<ruleset name="CACert.org (CAcert)" platform="cacert">
  <target host="cacert.org" />
  <target host="*.cacert.org" />

  <!-- this currently errs on the side of not breaking things over security -->
  <exclusion pattern="\.crt" />
  <exclusion pattern="\.crl" />
  <exclusion pattern="ocsp\." />
  <exclusion pattern="^http://cats\.cacert\.org/"/>

  <rule from="^http://cacert\.org/" to="https://www.cacert.org/"/>
  <rule from="^http://([^/:@\.]+)\.cacert\.org/" to="https://$1.cacert.org/"/>
</ruleset>
