<?xml version="1.0" encoding="UTF-8" ?>
<fragment version="1.0" xmlns="http://www.symbian.com/java/j2me/security/trustroots/policy">

	<!-- Device trust root policies -->

	<!-- Trust root policies for manufacturer device certificates -->

	<trustroot>
		<certificate>
			<device>
				<name>Sony_Ericsson_Java</name>
			</device>
		</certificate>
		<binding>
			<domain>*MFD*</domain>
		</binding>
	</trustroot>

	<!-- Trust root policies for operator device certificates -->

	<!-- Trust root policies for third-party device certificates -->

	<trustroot>
		<certificate>
			<device>
				<name>Utiroot</name>
				<access>
					<disable/>
				</access>
			</device>
		</certificate>
		<binding>
			<volatile/>
			<domain>*TTPD*</domain>
		</binding>
	</trustroot>

	<trustroot>
		<certificate>
			<device>
				<name>PCA3ss_v4</name>
				<access>
					<disable/>
				</access>
			</device>
		</certificate>
		<binding>
			<volatile/>
			<domain>*TTPD*</domain>
		</binding>
	</trustroot>

	<trustroot>
		<certificate>
			<device>
				<name>ThawtePremiumServerCA</name>
				<access>
					<delete/>
					<disable/>
				</access>
			</device>
		</certificate>
		<binding>
			<volatile/>
			<domain>*TTPD*</domain>
		</binding>
	</trustroot>

	<!-- Cryptotoken trust root polcies -->

	<!-- Trust root policy for operator cryptotoken certificate(s) -->

	<trustroot>
		<priority>1</priority>
		<certificate>
			<cryptotoken>
				<location>
					<path>trustedCertificates</path>
				</location>
				<constraint>
					<trustedusage>
						<oid>1.3.6.1.4.1.42.2.110.2.2.2.1</oid>
					</trustedusage>
				</constraint>
			</cryptotoken>
		</certificate>
		<binding>
			<volatile/>
			<domain>*OPD*</domain>
		</binding>
	</trustroot>

	<!-- Trust root policy for third-party cryptotoken certificate(s) -->

	<trustroot>
		<certificate>
			<cryptotoken>
				<location>
					<path>trustedCertificates</path>
				</location>
				<constraint>
					<not>
						<trustedusage>
							<oid>1.3.6.1.4.1.42.2.110.2.2.2.1</oid>
						</trustedusage>
					</not>
				</constraint>
			</cryptotoken>
		</certificate>
		<binding>
			<domain>*TTPD*</domain>
		</binding>
	</trustroot>

</fragment>
