Revoked intermediates
124dd7d2-59e3-4eb1-b93a-5e9a33cd6e4f
Revocation Entry
- Status
- enabled
- Serial
0388- Last Modified
- 2017-05-10 23:22:51 UTC
- Schema
- 1552493017141
Issuer
- DN
- C=US, O=Verizon Business, OU=OmniRoot, CN=Verizon Global Root CA
- DN SHA-256
ded72b6d8cdacbcf98f2098083f3bef35f174b749e8e6f2bf0655f139e9c6c3f- Issuer DER
MFwxCzAJBgNVBAYTAlVTMRkwFwYDVQQKDBBWZXJpem9uIEJ1c2luZXNzMREwDwYDVQQLDAhPbW5pUm9vdDEfMB0GA1UEAwwWVmVyaXpvbiBHbG9iYWwgUm9vdCBDQQ==
Context
- Bugzilla
- 1343305
- Action
- A bulk set of revoked intermediate certificate entries was added to the OneCRL 'Revoked intermediates' collection for multiple CA owners and issuers. The action was initiated in Bugzilla by Mark Goodwin, with explicit confirmation from Kathleen Wilson that the entries were correct and later production approval recorded by j**********c@insufficient.coffee on 2017-05-02. Mark Goodwin stated that crypto engineering was responsible for staging and adding the blocks. The local OneCRL records tied to this bug show detail_created of 2017-05-10T22:53:40Z and last_modified_at timestamps from 2017-05-10T23:19:37Z through 2017-05-10T23:24:38Z.
- Confidence
- Explicit in OneCRL thread · 0.96
CCADB Link
- Issuer CA
- Verizon Global Root CA
- CA Owner
- DigiCert
AI Summary
Generated 2026-06-30 11:42 UTC · Model: gpt-5.4Bug 1343305 tracks a bulk addition of public CA intermediate revocations to Mozilla OneCRL. The bug was filed by Mark Goodwin on 2017-02-28 with an attachment requesting blocklist entries, explicitly stating they should be added following approval from Kathleen Wilson and Matt. Kathleen Wilson confirmed on 2017-02-28 that the listed entries were the correct entries to add to OneCRL, and a canary run was later reported as showing no regressions on top sites. Mark Goodwin stated on 2017-05-02 that the changes were staged on the production Kinto instance and that crypto engineering was then responsible for staging and adding the blocks. Approval at production Kinto was recorded on 2017-05-02, and the local OneCRL records show the entries were created on 2017-05-10 and last modified between 23:19 and 23:24 UTC that day. The thread also documents post-deployment data-format issues involving missing base64 padding and missing created timestamps, which were later fixed. Kathleen Wilson confirmed on 2017-05-12 that revocations.txt on her system had updated and contained the new entries.
A bulk set of revoked intermediate certificate entries was added to the OneCRL 'Revoked intermediates' collection for multiple CA owners and issuers. The action was initiated in Bugzilla by Mark Goodwin, with explicit confirmation from Kathleen Wilson that the entries were correct and later production approval recorded by j**********c@insufficient.coffee on 2017-05-02. Mark Goodwin stated that crypto engineering was responsible for staging and adding the blocks. The local OneCRL records tied to this bug show detail_created of 2017-05-10T22:53:40Z and last_modified_at timestamps from 2017-05-10T23:19:37Z through 2017-05-10T23:24:38Z.
Explicitly described as 'CCADB entries generated 2017-02-28' and filed as a request to add the listed blocklist entries. The thread does not state specific CCADB revocation fields, revocation reasons, revocation dates, or candidate-report status for individual certificates.
Unknown / not stated. The thread does not cite a specific external compliance incident, CA closure, root program report, or m.d.s.p. discussion as the reason these certificates qualified for OneCRL.
Explicit in OneCRL thread · 0.96
- 2017-02-28Mark Goodwin filed Bug 1343305 and requested addition of the attached blocklist entries following approval from Kathleen and Matt.
- 2017-02-28Kathleen Wilson confirmed that the listed entries were the correct entries to add to OneCRL.
- 2017-03-03A canary run was reported as showing no regressions on top sites.
- 2017-05-02Mark Goodwin said the changes were staged on the production Kinto instance and that crypto engineering was now responsible for staging and adding these blocks.
- 2017-05-02Production Kinto approval was recorded at 20:25:20 UTC.
- 2017-05-10The local OneCRL records for this bug show the entries created at 22:53:40Z.
- 2017-05-10The local OneCRL records show last_modified_at timestamps between 23:19:37Z and 23:24:38Z.
- 2017-05-10Mark Goodwin said missing base64 padding and missing created timestamps had been fixed and updated data should appear on the CDN soon.
- 2017-05-12Kathleen Wilson confirmed that revocations.txt on her system had updated and contained the new entries.
AI-generated from the OneCRL record and linked Bugzilla thread. Mozilla and CCADB records remain authoritative.
Raw Remote Settings Record
{
"schema": 1552493017141,
"details": {
"bug": "https://bugzilla.mozilla.org/show_bug.cgi?id=1343305",
"who": ".",
"why": ".",
"name": "Revoked intermediates",
"created": "2017-05-10T22:53:40Z"
},
"enabled": true,
"issuerName": "MFwxCzAJBgNVBAYTAlVTMRkwFwYDVQQKDBBWZXJpem9uIEJ1c2luZXNzMREwDwYDVQQLDAhPbW5pUm9vdDEfMB0GA1UEAwwWVmVyaXpvbiBHbG9iYWwgUm9vdCBDQQ==",
"serialNumber": "A4g=",
"id": "124dd7d2-59e3-4eb1-b93a-5e9a33cd6e4f",
"last_modified": 1494458571110
}