diff --git a/README.md b/README.md
index 17c0647de9d665f3dfad4f91aac92c8da24cd563..dc3f078667a9ecf0cd1a220c84ff0b7ff93a155a 100644
--- a/README.md
+++ b/README.md
@@ -3,14 +3,14 @@
 Anti China Certifications.
 
 ### 更新日期
-**2014-10-14**
+**2014-10-15**
 
 ### Windows 批处理类型
-* **Base** 为基础版本，删除信任并吊销了几个可疑的根证书、中级证书或假证书，直接运行 AntiChinaCerts_Base.bat 即可
-* **Extended** 为扩展版本，删除信任并吊销了所有可疑的根证书、中级证书或假证书，直接运行 AntiChinaCerts_Extended.bat 即可，**建议使用此版本**
-* **All** 为完全版本，删除信任并吊销了所有可疑的来自中国大陆的证书，直接运行 AntiChinaCerts_All.bat 即可，**此版本用于测试不建议使用**
-* **Restore** 为恢复批处理，直接运行 AntiChinaCerts_Restore.bat 可恢复所有在上面几个版本中所有被加入吊销列表的证书的使用
-* 具体的根证书、中级证书或假证书列表参见下文涉及证书的介绍
+* **Base** 为基础版本，删除信任并吊销了几个可疑的根证书、中级证书或假证书，直接运行 `AntiChinaCerts_Base.bat` 即可
+* **Extended** 为扩展版本，删除信任并吊销了所有可疑的根证书、中级证书或假证书，直接运行 `AntiChinaCerts_Extended.bat` 即可，**建议使用此版本**
+* **All** 为完全版本，删除信任并吊销了所有可疑的来自中国大陆的证书，直接运行 `AntiChinaCerts_All.bat` 即可，**此版本用于测试不建议使用**
+* **Restore** 为恢复批处理，直接运行 `AntiChinaCerts_Restore.bat` 可恢复所有在上面几个版本中所有被加入吊销列表的证书的使用
+* 具体的根证书、中级证书或假证书列表参见下文涉及的证书的介绍
 
 ### 方法
 * Windows
@@ -24,7 +24,7 @@ Anti China Certifications.
     * 操作完毕建议清空所有浏览器数据和系统缓存，并重启网络连接
 * Mac
     * 使用自动脚本
-        * 使用 sudo 以 ROOT 权限运行位于 Mac 目录里的 `AntiChinaCerts.sh` 即可
+        * 使用 `sudo` 以 ROOT 权限运行位于 Mac 目录里的 `AntiChinaCerts.sh` 即可
     * 手动操作
         * `实用工具` - `钥匙串访问` - 在 `钥匙串` 中选择 `系统根证书`
         * 点击进入需要禁用的证书，展开 `信任` 标签并在 `使用此证书时` 下拉菜单选择 `永不信任` 并关闭即可
@@ -67,7 +67,7 @@ Anti China Certifications.
 * iOS
     * iOS 没有任何官方提供的方法禁用自带的根证书，请放弃在 iOS 下禁用根证书的想法
 
-### 涉及的CA根证书
+### 涉及的证书
 * Base 版本
     * Fake GitHub.Com(2013-01-25)
         * SHA-1 指纹 ‎27A29C3A8B3261770E8B59448557DC9E9339E68C
@@ -77,13 +77,16 @@ Anti China Certifications.
         * 此伪造证书被用于 2014-09-01 大规模中间人攻击 Google 网站
     * Fake Google.Com(2014-09-18)
         * SHA-1 指纹 316076F2866588DBB233C7F9EB68B58125150C21
-        * 此伪造证书被用于 2014-10 部分IPv6隧道服务器中间人攻击 Google 网站
+        * 此伪造证书被用于 2014-10 部分 IPv6 隧道服务器中间人攻击 Google 网站
     * Fake Yahoo.Com(2014-09-23)
         * SHA-1 指纹 ‎2290C311EA0F3F57E06DF45B698E18E828E59BC3
         * 此伪造证书被用于 2014-09-30 大规模中间人攻击 Yahoo 网站
     * Fake Hotmai.Com(2014-10-02)
         * SHA-1 指纹 ‎30F3B3ADC6E570BDA606B9F96DE24190CE262C67
         * 此伪造证书被用于 2014-10-02 大规模中间人攻击 Microsoft 网站
+    * Fake Www.Facebook.Com(2014-10-08)
+        * SHA-1 指纹 DC6EE6EDC4C078E1B2C12F6D1985000E27CFD318
+        * 此伪造证书被用于 2014-10-08 部分教育网 IPv6 和隧道服务器中间人攻击 Facebook 网站
     * CNNIC ROOT
         * SHA-1 指纹 8BAF4C9B1DF02A92F7DA128EB91BACF498604B6F
         * 所属机构为 [China Internet Network Information Center/CNNIC/中国互联网络信息中心](http://www.cnnic.net.cn)
@@ -118,14 +121,18 @@ Anti China Certifications.
         * SHA-1 指纹 8250BED5A214433A66377CBC10EF83F669DA3A67
         * 所属机构为 [Shanghai Electronic Certificate Authority Center/SHECA/上海市数字证书认证中心](http://www.sheca.com)
         * [测试网址](https://ibanks.bankofshanghai.com)
-    * UCA EV Root
+    * UCA Extended Validation Root
         * SHA-1 指纹 B9C9F58B3BBEF575E2B58328770E7B0076C40B5E
         * 所属机构为 [Shanghai Electronic Certificate Authority Center/SHECA/上海市数字证书认证中心](http://www.sheca.com)
+    * UCA Root
+        * SHA-1 指纹 3120F295417730075F8CD42D0CAE008EB5726EF8
+        * 在2001年1月1日颁发的 UCA Root 旧证书，已于2013年1月1日过期
+        * 所属机构为 [Shanghai Electronic Certificate Authority Center/SHECA/上海市数字证书认证中心](http://www.sheca.com)
+        * [测试网址](https://ibanks.bankofshanghai.com)
 * All 版本
     * ROOTCA
         * SHA-1 指纹 ‎DBB84423C928ABE889D0E368FC3191D151DDB1AB
         * 所属机构为 [Office of the State Commercial Cryptography Administration/OSCCA/国家商用密码管理办公室](http://www.oscca.gov.cn)
-        * 测试：打开 Certs 目录中 CFCA_CS_SM2_OCA11 证书，该证书由 ROOTCA 交叉签署认证
     * SRCA
         * SHA-1 指纹 ‎AE3F2E66D48FC6BD1DF131E89D768D505DF14302
         * 所属机构为 [Sinorail Certification Authority/SRCA/中铁数字证书认证中心](http://www.12306.cn)
@@ -140,7 +147,7 @@ Anti China Certifications.
         * 所属机构为 [沃通CA](http://www.wosign.com)
     * Class 1 Primary CA/WoSign 1999
         * SHA-1 指纹 ‎6A174570A916FBE84453EED3D070A1D8DA442829
-        * 沃通CA收购美国 WoSign 的旧证书，于1999年发布
+        * 在1999年7月8日颁发的美国 WoSign 公司的旧证书，于2013年5月17日被沃通CA收购，证书将于2020年7月7日过期
         * 所属机构为 [沃通CA](http://www.wosign.com)
     * Certification Authority of WoSign
         * SHA-1 指纹 868241C8B85AF79E2DAC79EDADB723E82A36AFC3
diff --git a/Windows/AntiChinaCerts_All.bat b/Windows/AntiChinaCerts_All.bat
index 0b23cb252871c53b03ca24534e1fe1cdb86c21dc..0ac8ae25b7af0a17db802f9f2b041e2d7f2b4d21 100644
--- a/Windows/AntiChinaCerts_All.bat
+++ b/Windows/AntiChinaCerts_All.bat
@@ -54,6 +54,11 @@ CertMgr_x86 -del -c -sha1 30F3B3ADC6E570BDA606B9F96DE24190CE262C67 -s -r localMa
 CertMgr_x86 -del -c -sha1 30F3B3ADC6E570BDA606B9F96DE24190CE262C67 -s -r localMachine AuthRoot
 CertMgr_x86 -del -c -sha1 30F3B3ADC6E570BDA606B9F96DE24190CE262C67 -s -r CurrentUser Root
 CertMgr_x86 -del -c -sha1 30F3B3ADC6E570BDA606B9F96DE24190CE262C67 -s -r CurrentUser AuthRoot
+::  Fake Www.Facebook.Com(2014-10-08)
+CertMgr_x86 -del -c -sha1 DC6EE6EDC4C078E1B2C12F6D1985000E27CFD318 -s -r localMachine Root
+CertMgr_x86 -del -c -sha1 DC6EE6EDC4C078E1B2C12F6D1985000E27CFD318 -s -r localMachine AuthRoot
+CertMgr_x86 -del -c -sha1 DC6EE6EDC4C078E1B2C12F6D1985000E27CFD318 -s -r CurrentUser Root
+CertMgr_x86 -del -c -sha1 DC6EE6EDC4C078E1B2C12F6D1985000E27CFD318 -s -r CurrentUser AuthRoot
 ::  CNNIC ROOT
 CertMgr_x86 -del -c -sha1 8BAF4C9B1DF02A92F7DA128EB91BACF498604B6F -s -r localMachine Root
 CertMgr_x86 -del -c -sha1 8BAF4C9B1DF02A92F7DA128EB91BACF498604B6F -s -r localMachine AuthRoot
@@ -88,16 +93,21 @@ CertMgr_x86 -del -c -sha1 0B972C9EA6E7CC58D93B20BF71EC412E7209FABF -s -r localMa
 CertMgr_x86 -del -c -sha1 0B972C9EA6E7CC58D93B20BF71EC412E7209FABF -s -r localMachine AuthRoot
 CertMgr_x86 -del -c -sha1 0B972C9EA6E7CC58D93B20BF71EC412E7209FABF -s -r CurrentUser Root
 CertMgr_x86 -del -c -sha1 0B972C9EA6E7CC58D93B20BF71EC412E7209FABF -s -r CurrentUser AuthRoot
-::  UCA Root
+::  UCA Root(2004-01-01)
 CertMgr_x86 -del -c -sha1 8250BED5A214433A66377CBC10EF83F669DA3A67 -s -r localMachine Root
 CertMgr_x86 -del -c -sha1 8250BED5A214433A66377CBC10EF83F669DA3A67 -s -r localMachine AuthRoot
 CertMgr_x86 -del -c -sha1 8250BED5A214433A66377CBC10EF83F669DA3A67 -s -r CurrentUser Root
 CertMgr_x86 -del -c -sha1 8250BED5A214433A66377CBC10EF83F669DA3A67 -s -r CurrentUser AuthRoot
-::  UCA EV Root
+::  UCA Extended Validation Root
 CertMgr_x86 -del -c -sha1 B9C9F58B3BBEF575E2B58328770E7B0076C40B5E -s -r localMachine Root
 CertMgr_x86 -del -c -sha1 B9C9F58B3BBEF575E2B58328770E7B0076C40B5E -s -r localMachine AuthRoot
 CertMgr_x86 -del -c -sha1 B9C9F58B3BBEF575E2B58328770E7B0076C40B5E -s -r CurrentUser Root
 CertMgr_x86 -del -c -sha1 B9C9F58B3BBEF575E2B58328770E7B0076C40B5E -s -r CurrentUser AuthRoot
+::  UCA Root(2001-01-01)
+CertMgr_x86 -del -c -sha1 3120F295417730075F8CD42D0CAE008EB5726EF8 -s -r localMachine Root
+CertMgr_x86 -del -c -sha1 3120F295417730075F8CD42D0CAE008EB5726EF8 -s -r localMachine AuthRoot
+CertMgr_x86 -del -c -sha1 3120F295417730075F8CD42D0CAE008EB5726EF8 -s -r CurrentUser Root
+CertMgr_x86 -del -c -sha1 3120F295417730075F8CD42D0CAE008EB5726EF8 -s -r CurrentUser AuthRoot
 :: Delete certifications(All)
 ::  ROOTCA
 CertMgr_x86 -del -c -sha1 DBB84423C928ABE889D0E368FC3191D151DDB1AB -s -r localMachine Root
@@ -164,11 +174,12 @@ CertMgr_x86 -del -c -sha1 7C88AE178AE6AB8E69C30AF586D84EF29B6E6AE3 -s -r Current
 @echo.
 
 :: Add certifications to CRL(Base)
-CertMgr_x86 -add -c FakeGitHubCom_201301.crt -s Disallowed
-CertMgr_x86 -add -c FakeGoogleCom_201407.crt -s Disallowed
-CertMgr_x86 -add -c FakeGoogleCom_201409.crt -s Disallowed
-CertMgr_x86 -add -c FakeYahooCom_201409.crt -s Disallowed
-CertMgr_x86 -add -c FakeHotmaiCom_201410.crt -s Disallowed
+CertMgr_x86 -add -c Fake_GitHubCom_201301.crt -s Disallowed
+CertMgr_x86 -add -c Fake_GoogleCom_201407.crt -s Disallowed
+CertMgr_x86 -add -c Fake_GoogleCom_201409.crt -s Disallowed
+CertMgr_x86 -add -c Fake_YahooCom_201409.crt -s Disallowed
+CertMgr_x86 -add -c Fake_HotmaiCom_201410.crt -s Disallowed
+CertMgr_x86 -add -c Fake_WwwFacebookCom_201410.crt -s Disallowed
 CertMgr_x86 -add -c CNNIC_ROOT.crt -s Disallowed
 CertMgr_x86 -add -c China_Internet_Network_Information_Center_EV_Certificates_Root.crt -s Disallowed
 CertMgr_x86 -add -c CNNIC_SSL_Entrust.crt -s Disallowed
@@ -177,10 +188,11 @@ CertMgr_x86 -add -c CFCA_GT_CA_201106.crt -s Disallowed
 CertMgr_x86 -add -c CFCA_GT_CA_201208.crt -s Disallowed
 CertMgr_x86 -add -c CFCA_EV_ROOT.crt -s Disallowed
 CertMgr_x86 -add -c UCA_Global_Root.crt -s Disallowed
-CertMgr_x86 -add -c UCA_Root.crt -s Disallowed
-CertMgr_x86 -add -c UCA_EV_Root.crt -s Disallowed
+CertMgr_x86 -add -c UCA_Root_200401.crt -s Disallowed
+CertMgr_x86 -add -c UCA_Extended_Validation_Root.crt -s Disallowed
+CertMgr_x86 -add -c UCA_Root_200101.crt -s Disallowed
 :: Add certifications to CRL(All)
-CertMgr_x86 -add -c ROOTCA.crt -s Disallowed
+CertMgr_x86 -add -c ROOTCA_OSCCA.crt -s Disallowed
 CertMgr_x86 -add -c SRCA.crt -s Disallowed
 CertMgr_x86 -add -c Certification_Authority_Of_WoSign.crt -s Disallowed
 CertMgr_x86 -add -c Certification_Authority_Of_WoSign_Chinese.crt -s Disallowed
@@ -225,6 +237,11 @@ CertMgr -del -c -sha1 30F3B3ADC6E570BDA606B9F96DE24190CE262C67 -s -r localMachin
 CertMgr -del -c -sha1 30F3B3ADC6E570BDA606B9F96DE24190CE262C67 -s -r localMachine AuthRoot
 CertMgr -del -c -sha1 30F3B3ADC6E570BDA606B9F96DE24190CE262C67 -s -r CurrentUser Root
 CertMgr -del -c -sha1 30F3B3ADC6E570BDA606B9F96DE24190CE262C67 -s -r CurrentUser AuthRoot
+::  Fake Www.Facebook.Com(2014-10-08)
+CertMgr -del -c -sha1 DC6EE6EDC4C078E1B2C12F6D1985000E27CFD318 -s -r localMachine Root
+CertMgr -del -c -sha1 DC6EE6EDC4C078E1B2C12F6D1985000E27CFD318 -s -r localMachine AuthRoot
+CertMgr -del -c -sha1 DC6EE6EDC4C078E1B2C12F6D1985000E27CFD318 -s -r CurrentUser Root
+CertMgr -del -c -sha1 DC6EE6EDC4C078E1B2C12F6D1985000E27CFD318 -s -r CurrentUser AuthRoot
 ::  CNNIC ROOT
 CertMgr -del -c -sha1 8BAF4C9B1DF02A92F7DA128EB91BACF498604B6F -s -r localMachine Root
 CertMgr -del -c -sha1 8BAF4C9B1DF02A92F7DA128EB91BACF498604B6F -s -r localMachine AuthRoot
@@ -259,16 +276,21 @@ CertMgr -del -c -sha1 0B972C9EA6E7CC58D93B20BF71EC412E7209FABF -s -r localMachin
 CertMgr -del -c -sha1 0B972C9EA6E7CC58D93B20BF71EC412E7209FABF -s -r localMachine AuthRoot
 CertMgr -del -c -sha1 0B972C9EA6E7CC58D93B20BF71EC412E7209FABF -s -r CurrentUser Root
 CertMgr -del -c -sha1 0B972C9EA6E7CC58D93B20BF71EC412E7209FABF -s -r CurrentUser AuthRoot
-::  UCA Root
+::  UCA Root(2004-01-01)
 CertMgr -del -c -sha1 8250BED5A214433A66377CBC10EF83F669DA3A67 -s -r localMachine Root
 CertMgr -del -c -sha1 8250BED5A214433A66377CBC10EF83F669DA3A67 -s -r localMachine AuthRoot
 CertMgr -del -c -sha1 8250BED5A214433A66377CBC10EF83F669DA3A67 -s -r CurrentUser Root
 CertMgr -del -c -sha1 8250BED5A214433A66377CBC10EF83F669DA3A67 -s -r CurrentUser AuthRoot
-::  UCA EV Root
+::  UCA Extended Validation Root
 CertMgr -del -c -sha1 B9C9F58B3BBEF575E2B58328770E7B0076C40B5E -s -r localMachine Root
 CertMgr -del -c -sha1 B9C9F58B3BBEF575E2B58328770E7B0076C40B5E -s -r localMachine AuthRoot
 CertMgr -del -c -sha1 B9C9F58B3BBEF575E2B58328770E7B0076C40B5E -s -r CurrentUser Root
 CertMgr -del -c -sha1 B9C9F58B3BBEF575E2B58328770E7B0076C40B5E -s -r CurrentUser AuthRoot
+::  UCA Root(2001-01-01)
+CertMgr -del -c -sha1 3120F295417730075F8CD42D0CAE008EB5726EF8 -s -r localMachine Root
+CertMgr -del -c -sha1 3120F295417730075F8CD42D0CAE008EB5726EF8 -s -r localMachine AuthRoot
+CertMgr -del -c -sha1 3120F295417730075F8CD42D0CAE008EB5726EF8 -s -r CurrentUser Root
+CertMgr -del -c -sha1 3120F295417730075F8CD42D0CAE008EB5726EF8 -s -r CurrentUser AuthRoot
 :: Delete certifications(All)
 ::  ROOTCA
 CertMgr -del -c -sha1 DBB84423C928ABE889D0E368FC3191D151DDB1AB -s -r localMachine Root
@@ -335,11 +357,12 @@ CertMgr -del -c -sha1 7C88AE178AE6AB8E69C30AF586D84EF29B6E6AE3 -s -r CurrentUser
 @echo.
 
 :: Add certifications to CRL(Base)
-CertMgr -add -c FakeGitHubCom_201301.crt -s Disallowed
-CertMgr -add -c FakeGoogleCom_201407.crt -s Disallowed
-CertMgr -add -c FakeGoogleCom_201409.crt -s Disallowed
-CertMgr -add -c FakeYahooCom_201409.crt -s Disallowed
-CertMgr -add -c FakeHotmaiCom_201410.crt -s Disallowed
+CertMgr -add -c Fake_GitHubCom_201301.crt -s Disallowed
+CertMgr -add -c Fake_GoogleCom_201407.crt -s Disallowed
+CertMgr -add -c Fake_GoogleCom_201409.crt -s Disallowed
+CertMgr -add -c Fake_YahooCom_201409.crt -s Disallowed
+CertMgr -add -c Fake_HotmaiCom_201410.crt -s Disallowed
+CertMgr -add -c Fake_WwwFacebookCom_201410.crt -s Disallowed
 CertMgr -add -c CNNIC_ROOT.crt -s Disallowed
 CertMgr -add -c China_Internet_Network_Information_Center_EV_Certificates_Root.crt -s Disallowed
 CertMgr -add -c CNNIC_SSL_Entrust.crt -s Disallowed
@@ -348,10 +371,11 @@ CertMgr -add -c CFCA_GT_CA_201106.crt -s Disallowed
 CertMgr -add -c CFCA_GT_CA_201208.crt -s Disallowed
 CertMgr -add -c CFCA_EV_ROOT.crt -s Disallowed
 CertMgr -add -c UCA_Global_Root.crt -s Disallowed
-CertMgr -add -c UCA_Root.crt -s Disallowed
-CertMgr -add -c UCA_EV_Root.crt -s Disallowed
+CertMgr -add -c UCA_Root_200401.crt -s Disallowed
+CertMgr -add -c UCA_Extended_Validation_Root.crt -s Disallowed
+CertMgr -add -c UCA_Root_200101.crt -s Disallowed
 :: Add certifications to CRL(All)
-CertMgr -add -c ROOTCA.crt -s Disallowed
+CertMgr -add -c ROOTCA_OSCCA.crt -s Disallowed
 CertMgr -add -c SRCA.crt -s Disallowed
 CertMgr -add -c Certification_Authority_Of_WoSign.crt -s Disallowed
 CertMgr -add -c Certification_Authority_Of_WoSign_Chinese.crt -s Disallowed
diff --git a/Windows/AntiChinaCerts_Base.bat b/Windows/AntiChinaCerts_Base.bat
index 0c9fb741f3cdda63837ddc979a939b01a6f84610..13f74dca4810c9973753109d902b43964b32617a 100644
--- a/Windows/AntiChinaCerts_Base.bat
+++ b/Windows/AntiChinaCerts_Base.bat
@@ -54,6 +54,11 @@ CertMgr_x86 -del -c -sha1 30F3B3ADC6E570BDA606B9F96DE24190CE262C67 -s -r localMa
 CertMgr_x86 -del -c -sha1 30F3B3ADC6E570BDA606B9F96DE24190CE262C67 -s -r localMachine AuthRoot
 CertMgr_x86 -del -c -sha1 30F3B3ADC6E570BDA606B9F96DE24190CE262C67 -s -r CurrentUser Root
 CertMgr_x86 -del -c -sha1 30F3B3ADC6E570BDA606B9F96DE24190CE262C67 -s -r CurrentUser AuthRoot
+::  Fake Www.Facebook.Com(2014-10-08)
+CertMgr_x86 -del -c -sha1 DC6EE6EDC4C078E1B2C12F6D1985000E27CFD318 -s -r localMachine Root
+CertMgr_x86 -del -c -sha1 DC6EE6EDC4C078E1B2C12F6D1985000E27CFD318 -s -r localMachine AuthRoot
+CertMgr_x86 -del -c -sha1 DC6EE6EDC4C078E1B2C12F6D1985000E27CFD318 -s -r CurrentUser Root
+CertMgr_x86 -del -c -sha1 DC6EE6EDC4C078E1B2C12F6D1985000E27CFD318 -s -r CurrentUser AuthRoot
 ::  CNNIC ROOT
 CertMgr_x86 -del -c -sha1 8BAF4C9B1DF02A92F7DA128EB91BACF498604B6F -s -r localMachine Root
 CertMgr_x86 -del -c -sha1 8BAF4C9B1DF02A92F7DA128EB91BACF498604B6F -s -r localMachine AuthRoot
@@ -71,11 +76,12 @@ CertMgr_x86 -del -c -sha1 6856BB1A6C4F76DACA362187CC2CCD484EDDC25D -s -r Current
 @echo.
 
 :: Add certifications to CRL(Base)
-CertMgr_x86 -add -c FakeGitHubCom_201301.crt -s Disallowed
-CertMgr_x86 -add -c FakeGoogleCom_201407.crt -s Disallowed
-CertMgr_x86 -add -c FakeGoogleCom_201409.crt -s Disallowed
-CertMgr_x86 -add -c FakeYahooCom_201409.crt -s Disallowed
-CertMgr_x86 -add -c FakeHotmaiCom_201410.crt -s Disallowed
+CertMgr_x86 -add -c Fake_GitHubCom_201301.crt -s Disallowed
+CertMgr_x86 -add -c Fake_GoogleCom_201407.crt -s Disallowed
+CertMgr_x86 -add -c Fake_GoogleCom_201409.crt -s Disallowed
+CertMgr_x86 -add -c Fake_YahooCom_201409.crt -s Disallowed
+CertMgr_x86 -add -c Fake_HotmaiCom_201410.crt -s Disallowed
+CertMgr_x86 -add -c Fake_WwwFacebookCom_201410.crt -s Disallowed
 CertMgr_x86 -add -c CNNIC_ROOT.crt -s Disallowed
 CertMgr_x86 -add -c China_Internet_Network_Information_Center_EV_Certificates_Root.crt -s Disallowed
 CertMgr_x86 -add -c CNNIC_SSL_Entrust.crt -s Disallowed
@@ -109,6 +115,11 @@ CertMgr -del -c -sha1 30F3B3ADC6E570BDA606B9F96DE24190CE262C67 -s -r localMachin
 CertMgr -del -c -sha1 30F3B3ADC6E570BDA606B9F96DE24190CE262C67 -s -r localMachine AuthRoot
 CertMgr -del -c -sha1 30F3B3ADC6E570BDA606B9F96DE24190CE262C67 -s -r CurrentUser Root
 CertMgr -del -c -sha1 30F3B3ADC6E570BDA606B9F96DE24190CE262C67 -s -r CurrentUser AuthRoot
+::  Fake Www.Facebook.Com(2014-10-08)
+CertMgr -del -c -sha1 DC6EE6EDC4C078E1B2C12F6D1985000E27CFD318 -s -r localMachine Root
+CertMgr -del -c -sha1 DC6EE6EDC4C078E1B2C12F6D1985000E27CFD318 -s -r localMachine AuthRoot
+CertMgr -del -c -sha1 DC6EE6EDC4C078E1B2C12F6D1985000E27CFD318 -s -r CurrentUser Root
+CertMgr -del -c -sha1 DC6EE6EDC4C078E1B2C12F6D1985000E27CFD318 -s -r CurrentUser AuthRoot
 ::  CNNIC ROOT
 CertMgr -del -c -sha1 8BAF4C9B1DF02A92F7DA128EB91BACF498604B6F -s -r localMachine Root
 CertMgr -del -c -sha1 8BAF4C9B1DF02A92F7DA128EB91BACF498604B6F -s -r localMachine AuthRoot
@@ -126,11 +137,12 @@ CertMgr -del -c -sha1 6856BB1A6C4F76DACA362187CC2CCD484EDDC25D -s -r CurrentUser
 @echo.
 
 :: Add certifications to CRL(Base)
-CertMgr -add -c FakeGitHubCom_201301.crt -s Disallowed
-CertMgr -add -c FakeGoogleCom_201407.crt -s Disallowed
-CertMgr -add -c FakeGoogleCom_201409.crt -s Disallowed
-CertMgr -add -c FakeYahooCom_201409.crt -s Disallowed
-CertMgr -add -c FakeHotmaiCom_201410.crt -s Disallowed
+CertMgr -add -c Fake_GitHubCom_201301.crt -s Disallowed
+CertMgr -add -c Fake_GoogleCom_201407.crt -s Disallowed
+CertMgr -add -c Fake_GoogleCom_201409.crt -s Disallowed
+CertMgr -add -c Fake_YahooCom_201409.crt -s Disallowed
+CertMgr -add -c Fake_HotmaiCom_201410.crt -s Disallowed
+CertMgr -add -c Fake_WwwFacebookCom_201410.crt -s Disallowed
 CertMgr -add -c CNNIC_ROOT.crt -s Disallowed
 CertMgr -add -c China_Internet_Network_Information_Center_EV_Certificates_Root.crt -s Disallowed
 CertMgr -add -c CNNIC_ROOT.crt -s Disallowed
diff --git a/Windows/AntiChinaCerts_Extended.bat b/Windows/AntiChinaCerts_Extended.bat
index 885bb298dc4cc9111413a5be10bc874a1597aa5f..2f0c8c6aea59d10ac8cb4a7273d79e13ecb2088d 100644
--- a/Windows/AntiChinaCerts_Extended.bat
+++ b/Windows/AntiChinaCerts_Extended.bat
@@ -54,6 +54,11 @@ CertMgr_x86 -del -c -sha1 30F3B3ADC6E570BDA606B9F96DE24190CE262C67 -s -r localMa
 CertMgr_x86 -del -c -sha1 30F3B3ADC6E570BDA606B9F96DE24190CE262C67 -s -r localMachine AuthRoot
 CertMgr_x86 -del -c -sha1 30F3B3ADC6E570BDA606B9F96DE24190CE262C67 -s -r CurrentUser Root
 CertMgr_x86 -del -c -sha1 30F3B3ADC6E570BDA606B9F96DE24190CE262C67 -s -r CurrentUser AuthRoot
+::  Fake Www.Facebook.Com(2014-10-08)
+CertMgr_x86 -del -c -sha1 DC6EE6EDC4C078E1B2C12F6D1985000E27CFD318 -s -r localMachine Root
+CertMgr_x86 -del -c -sha1 DC6EE6EDC4C078E1B2C12F6D1985000E27CFD318 -s -r localMachine AuthRoot
+CertMgr_x86 -del -c -sha1 DC6EE6EDC4C078E1B2C12F6D1985000E27CFD318 -s -r CurrentUser Root
+CertMgr_x86 -del -c -sha1 DC6EE6EDC4C078E1B2C12F6D1985000E27CFD318 -s -r CurrentUser AuthRoot
 ::  CNNIC ROOT
 CertMgr_x86 -del -c -sha1 8BAF4C9B1DF02A92F7DA128EB91BACF498604B6F -s -r localMachine Root
 CertMgr_x86 -del -c -sha1 8BAF4C9B1DF02A92F7DA128EB91BACF498604B6F -s -r localMachine AuthRoot
@@ -88,25 +93,31 @@ CertMgr_x86 -del -c -sha1 0B972C9EA6E7CC58D93B20BF71EC412E7209FABF -s -r localMa
 CertMgr_x86 -del -c -sha1 0B972C9EA6E7CC58D93B20BF71EC412E7209FABF -s -r localMachine AuthRoot
 CertMgr_x86 -del -c -sha1 0B972C9EA6E7CC58D93B20BF71EC412E7209FABF -s -r CurrentUser Root
 CertMgr_x86 -del -c -sha1 0B972C9EA6E7CC58D93B20BF71EC412E7209FABF -s -r CurrentUser AuthRoot
-::  UCA Root
+::  UCA Root(2004-01-01)
 CertMgr_x86 -del -c -sha1 8250BED5A214433A66377CBC10EF83F669DA3A67 -s -r localMachine Root
 CertMgr_x86 -del -c -sha1 8250BED5A214433A66377CBC10EF83F669DA3A67 -s -r localMachine AuthRoot
 CertMgr_x86 -del -c -sha1 8250BED5A214433A66377CBC10EF83F669DA3A67 -s -r CurrentUser Root
 CertMgr_x86 -del -c -sha1 8250BED5A214433A66377CBC10EF83F669DA3A67 -s -r CurrentUser AuthRoot
-::  UCA EV Root
+::  UCA Extended Validation Root
 CertMgr_x86 -del -c -sha1 B9C9F58B3BBEF575E2B58328770E7B0076C40B5E -s -r localMachine Root
 CertMgr_x86 -del -c -sha1 B9C9F58B3BBEF575E2B58328770E7B0076C40B5E -s -r localMachine AuthRoot
 CertMgr_x86 -del -c -sha1 B9C9F58B3BBEF575E2B58328770E7B0076C40B5E -s -r CurrentUser Root
 CertMgr_x86 -del -c -sha1 B9C9F58B3BBEF575E2B58328770E7B0076C40B5E -s -r CurrentUser AuthRoot
+::  UCA Root(2001-01-01)
+CertMgr_x86 -del -c -sha1 3120F295417730075F8CD42D0CAE008EB5726EF8 -s -r localMachine Root
+CertMgr_x86 -del -c -sha1 3120F295417730075F8CD42D0CAE008EB5726EF8 -s -r localMachine AuthRoot
+CertMgr_x86 -del -c -sha1 3120F295417730075F8CD42D0CAE008EB5726EF8 -s -r CurrentUser Root
+CertMgr_x86 -del -c -sha1 3120F295417730075F8CD42D0CAE008EB5726EF8 -s -r CurrentUser AuthRoot
 
 @echo.
 
 :: Add certifications to CRL(Base)
-CertMgr_x86 -add -c FakeGitHubCom_201301.crt -s Disallowed
-CertMgr_x86 -add -c FakeGoogleCom_201407.crt -s Disallowed
-CertMgr_x86 -add -c FakeGoogleCom_201409.crt -s Disallowed
-CertMgr_x86 -add -c FakeYahooCom_201409.crt -s Disallowed
-CertMgr_x86 -add -c FakeHotmaiCom_201410.crt -s Disallowed
+CertMgr_x86 -add -c Fake_GitHubCom_201301.crt -s Disallowed
+CertMgr_x86 -add -c Fake_GoogleCom_201407.crt -s Disallowed
+CertMgr_x86 -add -c Fake_GoogleCom_201409.crt -s Disallowed
+CertMgr_x86 -add -c Fake_YahooCom_201409.crt -s Disallowed
+CertMgr_x86 -add -c Fake_HotmaiCom_201410.crt -s Disallowed
+CertMgr_x86 -add -c Fake_WwwFacebookCom_201410.crt -s Disallowed
 CertMgr_x86 -add -c CNNIC_ROOT.crt -s Disallowed
 CertMgr_x86 -add -c China_Internet_Network_Information_Center_EV_Certificates_Root.crt -s Disallowed
 CertMgr_x86 -add -c CNNIC_SSL_Entrust.crt -s Disallowed
@@ -117,8 +128,10 @@ CertMgr_x86 -add -c CFCA_GT_CA_201106.crt -s Disallowed
 CertMgr_x86 -add -c CFCA_GT_CA_201208.crt -s Disallowed
 CertMgr_x86 -add -c CFCA_EV_ROOT.crt -s Disallowed
 CertMgr_x86 -add -c UCA_Global_Root.crt -s Disallowed
-CertMgr_x86 -add -c UCA_Root.crt -s Disallowed
-CertMgr_x86 -add -c UCA_EV_Root.crt -s Disallowed
+CertMgr_x86 -add -c UCA_Root_200401.crt -s Disallowed
+CertMgr_x86 -add -c UCA_Extended_Validation_Root.crt -s Disallowed
+CertMgr_x86 -add -c UCA_Root_200101.crt -s Disallowed
+
 goto Exit
 
 :X64
@@ -148,6 +161,11 @@ CertMgr -del -c -sha1 30F3B3ADC6E570BDA606B9F96DE24190CE262C67 -s -r localMachin
 CertMgr -del -c -sha1 30F3B3ADC6E570BDA606B9F96DE24190CE262C67 -s -r localMachine AuthRoot
 CertMgr -del -c -sha1 30F3B3ADC6E570BDA606B9F96DE24190CE262C67 -s -r CurrentUser Root
 CertMgr -del -c -sha1 30F3B3ADC6E570BDA606B9F96DE24190CE262C67 -s -r CurrentUser AuthRoot
+::  Fake Www.Facebook.Com(2014-10-08)
+CertMgr -del -c -sha1 DC6EE6EDC4C078E1B2C12F6D1985000E27CFD318 -s -r localMachine Root
+CertMgr -del -c -sha1 DC6EE6EDC4C078E1B2C12F6D1985000E27CFD318 -s -r localMachine AuthRoot
+CertMgr -del -c -sha1 DC6EE6EDC4C078E1B2C12F6D1985000E27CFD318 -s -r CurrentUser Root
+CertMgr -del -c -sha1 DC6EE6EDC4C078E1B2C12F6D1985000E27CFD318 -s -r CurrentUser AuthRoot
 ::  CNNIC ROOT
 CertMgr -del -c -sha1 8BAF4C9B1DF02A92F7DA128EB91BACF498604B6F -s -r localMachine Root
 CertMgr -del -c -sha1 8BAF4C9B1DF02A92F7DA128EB91BACF498604B6F -s -r localMachine AuthRoot
@@ -182,25 +200,31 @@ CertMgr -del -c -sha1 0B972C9EA6E7CC58D93B20BF71EC412E7209FABF -s -r localMachin
 CertMgr -del -c -sha1 0B972C9EA6E7CC58D93B20BF71EC412E7209FABF -s -r localMachine AuthRoot
 CertMgr -del -c -sha1 0B972C9EA6E7CC58D93B20BF71EC412E7209FABF -s -r CurrentUser Root
 CertMgr -del -c -sha1 0B972C9EA6E7CC58D93B20BF71EC412E7209FABF -s -r CurrentUser AuthRoot
-::  UCA Root
+::  UCA Root(2004-01-01)
 CertMgr -del -c -sha1 8250BED5A214433A66377CBC10EF83F669DA3A67 -s -r localMachine Root
 CertMgr -del -c -sha1 8250BED5A214433A66377CBC10EF83F669DA3A67 -s -r localMachine AuthRoot
 CertMgr -del -c -sha1 8250BED5A214433A66377CBC10EF83F669DA3A67 -s -r CurrentUser Root
 CertMgr -del -c -sha1 8250BED5A214433A66377CBC10EF83F669DA3A67 -s -r CurrentUser AuthRoot
-::  UCA EV Root
+::  UCA Extended Validation Root
 CertMgr -del -c -sha1 B9C9F58B3BBEF575E2B58328770E7B0076C40B5E -s -r localMachine Root
 CertMgr -del -c -sha1 B9C9F58B3BBEF575E2B58328770E7B0076C40B5E -s -r localMachine AuthRoot
 CertMgr -del -c -sha1 B9C9F58B3BBEF575E2B58328770E7B0076C40B5E -s -r CurrentUser Root
 CertMgr -del -c -sha1 B9C9F58B3BBEF575E2B58328770E7B0076C40B5E -s -r CurrentUser AuthRoot
+::  UCA Root(2001-01-01)
+CertMgr -del -c -sha1 3120F295417730075F8CD42D0CAE008EB5726EF8 -s -r localMachine Root
+CertMgr -del -c -sha1 3120F295417730075F8CD42D0CAE008EB5726EF8 -s -r localMachine AuthRoot
+CertMgr -del -c -sha1 3120F295417730075F8CD42D0CAE008EB5726EF8 -s -r CurrentUser Root
+CertMgr -del -c -sha1 3120F295417730075F8CD42D0CAE008EB5726EF8 -s -r CurrentUser AuthRoot
 
 @echo.
 
 :: Add certifications to CRL(Base)
-CertMgr -add -c FakeGitHubCom_201301.crt -s Disallowed
-CertMgr -add -c FakeGoogleCom_201407.crt -s Disallowed
-CertMgr -add -c FakeGoogleCom_201409.crt -s Disallowed
-CertMgr -add -c FakeYahooCom_201409.crt -s Disallowed
-CertMgr -add -c FakeHotmaiCom_201410.crt -s Disallowed
+CertMgr -add -c Fake_GitHubCom_201301.crt -s Disallowed
+CertMgr -add -c Fake_GoogleCom_201407.crt -s Disallowed
+CertMgr -add -c Fake_GoogleCom_201409.crt -s Disallowed
+CertMgr -add -c Fake_YahooCom_201409.crt -s Disallowed
+CertMgr -add -c Fake_HotmaiCom_201410.crt -s Disallowed
+CertMgr -add -c Fake_WwwFacebookCom_201410.crt -s Disallowed
 CertMgr -add -c CNNIC_ROOT.crt -s Disallowed
 CertMgr -add -c China_Internet_Network_Information_Center_EV_Certificates_Root.crt -s Disallowed
 CertMgr -add -c CNNIC_SSL_Entrust.crt -s Disallowed
@@ -211,8 +235,9 @@ CertMgr -add -c CFCA_GT_CA_201106.crt -s Disallowed
 CertMgr -add -c CFCA_GT_CA_201208.crt -s Disallowed
 CertMgr -add -c CFCA_EV_ROOT.crt -s Disallowed
 CertMgr -add -c UCA_Global_Root.crt -s Disallowed
-CertMgr -add -c UCA_Root.crt -s Disallowed
-CertMgr -add -c UCA_EV_Root.crt -s Disallowed
+CertMgr -add -c UCA_Root_200401.crt -s Disallowed
+CertMgr -add -c UCA_Extended_Validation_Root.crt -s Disallowed
+CertMgr -add -c UCA_Root_200101.crt -s Disallowed
 
 :Exit
 :: Print to screen.
diff --git a/Windows/AntiChinaCerts_Restore.bat b/Windows/AntiChinaCerts_Restore.bat
index a4eb930661b48eee57dbd92624746923c35091f5..9739875ab56d5a606fc6e003c40cefb7318b139b 100644
--- a/Windows/AntiChinaCerts_Restore.bat
+++ b/Windows/AntiChinaCerts_Restore.bat
@@ -39,12 +39,15 @@ CertMgr_x86 -del -c -sha1 316076F2866588DBB233C7F9EB68B58125150C21 -s Disallowed
 CertMgr_x86 -del -c -sha1 2290C311EA0F3F57E06DF45B698E18E828E59BC3 -s Disallowed
 ::  Fake Hotmai.Com(2014-10-02)
 CertMgr_x86 -del -c -sha1 30F3B3ADC6E570BDA606B9F96DE24190CE262C67 -s Disallowed
+::  Fake Www.Facebook.Com(2014-10-08)
+CertMgr_x86 -del -c -sha1 DC6EE6EDC4C078E1B2C12F6D1985000E27CFD318 -s Disallowed
 ::  CNNIC ROOT
 CertMgr_x86 -del -c -sha1 8BAF4C9B1DF02A92F7DA128EB91BACF498604B6F -s Disallowed
 ::  China Internet Network Information Center EV Certificates Root
 CertMgr_x86 -del -c -sha1 4F99AA93FB2BD13726A1994ACE7FF005F2935D1E -s Disallowed
 ::  CNNIC SSL(Entrust)
 CertMgr_x86 -del -c -sha1 6856BB1A6C4F76DACA362187CC2CCD484EDDC25D -s Disallowed
+::  Fake Www.Facebook.Com(2014-10-08)
 :: Delete certifications(Extended)
 ::  CFCA GT CA(2011-06-13)
 CertMgr_x86 -del -c -sha1 EABDA240440ABBD694930A01D09764C6C2D77966 -s Disallowed
@@ -54,10 +57,12 @@ CertMgr_x86 -del -c -sha1 A8F2DFE36AE0CC2DB9DD38347D30AED9551DD25A -s Disallowed
 CertMgr_x86 -del -c -sha1 E2B8294B5584AB6B58C290466CAC3FB8398F8483 -s Disallowed
 ::  UCA Global Root
 CertMgr_x86 -del -c -sha1 0B972C9EA6E7CC58D93B20BF71EC412E7209FABF -s Disallowed
-::  UCA Root
+::  UCA Root(2004-01-01)
 CertMgr_x86 -del -c -sha1 8250BED5A214433A66377CBC10EF83F669DA3A67 -s Disallowed
-::  UCA EV Root
+::  UCA Extended Validation Root
 CertMgr_x86 -del -c -sha1 B9C9F58B3BBEF575E2B58328770E7B0076C40B5E -s Disallowed
+::  UCA Root(2001-01-01)
+CertMgr_x86 -del -c -sha1 3120F295417730075F8CD42D0CAE008EB5726EF8 -s Disallowed
 :: Delete certifications(All)
 ::  ROOTCA
 CertMgr_x86 -del -c -sha1 DBB84423C928ABE889D0E368FC3191D151DDB1AB -s Disallowed
@@ -104,6 +109,8 @@ CertMgr -del -c -sha1 316076F2866588DBB233C7F9EB68B58125150C21 -s Disallowed
 CertMgr -del -c -sha1 2290C311EA0F3F57E06DF45B698E18E828E59BC3 -s Disallowed
 ::  Fake Hotmai.Com(2014-10-02)
 CertMgr -del -c -sha1 30F3B3ADC6E570BDA606B9F96DE24190CE262C67 -s Disallowed
+::  Fake Www.Facebook.Com(2014-10-08)
+CertMgr -del -c -sha1 DC6EE6EDC4C078E1B2C12F6D1985000E27CFD318 -s Disallowed
 ::  CNNIC ROOT
 CertMgr -del -c -sha1 8BAF4C9B1DF02A92F7DA128EB91BACF498604B6F -s Disallowed
 ::  China Internet Network Information Center EV Certificates Root
@@ -121,8 +128,10 @@ CertMgr -del -c -sha1 E2B8294B5584AB6B58C290466CAC3FB8398F8483 -s Disallowed
 CertMgr -del -c -sha1 0B972C9EA6E7CC58D93B20BF71EC412E7209FABF -s Disallowed
 ::  UCA Root
 CertMgr -del -c -sha1 8250BED5A214433A66377CBC10EF83F669DA3A67 -s Disallowed
-::  UCA EV Root
+::  UCA Extended Validation Root
 CertMgr -del -c -sha1 B9C9F58B3BBEF575E2B58328770E7B0076C40B5E -s Disallowed
+::  UCA Root(2001-01-01)
+CertMgr -del -c -sha1 3120F295417730075F8CD42D0CAE008EB5726EF8 -s Disallowed
 :: Delete certifications(All)
 ::  ROOTCA
 CertMgr -del -c -sha1 DBB84423C928ABE889D0E368FC3191D151DDB1AB -s Disallowed
diff --git a/Windows/Certs/CFCA.crt b/Windows/Certs/CFCA.crt
new file mode 100644
index 0000000000000000000000000000000000000000..117e67807c74064ff3b9afc4a00c98390f971a80
--- /dev/null
+++ b/Windows/Certs/CFCA.crt
@@ -0,0 +1,19 @@
+-----BEGIN CERTIFICATE-----
+MIIDFTCCAf2gAwIBAgIEHdPkkzANBgkqhkiG9w0BAQUFADAcMQswCQYDVQQGEwJD
+TjENMAsGA1UEChMEQ0ZDQTAgFw0xMTA1MTYwMjQwMDVaGA80NzQ5MDQxMTAyNDAw
+NVowHDELMAkGA1UEBhMCQ04xDTALBgNVBAoTBENGQ0EwggEiMA0GCSqGSIb3DQEB
+AQUAA4IBDwAwggEKAoIBAQDe4Q202Vw/BluMii48Fc85TuUfCYSZN+FjxKGd6cp1
++iCor4NmQ6bOxKes9wUG7bkuiafAsyW/ZXS9US55G0hvmOWDR/hEOibdCTeQPyAY
+bLKeA4taXKSvffsZt+z6DSfoykLZ6Tq3fr5d8KJTUekeF6at7yWI4BvzJkB+kqEF
+X8xBrgFivQawR0Zm5HZlVF93ku/SZuxUtEgmMGm2oRQINL5IstWpMCYWo0bAjHQH
+0g2AoEOWqWJwAXqtQjE5XZ4QdsEvySOaQuZiTT4ZdNpHKS+P4IcF84795khgjCPD
+gccT5z9L0MRt6zNUlMSqqycHAwgdhGPuItXQ2dZv00SPAgMBAAGjXTBbMB8GA1Ud
+IwQYMBaAFA3IdybpGjEQ6lww0FuLz6NOwXLOMAwGA1UdEwQFMAMBAf8wCwYDVR0P
+BAQDAgHGMB0GA1UdDgQWBBQNyHcm6RoxEOpcMNBbi8+jTsFyzjANBgkqhkiG9w0B
+AQUFAAOCAQEAiA0lpAYcRMuxSR5F5c1dtibr/w1zWlL9/3roeQiIY8aykbbyo2fW
+USFDQXhjLOaBYPz2p9ZgAEOL0ck14pszxa/ERHAbObXIzxlizgZpDKpqokMrG3sQ
+sSW7luVfkDedOq43BOWOIwtRf9jjN+W9xr6n/XsI+/ebf3WDhba3gqOTsZWsPpYq
+GpxnGWYni+KWjUCTWzbuHyb1S+7uPaCtXCuvsk9fDPrxjQqpeld+kq/kly/6FjgV
+2crsXZ4U1Vkkco1T9TvAz6a72OmDq09fsAX5Bq+D7Rh3IrnD4uIhQoMIvGhs4PyX
+xhuiATCkTR0X30OcuNf+PbXFD5FWUWrZ4w==
+-----END CERTIFICATE-----
diff --git a/Windows/Certs/CFCA_CS_CA.crt b/Windows/Certs/CFCA_CS_CA.crt
new file mode 100644
index 0000000000000000000000000000000000000000..6dbdb9cf3ce7ff5ee9a132989f6342341de2f5e2
--- /dev/null
+++ b/Windows/Certs/CFCA_CS_CA.crt
@@ -0,0 +1,19 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
diff --git a/Windows/Certs/CFCA_CS_SM2_OCA11.crt b/Windows/Certs/CFCA_CS_SM2_OCA11.crt
deleted file mode 100644
index 41cf327ae9723549bd3bbbbe6da2e9ae2f5fddec..0000000000000000000000000000000000000000
--- a/Windows/Certs/CFCA_CS_SM2_OCA11.crt
+++ /dev/null
@@ -1,17 +0,0 @@
------BEGIN CERTIFICATE-----
-MIICrzCCAlOgAwIBAgIQLn+JRWnObfUtfuKEZ9Lk3zAMBggqgRzPVQGDdQUAMC4x
-CzAJBgNVBAYTAkNOMQ4wDAYDVQQKDAVOUkNBQzEPMA0GA1UEAwwGUk9PVENBMB4X
-DTEyMTEwNzA4NDkxMFoXDTMyMTEwMjA4NDkxMFowWzELMAkGA1UEBhMCQ04xMDAu
-BgNVBAoMJ0NoaW5hIEZpbmFuY2lhbCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTEa
-MBgGA1UEAwwRQ0ZDQSBDUyBTTTIgT0NBMTEwWTATBgcqhkjOPQIBBggqgRzPVQGC
-LQNCAASnDkbetOVe0SucjNmlPu5AmCNz6zVj7Kh7re0E/2nz/sReVrKYLhplUJ6f
-b4wb6SAY3/FVwYhEAenJ5m8ukBZro4IBIjCCAR4wHwYDVR0jBBgwFoAUTDKxl9kz
-G8SmBcHG5YtiW/CXdlgwDwYDVR0TAQH/BAUwAwEB/zCBugYDVR0fBIGyMIGvMEGg
-P6A9pDswOTELMAkGA1UEBhMCQ04xDjAMBgNVBAoMBU5SQ0FDMQwwCgYDVQQLDANB
-UkwxDDAKBgNVBAMMA2FybDAqoCigJoYkaHR0cDovL3d3dy5yb290Y2EuZ292LmNu
-L2FybC9hcmwuY3JsMD6gPKA6hjhsZGFwOi8vbGRhcC5yb290Y2EuZ292LmNuOjM4
-OS9DTj1hcmwsT1U9QVJMLE89TlJDQUMsQz1DTjAOBgNVHQ8BAf8EBAMCAQYwHQYD
-VR0OBBYEFELKIYmPojqdSxQYPaTM6FCIcOIRMAwGCCqBHM9VAYN1BQADSAAwRQIg
-NLamIOr/COLFBwLUMM1qFp2g9CwJvBztIxSwU5T+CKECIQD+CQkIkfVewNx1WhBN
-hwCsQkuV2yi3ml3GyBtfkzBjqw==
------END CERTIFICATE-----
diff --git a/Windows/Certs/CFCA_RSA_RCA.crt b/Windows/Certs/CFCA_RSA_RCA.crt
new file mode 100644
index 0000000000000000000000000000000000000000..d1f322fb70f3dd0cf1252539022e8c8394a16c3c
--- /dev/null
+++ b/Windows/Certs/CFCA_RSA_RCA.crt
@@ -0,0 +1,19 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
diff --git a/Windows/Certs/CFCA_Root_CA.crt b/Windows/Certs/CFCA_Root_CA.crt
new file mode 100644
index 0000000000000000000000000000000000000000..2f1052c86b684828b205ed45f521536d26836ad0
--- /dev/null
+++ b/Windows/Certs/CFCA_Root_CA.crt
@@ -0,0 +1,17 @@
+-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
diff --git a/Windows/Certs/CFCA_SM2_RCA.crt b/Windows/Certs/CFCA_SM2_RCA.crt
new file mode 100644
index 0000000000000000000000000000000000000000..e6a0884de41243c5225fdab4455e55e8e62dd13e
--- /dev/null
+++ b/Windows/Certs/CFCA_SM2_RCA.crt
@@ -0,0 +1,11 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
diff --git a/Windows/Certs/FakeGitHubCom_201301.crt b/Windows/Certs/Fake_GitHubCom_201301.crt
similarity index 100%
rename from Windows/Certs/FakeGitHubCom_201301.crt
rename to Windows/Certs/Fake_GitHubCom_201301.crt
diff --git a/Windows/Certs/FakeGoogleCom_201407.crt b/Windows/Certs/Fake_GoogleCom_201407.crt
similarity index 100%
rename from Windows/Certs/FakeGoogleCom_201407.crt
rename to Windows/Certs/Fake_GoogleCom_201407.crt
diff --git a/Windows/Certs/FakeGoogleCom_201409.crt b/Windows/Certs/Fake_GoogleCom_201409.crt
similarity index 100%
rename from Windows/Certs/FakeGoogleCom_201409.crt
rename to Windows/Certs/Fake_GoogleCom_201409.crt
diff --git a/Windows/Certs/FakeHotmaiCom_201410.crt b/Windows/Certs/Fake_HotmaiCom_201410.crt
similarity index 100%
rename from Windows/Certs/FakeHotmaiCom_201410.crt
rename to Windows/Certs/Fake_HotmaiCom_201410.crt
diff --git a/Windows/Certs/Fake_WwwFacebookCom_201410.crt b/Windows/Certs/Fake_WwwFacebookCom_201410.crt
new file mode 100644
index 0000000000000000000000000000000000000000..cdf3b973362d6970e76f2c3ec7dc7257dc936ef2
--- /dev/null
+++ b/Windows/Certs/Fake_WwwFacebookCom_201410.crt
@@ -0,0 +1,12 @@
+-----BEGIN CERTIFICATE-----
+MIIBuTCCASKgAwIBAgIQZJfQnDu8m6+FftPCmjHR7DANBgkqhkiG9w0BAQUFADAb
+MRkwFwYDVQQDDBB3d3cuZmFjZWJvb2suY29tMB4XDTE0MTAwNzE2MDAwMFoXDTE1
+MDQwNzE2MDAwMFowGzEZMBcGA1UEAwwQd3d3LmZhY2Vib29rLmNvbTCBnzANBgkq
+hkiG9w0BAQEFAAOBjQAwgYkCgYEAoKDDaJ7J8zO/f4IYcN6fgB5u0wkS1LQnj5mp
++PCaj2m4WsTCLTJvh/BdQbMy+2+IQqECpt6Nqac9O5m1rcA/qb69y9VkwYiNCgZK
+SEs68jtlpdqXEMpd9eXHtBufygdtAUhYaC2D3Iw34/j3+pkhpXtfw106oBnQ6T9w
+ADJocBMCAwEAATANBgkqhkiG9w0BAQUFAAOBgQBgvtWbJ5lEpQxwCwjwNGXWuW7g
+hihrcjiRhYkoL1K40Qf0mm4SmmF466Qem+xfHl9fFte3+A+x9QPa4bjBHObRgXRp
+pTbkyu5pYtf/oIgTBHiyfUHFWOUkDJeIwD0O72cpRD9zOYf9a74jnyql9hdcginK
+L15lZtamvA1EsZCO0w==
+-----END CERTIFICATE-----
diff --git a/Windows/Certs/FakeYahooCom_201409.crt b/Windows/Certs/Fake_YahooCom_201409.crt
similarity index 100%
rename from Windows/Certs/FakeYahooCom_201409.crt
rename to Windows/Certs/Fake_YahooCom_201409.crt
diff --git a/Windows/Certs/ROOTCA_NRCAC.crt b/Windows/Certs/ROOTCA_NRCAC.crt
new file mode 100644
index 0000000000000000000000000000000000000000..ae04bf53375d18a80679a1b823ab7532cd14efbf
--- /dev/null
+++ b/Windows/Certs/ROOTCA_NRCAC.crt
@@ -0,0 +1,12 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
diff --git a/Windows/Certs/ROOTCA.crt b/Windows/Certs/ROOTCA_OSCCA.crt
similarity index 100%
rename from Windows/Certs/ROOTCA.crt
rename to Windows/Certs/ROOTCA_OSCCA.crt
diff --git a/Windows/Certs/UCA_EV_Root.crt b/Windows/Certs/UCA_Extended_Validation_Root.crt
similarity index 100%
rename from Windows/Certs/UCA_EV_Root.crt
rename to Windows/Certs/UCA_Extended_Validation_Root.crt
diff --git a/Windows/Certs/UCA_Root_200101.crt b/Windows/Certs/UCA_Root_200101.crt
new file mode 100644
index 0000000000000000000000000000000000000000..eeaf0d38d23ba3d6e95f6419cfb47c2ef6af7aae
--- /dev/null
+++ b/Windows/Certs/UCA_Root_200101.crt
@@ -0,0 +1,12 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
diff --git a/Windows/Certs/UCA_Root.crt b/Windows/Certs/UCA_Root_200401.crt
similarity index 100%
rename from Windows/Certs/UCA_Root.crt
rename to Windows/Certs/UCA_Root_200401.crt