1<?xml version="1.0" encoding="utf-8"?>
2<network-security-config>
3  <!-- Entry with a bad pin. Connections to this will only succeed if overridePins is set. -->
4  <domain-config>
5    <domain>android.com</domain>
6    <pin-set>
7      <pin digest="SHA-256">aaaaaaaaIAq2Y49orFOOQKurWxmmSFZhBCoQYcRhJ3Y=</pin>
8    </pin-set>
9    <trust-anchors>
10      <certificates src="system" overridePins="false" />
11    </trust-anchors>
12  </domain-config>
13  <!-- override that contains all of the system CA store. This should completely override the
14       anchors in the domain config-above with ones that have overridePins set. -->
15  <debug-overrides>
16    <trust-anchors>
17      <certificates src="system" />
18    </trust-anchors>
19  </debug-overrides>
20</network-security-config>
21