← OneCRL Browser

Misused certificate

13987e52-821e-1fe3-3743-393136b17167

Revocation Entry

Status: enabled
Serial: 0AB4C73C413A01949F2378F2B229F66C
Last Modified: 2016-11-28 16:06:01 UTC
Schema: 1552493034992

Issuer

DN: C=US, O=thawte, Inc., CN=thawte EV SSL CA - G3
DN SHA-256: 44df7941c5fe6841a34ca2a15f12ff8e521b93d5bb698215f4383217c322753e
Issuer DER: MEQxCzAJBgNVBAYTAlVTMRUwEwYDVQQKEwx0aGF3dGUsIEluYy4xHjAcBgNVBAMTFXRoYXd0ZSBFViBTU0wgQ0EgLSBHMw==

Context

Bugzilla: 1205651
Action: A misused certificate entry for issuer 'thawte EV SSL CA - G3' and serial '0AB4C73C413A01949F2378F2B229F66C' was added to OneCRL; Mark Goodwin requested it on 2015-09-17, Jorge Villalobos staged it the same day, and production was approved and completed by 2015-09-21.
Confidence: Explicit in OneCRL thread · 0.95

CCADB Link

Issuer CA: thawte EV SSL CA - G3
CA Owner: DigiCert

AI Summary

Generated 2026-06-30 11:47 UTC · Model: gpt-5.4-mini

Mozilla added a OneCRL entry for a misused certificate issued under thawte EV SSL CA - G3. The Bugzilla request was opened by Mark Goodwin [:mgoodwin] on 2015-09-17 and explicitly identified the issuer and serial for the test certificate. Jorge Villalobos [:jorgev] staged the entry the same day, and Mark confirmed it was ready for production; Jorge then marked it done on 2015-09-21. The OneCRL record shows the entry was enabled and last modified on 2016-11-28, but the thread itself only explicitly documents the staging and production workflow, not a separate CCADB revocation trigger. The public record does not state an external compliance incident or CA closure as the reason; the case is described only as a misissued test certificate.

OneCRL action

A misused certificate entry for issuer 'thawte EV SSL CA - G3' and serial '0AB4C73C413A01949F2378F2B229F66C' was added to OneCRL; Mark Goodwin requested it on 2015-09-17, Jorge Villalobos staged it the same day, and production was approved and completed by 2015-09-21.

CCADB trigger

Unknown / not stated; the thread does not explicitly mention a CCADB revoked status, revocation date, candidate report, or manual-add qualification beyond the misissued certificate request.

External cause

Unknown / not stated; the thread only says this was a misissued test certificate and does not cite a specific compliance incident, root program report, m.d.s.p. thread, or CA closure.

Confidence

Explicit in OneCRL thread · 0.95

Chronology

2015-09-17Mark Goodwin opened Bugzilla 1205651 to create a blocklist entry for a misissued test certificate.
2015-09-17Mark provided the issuer and serial for the thawte EV SSL CA - G3 certificate.
2015-09-17Jorge Villalobos staged the entry and asked for verification.
2015-09-17Mark confirmed staging was good and requested production.
2015-09-21Jorge marked the request done.
2016-11-28The OneCRL record shows the entry as enabled with last_modified_at set to 2016-11-28T16:06:01Z.

Bug 1155095 Bug 1205651

AI-generated from the OneCRL record and linked Bugzilla thread. Mozilla and CCADB records remain authoritative.

Status	Name	Issuer	Serial	CCADB	Modified
enabled	Misused certificate	C=US, O=thawte, Inc., CN=thawte EV SSL CA - G3	`0AB4C73C413A01949F2378F2B229F66C`	thawte EV SSL CA - G3 DigiCert	2016-11-28

Raw Remote Settings Record

{
    "schema": 1552493034992,
    "details": {
        "bug": "https://bugzilla.mozilla.org/show_bug.cgi?id=1205651",
        "who": ".",
        "why": ".",
        "name": "Misused certificate",
        "created": "2015-09-21T13:21:25Z"
    },
    "enabled": true,
    "issuerName": "MEQxCzAJBgNVBAYTAlVTMRUwEwYDVQQKEwx0aGF3dGUsIEluYy4xHjAcBgNVBAMTFXRoYXd0ZSBFViBTU0wgQ0EgLSBHMw==",
    "serialNumber": "CrTHPEE6AZSfI3jysin2bA==",
    "id": "13987e52-821e-1fe3-3743-393136b17167",
    "last_modified": 1480349161619
}