Portal Jobs PKI — CRL & CA certs

Plain HTTP distribution points. Do not put this behind HTTPS that depends on this PKI.

• root.crl / root.crt
• intermediate.crl / intermediate.crt
• ha-intermediate.crl / ha-intermediate.crt
• email-intermediate.crl / email-intermediate.crt
• mtls-intermediate.crl / mtls-intermediate.crt
• scep-ca.crl / scep-ca.crt (SCEP mTLS Client CA1 depot — gen via scripts/gen-publish-scep-crl.sh)
• mdm-privileged-ca.crl / mdm-privileged-ca.crt (console.portaljobs.net admin mTLS)
• uha.crl / uha.crt (Ultra High Assurance CA)
• posture-ca.crl / posture-ca.crt (device posture)
• remote-access-ca.crl / remote-access-ca.crt (tmux gate / remdev*)