      _       _          _          _
   __| |_ __ | |_      _(_)_ __ ___| | ___  ___ ___
  / _` | '_ \| \ \ /\ / / | '__/ _ \ |/ _ \/ __/ __|
 | (_| | |_) | |\ V  V /| | | |  __/ |  __/\__ \__ \
  \__,_| .__/|_| \_/\_/ |_|_|  \___|_|\___||___/___/
       |_|

DPL rootcert.pem Supplemental TLS Certificate Bundle
=> Release Version 2026-05-19

Overview
--------
This document describes the contents and installation of the DPL rootcert.pem supplemental TLS certificate bundle for ATM payment processors.

Bundle Details
--------------
Creation Date:       2026-05-19
Bundle Contents:     Derived from the Mozilla CA Certificates Package for enhanced compatibility and support.
Validation:          Built and tested against all common payment processor platforms.
Signature (sha256):  86a1f3366afac7c6f8ae9f3c779ac221129328c43f0ab2b8817eb2f362a5025c

Installation
------------
1. Prepare Media
   • Obtain a USB drive or SD card (maximum 2GB FAT partition) supported by your ATM hardware
   • Copy rootcert.pem to the root directory of the media (e.g. E:\rootcert.pem)

2. Deployment
   For installation steps specific to your ATM model, refer to either:
   • The manufacturer's operator guide (GenMega, Hyosung, Triton, etc.)
   • The “DPL TLS Guides” available through the DPL Hercules portal

Release Notes
-------------
Version: 2026-05-19
  • Bundle regenerated from the official cURL CA Extract mirror (Mozilla CA Certificate Store): https://curl.se/docs/caextract.html
  • Release automatically detected and triggered via validated ETag change against the upstream mirror.
  • Post-update integrity verification completed: full OpenSSL TLS handshake tests executed against all required Payment Processor (please inquire with Support for more details).
  • Each endpoint validated for certificate chain integrity, hostname authenticity, and modern TLS protocol compliance.
  • No handshake or validation anomalies were detected during this release cycle.
  • Release signed and fingerprinted with SHA-256 for traceable integrity assurance.
--
Version: 2025-09-19
Notes:
  • Added automated generation of zip file
--
Version: 2025-05-20
Notes:
  • Switched to Mozilla CA Certificates Package for broader support
  • Automated certificate bundle validation against all common payment processors added
