/clientupdate/distsign/roots/
../
crawshaw-root.pem
distsign-prod-root-1-pub.pem