Add revoked WoSign G2 intermediate certificates to OneCRL

WoSign CA Limited reported that Certum revoked subordinate CAs issued to its “Certification Authority of WoSign G2” after WoSign CA Limited lost its WebTrust seal for its roots. The revoked subordinate CAs were posted on WoSign CA Limited’s public CRL at http://crl.certum.pl/ca.crl, and WoSign stated that the revocations had been marked at Mozilla Salesforce. The CA requested that Mozilla update OneCRL with the revoked intermediate certificate information. A Mozilla reviewer provided the two revoked certificate details and noted that the CRL URLs were initially failing (404/Server not found) and asked for them to be fixed. WoSign confirmed the issue was resolved (“It works”), and the reviewer later confirmed both CRL URLs worked and contained the entries, then asked for them to be added to OneCRL. The reviewer later confirmed that the revoked certificates were added to OneCRL and provided a link for reporting future intermediate revocations.

1. 2016-11-29 WoSign CA Limited opened a CA Program bug requesting OneCRL updates for revoked WoSign G2 intermediates after Certum revocations.
2. 2016-11-30 A reviewer identified the revoked certificate details and reported that the referenced CRL URLs were not reachable.
3. 2016-12-01 WoSign CA Limited confirmed the CRL URLs were fixed and working.
4. 2016-12-01 The reviewer confirmed the CRL URLs contained the revoked entries and requested adding them to OneCRL.
5. 2017-02-02 The reviewer confirmed the revoked certificates were added to OneCRL and referenced guidance for future reports.

1. 2016-11-29 Assecods representative — Created the bug and requested updating OneCRL after Certum revoked subordinate CAs issued to Certification Authority of WoSign G2, noting the revocations were posted on WoSign’s public CRL and marked in Mozilla Salesforce.
2. 2016-11-30 Mozilla representative — Provided two revoked certificate identifiers (serial numbers) and their CRL URLs for the reviewer to use.
3. 2016-11-30 Mozilla representative — Asked Arkadiusz to fix the CRL URLs because one returned 404 and the other was not found.
4. 2016-12-01 Assecods representative — Confirmed the issue was resolved and that it works.
5. 2016-12-01 Mozilla representative — Confirmed both CRL URLs work and contain the entries, and asked Mark to add them to OneCRL.
6. 2017-02-02 Mozilla representative — Confirmed the revoked certificates were added to OneCRL and noted future revocations should be reported using the linked process.