OneCRL Entry
0788468a-d95f-4058-8bb4-58e82cc2174c
Revocation Entry
- Status
- disabled
- Serial
00F4AC0694A66BDEB59851433B9B02BE- Last Modified
- 2025-01-08 22:18:56 UTC
- Schema
- 1734800449239
Issuer
- DN
- C=CH, O=SwissSign AG, CN=SwissSign RSA TLS Root CA 2021 - 1
- DN SHA-256
1f0d977ef92f9ee33ea358a4a83c8295720d20096a93edf79d1c32576a0e7f17- Issuer DER
MFExCzAJBgNVBAYTAkNIMRUwEwYDVQQKEwxTd2lzc1NpZ24gQUcxKzApBgNVBAMTIlN3aXNzU2lnbiBSU0EgVExTIFJvb3QgQ0EgMjAyMSAtIDE=
Context
- Bugzilla
- 1938770
- Action
- Fifteen disabled OneCRL records tied to bug 1938770 were added for specific issuer/serial pairs representing revoked intermediate certificates, initiated by the Common CA Database to OneCRL Bot when it opened the bug on 2024-12-21. Ben Wilson explicitly confirmed on 2025-01-06 that these were the correct entries, staging approval was recorded on 2025-01-07, production approval on 2025-01-08, and propagation to OneCRL and Firefox profiles was verified on 2025-01-09.
- Confidence
- Explicit in OneCRL thread · 0.98
CCADB Link
- Issuer CA
- SwissSign RSA TLS Root CA 2021 - 1
- CA Owner
- SwissSign AG
AI Summary
Generated 2026-06-30 11:13 UTC · Model: gpt-5.4Bug 1938770 tracks a batch addition of revoked intermediate certificate entries to Mozilla OneCRL. The bug was created on 2024-12-21 by the Common CA Database to OneCRL Bot, which stated that it was adding entries to OneCRL based on revoked intermediate certificates reported in the CCADB. The proposed additions covered 15 issuer-and-serial entries associated with SwissSign AG, Telia Company, Krajowa Izba Rozliczeniowa S.A. (KIR), and SECOM Trust Systems Co., Ltd. On 2025-01-06, Ben Wilson confirmed that these were the correct entries to add to OneCRL. The entries were then approved in staging on 2025-01-07, confirmed as correct for production on 2025-01-08, approved in production on 2025-01-08, and verified as propagated to OneCRL and Firefox profiles on 2025-01-09. The thread does not state individual revocation reasons, revocation dates, or any external compliance incident for the listed certificates. It also does not cite a related CA incident bug, root program report, or mailing-list discussion explaining why the certificates had been revoked.
Fifteen disabled OneCRL records tied to bug 1938770 were added for specific issuer/serial pairs representing revoked intermediate certificates, initiated by the Common CA Database to OneCRL Bot when it opened the bug on 2024-12-21. Ben Wilson explicitly confirmed on 2025-01-06 that these were the correct entries, staging approval was recorded on 2025-01-07, production approval on 2025-01-08, and propagation to OneCRL and Firefox profiles was verified on 2025-01-09.
Explicitly stated as revoked intermediate certificates reported in the CCADB; no individual CCADB revocation reason, revocation date, candidate-report field state, or manual-addition explanation is given in the thread.
unknown
Explicit in OneCRL thread · 0.98
- 2024-12-21ccadb2onercl bot opened Bug 1938770 and said it was adding entries to OneCRL based on revoked intermediate certificates reported in the CCADB.
- 2024-12-21Bot attached issuer/serial pairs, proposed OneCRL additions, and decoded entry details.
- 2025-01-06David Keeler asked Ben Wilson to confirm whether the entries were correct.
- 2025-01-06Ben Wilson confirmed these were the correct entries to add to OneCRL and listed staging and verification steps.
- 2025-01-07Attachment with compare.py output was added noting approval in staging.
- 2025-01-08Ben Wilson said the staging entries were correct and could be moved into production.
- 2025-01-08David Keeler recorded approval in production.
- 2025-01-09Ben Wilson verified that the additions had propagated to OneCRL and Firefox profiles.
AI-generated from the OneCRL record and linked Bugzilla thread. Mozilla and CCADB records remain authoritative.
Raw Remote Settings Record
{
"schema": 1734800449239,
"details": {
"bug": "https://bugzilla.mozilla.org/show_bug.cgi?id=1938770",
"who": "",
"why": "",
"name": "",
"created": ""
},
"enabled": false,
"issuerName": "MFExCzAJBgNVBAYTAkNIMRUwEwYDVQQKEwxTd2lzc1NpZ24gQUcxKzApBgNVBAMTIlN3aXNzU2lnbiBSU0EgVExTIFJvb3QgQ0EgMjAyMSAtIDE=",
"serialNumber": "APSsBpSma961mFFDO5sCvg==",
"id": "0788468a-d95f-4058-8bb4-58e82cc2174c",
"last_modified": 1736374736444
}