Add DarkMatter's QuoVadis Subordinate CAs to OneCRL

This case requests adding specific DarkMatter subordinate CA certificates to Mozilla’s OneCRL. Wayne Thayer asked, pending Kathleen’s approval, to add three DarkMatter subordinate CAs to OneCRL, referencing a discussion on the mozilla.dev.security.policy mailing list. Another participant noted additional DarkMatter intermediates that were revoked and suggested adding them to OneCRL for completeness, and also mentioned prior reports about incorrect syntax in nameConstraints for some intermediates. Kathleen Wilson provided CCADB details for six relevant intermediate certificates, including their revocation status and whether they were already added to OneCRL. Kathleen later approved Wayne’s request, and the bug was resolved as FIXED. Kathleen also stated that the certificates were added to OneCRL via Bug #1622034, and referenced a denied appeal related to a different decision.

1. 2019-07-09 Wayne Thayer requested adding three DarkMatter subordinate CA certificates to OneCRL, pending approval.
2. 2019-07-15 CCADB status details for relevant intermediates were provided, including OneCRL addition and revocation status.
3. 2019-07-16 Kathleen approved the OneCRL addition request.
4. 2020-03-31 Kathleen noted the OneCRL additions were made via Bug #1622034 and referenced a denied appeal.

1. 2019-07-09 Fastly representative — Pending Kathleen's approval, Wayne requested adding three specified DarkMatter subordinate CAs to OneCRL and cited a mailing-list discussion.
2. 2019-07-09 Community commenter — Corey suggested adding three additional revoked DarkMatter intermediates to OneCRL and mentioned prior Certificate Problem Report activity about nameConstraints syntax issues.
3. 2019-07-15 Mozilla representative — Kathleen provided CCADB information for six intermediate certs, including revocation status and whether they were added to OneCRL.
4. 2019-07-16 Mozilla representative — Kathleen approved Wayne's request to add the three listed DarkMatter subordinate CAs to OneCRL.
5. 2020-03-31 Mozilla representative — Kathleen stated Mozilla denied a referenced appeal and noted these certs were added to OneCRL via Bug #1622034.