/usr/share/igtf-policy/classic/DigiCertGridRootCA-Root.signing_policy is in igtf-policy-classic 1.79-1.
This file is owned by root:root, with mode 0o644.
The actual contents of the file can be viewed below.
1 2 3 4 | # DigiCert Grid Root CA Signing Policy
access_id_CA X509 '/DC=com/DC=DigiCert-Grid/O=DigiCert Grid/CN=DigiCert Grid Root CA'
pos_rights globus CA:sign
cond_subjects globus '"/DC=com/DC=DigiCert-Grid/O=DigiCert Grid/CN=DigiCert Grid CA-1" "/DC=com/DC=DigiCert-Grid/O=DigiCert Grid/CN=DigiCert Grid CA-1 G2" "/DC=DigiCert-Grid/DC=com/O=DigiCert Grid/CN=DigiCert Grid CA-1 G2"'
|