIME RSA Root 2023"
# Certificate "Telekom Security TLS RSA Root 2023"
# Certificate "FIRMAPROFESIONAL CA ROOT-A WEB"
# Certificate "SECOM Trust.net"
# Certificate "Chambers of Commerce Root"
# Certificate "VeriSign Class 2 Public Primary Certification Authority - G3"
# Certificate "SSL.com Code Signing RSA Root CA 2022"
# Certificate "SSL.com Code Signing ECC Root CA 2022"

Update to CKBI 2.60_v7.0.306 from NSS 3.91
Removing:
# Certificate "OpenTrust Root CA G1"
# Certificate "Swedish Government Root Authority v1"
# Certificate "DigiNotar Root CA G2"
# Certificate "Federal Common Policy CA"
# Certificate "TC TrustCenter Universal CA III"
# Certificate "CCA India 2007"
# Certificate "ipsCA Global CA Root"
# Certificate "ipsCA Main CA Root"
# Certificate "Macao Post eSignTrust Root Certification Authority"
# Certificate "InfoNotary CSP Root"
# Certificate "DigiNotar Root CA"
# Certificate "Root CA"
# Certificate "GPKIRootCA"
# Certificate "D-TRUST Qualified Root CA 1 2007:PN"
# Certificate "TC TrustCenter Universal CA I"
# Certificate "TC TrustCenter Universal CA II"
# Certificate "TC TrustCenter Class 2 CA II"
# Certificate "TC TrustCenter Class 4 CA II"
# Certificate "TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı"
# Certificate "CertRSA01"
# Certificate "KISA RootCA 3"
# Certificate "A-CERT ADVANCED"
# Certificate "A-Trust-Qual-01"
# Certificate "A-Trust-nQual-01"
# Certificate "Serasa Certificate Authority II"
# Certificate "TDC Internet"
# Certificate "America Online Root Certification Authority 2"
# Certificate "RSA Security Inc"
# Certificate "Public Notary Root"
# Certificate "Autoridade Certificadora Raiz Brasileira"
# Certificate "Post.Trust Root CA"
# Certificate "Entrust.net Secure Server Certification Authority"
# Certificate "ePKI EV SSL Certification Authority - G1"
Adding:
# Certificate "BJCA Global Root CA1"
# Certificate "BJCA Global Root CA2"
# Certificate "Symantec Enterprise Mobile Root for Microsoft"
# Certificate "A-Trust-Root-05"
# Certificate "ADOCA02"
# Certificate "StartCom Certification Authority G2"
# Certificate "ATHEX Root CA"
# Certificate "EBG Elektronik Sertifika Hizmet Sağlayıcısı"
# Certificate "GeoTrust Primary Certification Authority"
# Certificate "thawte Primary Root CA"
# Certificate "VeriSign Class 3 Public Primary Certification Authority - G5"
# Certificate "America Online Root Certification Authority 1"
# Certificate "Juur-SK"
# Certificate "ComSign CA"
# Certificate "ComSign Secured CA"
# Certificate "ComSign Advanced Security CA"
# Certificate "Sonera Class2 CA"
# Certificate "VeriSign Class 3 Public Primary Certification Authority - G3"
# Certificate "VeriSign, Inc."
# Certificate "GTE CyberTrust Global Root"
# Certificate "Equifax Secure Global eBusiness CA-1"
# Certificate "Equifax"
# Certificate "Class 1 Primary CA"
# Certificate "Swiss Government Root CA III"
# Certificate "Application CA G4 Root"
# Certificate "SSC GDL CA Root A"
# Certificate "GlobalSign Code Signing Root E45"
# Certificate "GlobalSign Code Signing Root R45"
# Certificate "Entrust Code Signing Root Certification Authority - CSBR1"

Fedora mass rebuild

Update to CKBI 2.60 from NSS 3.86
Removing:
# Certificate "Camerfirma Global Chambersign Root"
# Certificate "Staat der Nederlanden EV Root CA"
Adding:
# Certificate "DigiCert TLS ECC P384 Root G5"
# Certificate "DigiCert TLS RSA4096 Root G5"
# Certificate "DigiCert SMIME ECC P384 Root G5"
# Certificate "DigiCert SMIME RSA4096 Root G5"
# Certificate "Certainly Root R1"
# Certificate "Certainly Root E1"
# Certificate "E-Tugra Global Root CA RSA v3"
# Certificate "E-Tugra Global Root CA ECC v3"
# Certificate "DIGITALSIGN GLOBAL ROOT RSA CA"
# Certificate "DIGITALSIGN GLOBAL ROOT ECDSA CA"
# Certificate "Global Chambersign Root"

Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild