Revoked intermediates
134969c5-0bf4-4054-eaa1-b24feaa76aef
Revocation Entry
- Status
- enabled
- Serial
3E0C9E8769AA955CEA23D8459ED45B51- Last Modified
- 2017-01-03 19:23:12 UTC
- Schema
- 1552493024471
Issuer
- DN
- C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=(c) 1999 VeriSign, Inc. - For authorized use only, CN=VeriSign Class 3 Public Primary Certification Authority - G3
- DN SHA-256
29353873cf4ca69a9ad62453042042f64b3ff1ecb652243f89e3f3d81d913060- Issuer DER
MIHKMQswCQYDVQQGEwJVUzEXMBUGA1UEChMOVmVyaVNpZ24sIEluYy4xHzAdBgNVBAsTFlZlcmlTaWduIFRydXN0IE5ldHdvcmsxOjA4BgNVBAsTMShjKSAxOTk5IFZlcmlTaWduLCBJbmMuIC0gRm9yIGF1dGhvcml6ZWQgdXNlIG9ubHkxRTBDBgNVBAMTPFZlcmlTaWduIENsYXNzIDMgUHVibGljIFByaW1hcnkgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkgLSBHMw==
Context
- Bugzilla
- 1315199
- Action
- A large batch of revoked intermediate certificate entries was added to OneCRL. The action was initiated in Bugzilla by Mark Goodwin through attached blocklist files generated from CCADB data, reviewed for addition by Kathleen Wilson, canary-tested by Matt Wobensmith, and executed by J. Thomas. Stage addition was reported on 2017-01-03 at 18:36:27Z and production addition was reported on 2017-01-03 at 18:42:40Z; the local OneCRL entries show creation timestamps between 2017-01-03T18:41:52Z and 2017-01-03T18:41:55Z.
- Confidence
- Explicit in OneCRL thread · 0.95
CCADB Link
- Issuer CA
- VeriSign Class 3 Public Primary Certification Authority - G3
- CA Owner
- DigiCert
AI Summary
Generated 2026-06-30 11:48 UTC · Model: gpt-5.4Bug 1315199 tracks a bulk addition of revoked intermediate certificate entries to Mozilla OneCRL. Mark Goodwin opened the bug on 2016-11-04 and attached blocklist entries generated from CCADB data, later adding a second attachment with more entries on 2016-11-24. Kathleen Wilson explicitly reviewed both attachment sets and stated that all of the listed blocklist entries should be added to OneCRL. A canary run was requested and Matt Wobensmith reported on 2016-12-12 that the revocations looked good with no errors on about 290,000 sites from the Alexa top 1 million. On 2017-01-03, J. Thomas reported the entries were added on stage and then to production, and the local OneCRL records show the resulting entries were created around 2017-01-03T18:41:52Z to 18:41:55Z and last modified around 19:23:12Z to 19:23:14Z. The thread does not state per-certificate CCADB revocation reasons, revocation dates, or candidate-report states. The bug also does not state a single external compliance incident or CA closure explaining the listed revocations; it appears to be a bulk import of CCADB-derived revoked intermediates from multiple CA owners.
A large batch of revoked intermediate certificate entries was added to OneCRL. The action was initiated in Bugzilla by Mark Goodwin through attached blocklist files generated from CCADB data, reviewed for addition by Kathleen Wilson, canary-tested by Matt Wobensmith, and executed by J. Thomas. Stage addition was reported on 2017-01-03 at 18:36:27Z and production addition was reported on 2017-01-03 at 18:42:40Z; the local OneCRL entries show creation timestamps between 2017-01-03T18:41:52Z and 2017-01-03T18:41:55Z.
Explicitly CCADB-derived bulk entries, but the thread does not state the specific CCADB revocation fields, revocation reasons, revocation dates, candidate-report status, or whether qualification depended on a particular report state for each certificate.
Unknown / not stated. No single external compliance incident, root program report, mailing list thread, or CA closure is identified in the OneCRL bug thread as the cause of these revocations.
Explicit in OneCRL thread · 0.95
- 2016-11-04Mark Goodwin filed Bug 1315199 and attached initial blocklist entries for addition to the AMO cert blocklist.
- 2016-11-04A sample revocations.txt file for compatibility testing was attached.
- 2016-11-08Kathleen Wilson stated that all entries in the first attachment should be added to OneCRL.
- 2016-11-24Mark Goodwin attached an additional set of blocklist entries and an updated sample revocations.txt.
- 2016-11-28Kathleen Wilson stated that all additional blocklist entries should be added to OneCRL.
- 2016-11-29Kathleen Wilson requested a canary run before adding the entries to OneCRL.
- 2016-12-12Matt Wobensmith reported the canary run looked good with no errors on about 290k Alexa top 1M sites.
- 2017-01-03J. Thomas reported the entries were added on stage and looked good.
- 2017-01-03J. Thomas reported the entries were done on production.
AI-generated from the OneCRL record and linked Bugzilla thread. Mozilla and CCADB records remain authoritative.
Raw Remote Settings Record
{
"schema": 1552493024471,
"details": {
"bug": "https://bugzilla.mozilla.org/show_bug.cgi?id=1315199",
"who": ".",
"why": ".",
"name": "Revoked intermediates",
"created": "2017-01-03T18:41:54Z"
},
"enabled": true,
"issuerName": "MIHKMQswCQYDVQQGEwJVUzEXMBUGA1UEChMOVmVyaVNpZ24sIEluYy4xHzAdBgNVBAsTFlZlcmlTaWduIFRydXN0IE5ldHdvcmsxOjA4BgNVBAsTMShjKSAxOTk5IFZlcmlTaWduLCBJbmMuIC0gRm9yIGF1dGhvcml6ZWQgdXNlIG9ubHkxRTBDBgNVBAMTPFZlcmlTaWduIENsYXNzIDMgUHVibGljIFByaW1hcnkgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkgLSBHMw==",
"serialNumber": "Pgyeh2mqlVzqI9hFntRbUQ==",
"id": "134969c5-0bf4-4054-eaa1-b24feaa76aef",
"last_modified": 1483471392712
}