← OneCRL Browser

Revoked intermediates

0971a89d-b11f-97c9-2ac2-f706757b75fb

Revocation Entry

Status: enabled
Serial: 467437760E4A74366CD27C85664E
Last Modified: 2017-02-01 00:08:16 UTC
Schema: 1552493018551

Issuer

DN: OU=GlobalSign ECC Root CA - R4, O=GlobalSign, CN=GlobalSign
DN SHA-256: 6038cefc3169361cb2a4733e496e9e64685a95164829371a6deb9705769ff054
Issuer DER: MFAxJDAiBgNVBAsTG0dsb2JhbFNpZ24gRUNDIFJvb3QgQ0EgLSBSNDETMBEGA1UEChMKR2xvYmFsU2lnbjETMBEGA1UEAxMKR2xvYmFsU2lnbg==

Context

Bugzilla: 1334069
Action: Six enabled 'Revoked intermediates' entries were added to OneCRL for serials 4C0E6212, 07275262, 22AA727FF6281A0BC773C1E20C0C4023CA, 1F07B1827FD908989C64F72C23223CCF14, 467437760E4A74366CD27C85664E, and 467437758A2FC2F0740F9AB66066. Mark Goodwin initiated the request on 2017-01-26, Kathleen Wilson confirmed the entries, Matt Wobensmith performed canary checking, and Weizhou stated on 2017-01-31 that the entries had been added to the database. The OneCRL entry metadata shows creation on 2017-01-31T23:06:37Z/23:06:38Z and last modification on 2017-02-01T00:08:16Z/00:08:17Z.
Confidence: Explicit in OneCRL thread · 0.96

CCADB Link

Issuer CA: GlobalSign
CA Owner: Google Trust Services LLC

AI Summary

Generated 2026-06-30 11:48 UTC · Model: gpt-5.4

This Bugzilla case tracks the addition of six certificate revocation entries to Mozilla OneCRL. The bug was opened by Mark Goodwin on 2017-01-26 with attached data and a request to add new certificate blocklist items after review from Kathleen Wilson and Matt. Kathleen Wilson explicitly confirmed that the listed entries were the correct ones to add to OneCRL, and Matt Wobensmith reported that a TLS Canary and Alexa top-sites canary run found no new errors. On 2017-01-31, Weizhou reported that the entries had been added to the database, and the local OneCRL records show six enabled entries created on 2017-01-31 and last modified on 2017-02-01. The thread discusses propagation to Firefox clients and confirms that the six new entries were live and propagating correctly. The bug title and comments indicate the source set was generated from CCADB on 2017-01-26, but the thread does not state specific revocation reasons, revocation dates, or a separate external compliance incident for these certificates.

OneCRL action

Six enabled 'Revoked intermediates' entries were added to OneCRL for serials 4C0E6212, 07275262, 22AA727FF6281A0BC773C1E20C0C4023CA, 1F07B1827FD908989C64F72C23223CCF14, 467437760E4A74366CD27C85664E, and 467437758A2FC2F0740F9AB66066. Mark Goodwin initiated the request on 2017-01-26, Kathleen Wilson confirmed the entries, Matt Wobensmith performed canary checking, and Weizhou stated on 2017-01-31 that the entries had been added to the database. The OneCRL entry metadata shows creation on 2017-01-31T23:06:37Z/23:06:38Z and last modification on 2017-02-01T00:08:16Z/00:08:17Z.

CCADB trigger

Explicitly sourced from 'CCADB entries generated 2017-01-26' and described as new certificate blocklist items. No specific CCADB revocation fields, candidate-report state, revocation reason, or revocation date are stated in the thread.

External cause

Unknown; the thread does not cite any external compliance incident, root program report, mailing-list discussion, or CA closure as the reason for these additions.

Confidence

Explicit in OneCRL thread · 0.96

Chronology

2017-01-26Mark Goodwin opened the bug and requested addition of new certificate blocklist items with attached bug_data.txt.
2017-01-26Mark Goodwin requested a canary run using an attached revocations.txt containing current production revocations plus the new entries.
2017-01-26Kathleen Wilson confirmed that the listed entries were the correct ones to add to OneCRL.
2017-01-30Matt Wobensmith reported no new errors from TLS Canary and Alexa top-sites testing.
2017-01-30Mark Goodwin asked for the six entries to be added.
2017-01-31Weizhou reported that the entries had been added to the database.
2017-01-31OneCRL metadata shows six entries created in the database.
2017-02-01Discussion confirmed the entries were live and propagating to Firefox clients via revocations.txt updates.

Bug 1334069 blocklist.addons.mozilla.org

AI-generated from the OneCRL record and linked Bugzilla thread. Mozilla and CCADB records remain authoritative.

Status	Name	Issuer	Serial	CCADB	Modified
enabled	Revoked intermediates	O=Entrust.net, OU=www.entrust.net/CPS_2048 incorp. by ref. (limits liab.), OU=(c) 1999 Entrust.net Limited, CN=Entrust.net Certification Authority (2048)	`4C0E6212`	Entrust.net Certification Authority (2048) Sectigo	2017-02-01
enabled	Revoked intermediates	C=IE, O=Baltimore, OU=CyberTrust, CN=Baltimore CyberTrust Root	`07275262`	Baltimore CyberTrust Root DigiCert	2017-02-01
enabled	Revoked intermediates	C=BE, OU=Trusted Root, O=GlobalSign nv-sa, CN=Trusted Root CA G2	`22AA727FF6281A0BC773C1E20C0C4023CA`	Trusted Root CA G2 GlobalSign nv-sa	2017-02-01
enabled	Revoked intermediates	OU=GlobalSign ECC Root CA - R4, O=GlobalSign, CN=GlobalSign	`1F07B1827FD908989C64F72C23223CCF14`	GlobalSign Google Trust Services LLC	2017-02-01
enabled	Revoked intermediates	OU=GlobalSign ECC Root CA - R4, O=GlobalSign, CN=GlobalSign	`467437760E4A74366CD27C85664E`	GlobalSign Google Trust Services LLC	2017-02-01
enabled	Revoked intermediates	OU=GlobalSign ECC Root CA - R4, O=GlobalSign, CN=GlobalSign	`467437758A2FC2F0740F9AB66066`	GlobalSign Google Trust Services LLC	2017-02-01

Raw Remote Settings Record

{
    "schema": 1552493018551,
    "details": {
        "bug": "https://bugzilla.mozilla.org/show_bug.cgi?id=1334069",
        "who": ".",
        "why": ".",
        "name": "Revoked intermediates",
        "created": "2017-01-31T23:06:38Z"
    },
    "enabled": true,
    "issuerName": "MFAxJDAiBgNVBAsTG0dsb2JhbFNpZ24gRUNDIFJvb3QgQ0EgLSBSNDETMBEGA1UEChMKR2xvYmFsU2lnbjETMBEGA1UEAxMKR2xvYmFsU2lnbg==",
    "serialNumber": "RnQ3dg5KdDZs0nyFZk4=",
    "id": "0971a89d-b11f-97c9-2ac2-f706757b75fb",
    "last_modified": 1485907696819
}