diff --git a/diff-from-upstream-2.7.patch b/diff-from-upstream-2.7.patch
index 2dd5ae5..6ed8fc1 100644
--- a/diff-from-upstream-2.7.patch
+++ b/diff-from-upstream-2.7.patch
@@ -1,5 +1,5 @@
---- certdata.txt.orig	2016-03-31 14:17:42.120707000 +0200
-+++ certdata.txt	2016-03-31 14:54:17.308749055 +0200
+--- certdata.txt.orig	2016-04-06 17:57:28.073812631 +0200
++++ certdata.txt	2016-04-06 17:59:06.732655325 +0200
 @@ -63,20 +63,435 @@
  # have to go looking for others.
  #
@@ -436,6 +436,29 @@
  # Fingerprint (MD5): 67:CB:9D:C0:13:24:8A:82:9B:B2:17:1E:D1:1B:EC:D4
  # Fingerprint (SHA1): D2:32:09:AD:23:D3:14:23:21:74:E4:0D:7F:9D:62:13:97:86:63:3A
  CKA_CLASS CK_OBJECT_CLASS CKO_CERTIFICATE
+@@ -180,21 +595,21 @@
+ CKA_ISSUER MULTILINE_OCTAL
+ \060\116\061\013\060\011\006\003\125\004\006\023\002\125\123\061
+ \020\060\016\006\003\125\004\012\023\007\105\161\165\151\146\141
+ \170\061\055\060\053\006\003\125\004\013\023\044\105\161\165\151
+ \146\141\170\040\123\145\143\165\162\145\040\103\145\162\164\151
+ \146\151\143\141\164\145\040\101\165\164\150\157\162\151\164\171
+ END
+ CKA_SERIAL_NUMBER MULTILINE_OCTAL
+ \002\004\065\336\364\317
+ END
+-CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_MUST_VERIFY_TRUST
++CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_TRUSTED_DELEGATOR
+ CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_TRUSTED_DELEGATOR
+ CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_MUST_VERIFY_TRUST
+ CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE
+ 
+ # Distrust "Distrust a pb.com certificate that does not comply with the baseline requirements."
+ # Issuer: OU=Equifax Secure Certificate Authority,O=Equifax,C=US
+ # Serial Number: 1407252 (0x157914)
+ # Subject: CN=*.pb.com,OU=Meters,O=Pitney Bowes,L=Danbury,ST=Connecticut,C=US
+ # Not Valid Before: Mon Feb 01 14:54:04 2010
+ # Not Valid After : Tue Sep 30 00:00:00 2014
 @@ -324,23 +739,23 @@
  \147\156\054\040\111\156\143\056\061\067\060\065\006\003\125\004
  \013\023\056\103\154\141\163\163\040\063\040\120\165\142\154\151