OneCRL Entry
13c5edbe-dcd6-4153-9b4f-0cb1c76f917a
Revocation Entry
- Status
- disabled
- Serial
02008EB2023336658B64CDDB9B- Last Modified
- 2025-05-21 00:25:34 UTC
- Schema
- 1746810064399
Issuer
- DN
- C=US, O=Google Trust Services LLC, CN=GTS Root R1
- DN SHA-256
bbbb6ba5cc9b4a5f070f820e8a714a9d0d783262f94414425f11e0da6751ddfe- Issuer DER
MEcxCzAJBgNVBAYTAlVTMSIwIAYDVQQKExlHb29nbGUgVHJ1c3QgU2VydmljZXMgTExDMRQwEgYDVQQDEwtHVFMgUm9vdCBSMQ==
Context
- Bugzilla
- 1965541
- Action
- On 2025-05-20, Ben Wilson manually added the intermediate CA certificate for SZAFIR Trusted CA3 to remote-settings-staging; on 2025-05-21, d**********r@mozilla.com approved the changes in production, and Ben Wilson confirmed 15 revoked CA certificates were in OneCRL.
- Confidence
- Explicit in OneCRL thread · 0.98
CCADB Link
- Issuer CA
- GTS Root R1
- CA Owner
- GlobalSign nv-sa
AI Summary
Generated 2026-06-30 09:57 UTC · Model: gpt-5.4-miniThis bug added 15 revoked CA certificate entries to OneCRL. The initial action was initiated by the CCADB-to-OneCRL bot, which opened the bug and attached the proposed issuer/serial pairs from revoked intermediate certificates reported in the CCADB. Ben Wilson then explicitly requested adding SZAFIR Trusted CA3 to the current batch and manually added that intermediate CA certificate to remote-settings-staging before production approval. The thread states the batch contained 15 CA certificate entries and that they were approved in production on 2025-05-21. The OneCRL record for SZAFIR Trusted CA3 shows it was manually added because it was not included in the batch. The thread explicitly states the CCADB basis was revoked intermediate certificates reported in the CCADB, but it does not state a specific CCADB candidate-report state or revocation field for the full batch. No external compliance incident or CA closure is stated in the thread.
On 2025-05-20, Ben Wilson manually added the intermediate CA certificate for SZAFIR Trusted CA3 to remote-settings-staging; on 2025-05-21, d**********r@mozilla.com approved the changes in production, and Ben Wilson confirmed 15 revoked CA certificates were in OneCRL.
Explicitly stated: revoked intermediate certificates reported in the CCADB; one entry (SZAFIR Trusted CA3) was manually added because it was not included in the batch. No specific candidate-report state or revocation field beyond the revocation date 2025-03-05 for SZAFIR Trusted CA3 is stated.
Unknown / not stated
Explicit in OneCRL thread · 0.98
- 2025-05-09ccadb2onercl bot opened the bug and said it was adding entries based on revoked intermediate certificates reported in the CCADB.
- 2025-05-19Ben Wilson requested adding SZAFIR Trusted CA3 to the current batch and provided its revocation date of 2025-03-05.
- 2025-05-20Ben Wilson manually added SZAFIR Trusted CA3 to remote-settings-staging; the batch was described as 15 CA certificate entries.
- 2025-05-21d**********r@mozilla.com approved the changes in production.
- 2025-05-21Ben Wilson confirmed the 15 revoked CA certificates were now in OneCRL and his Firefox profile.
AI-generated from the OneCRL record and linked Bugzilla thread. Mozilla and CCADB records remain authoritative.
Raw Remote Settings Record
{
"schema": 1746810064399,
"details": {
"bug": "https://bugzilla.mozilla.org/show_bug.cgi?id=1965541",
"who": "",
"why": "",
"name": "",
"created": ""
},
"enabled": false,
"issuerName": "MEcxCzAJBgNVBAYTAlVTMSIwIAYDVQQKExlHb29nbGUgVHJ1c3QgU2VydmljZXMgTExDMRQwEgYDVQQDEwtHVFMgUm9vdCBSMQ==",
"serialNumber": "AgCOsgIzNmWLZM3bmw==",
"id": "13c5edbe-dcd6-4153-9b4f-0cb1c76f917a",
"last_modified": 1747787134541
}