← OneCRL Browser

Revoked intermediates

148f7a38-535a-4097-a7a5-83abc4e35800

Revocation Entry

Status: disabled
Serial: 0727A66B
Last Modified: 2017-06-15 16:03:26 UTC
Schema: 1552493014308

Issuer

DN: C=IE, O=Baltimore, OU=CyberTrust, CN=Baltimore CyberTrust Root
DN SHA-256: 13602ee62a7fef6f43a219d1e4b84ef96c9df8593dc963b62d498627af7def9d
Issuer DER: MFoxCzAJBgNVBAYTAklFMRIwEAYDVQQKEwlCYWx0aW1vcmUxEzARBgNVBAsTCkN5YmVyVHJ1c3QxIjAgBgNVBAMTGUJhbHRpbW9yZSBDeWJlclRydXN0IFJvb3Q=

Context

Bugzilla: 1373288
Action: Four revoked intermediate entries were prepared for addition to OneCRL in a Kinto-admin formatted attachment created by Mark Goodwin on 2017-06-15, validated as correct by Kathleen Wilson on 2017-06-16, compatibility-tested by Matt Wobensmith on 2017-06-26, and confirmed by Kathleen Wilson as added to OneCRL on 2017-06-28.
Confidence: Explicit in OneCRL thread · 0.93

CCADB Link

Issuer CA: Baltimore CyberTrust Root
CA Owner: DigiCert

AI Summary

Generated 2026-06-30 11:49 UTC · Model: gpt-5.4

Bug 1373288 tracks the addition of four revoked intermediate certificate entries to Mozilla OneCRL. The bug was opened by Mark Goodwin on 2017-06-15, with an attachment containing revocation data for new records, and Kathleen Wilson later confirmed the entries were correct to add. The local OneCRL entry data tied to this bug shows three specific disabled records: one under GlobalSign's Trusted Root CA G2 and two under the Baltimore CyberTrust Root owned in CCADB by DigiCert. A tooling comment stated that the pending Kinto dataset matched the bug's expected changeset, reporting 444 added entries and no missing or deleted entries. Matt Wobensmith later ran a canary compatibility test using a revocations.txt file that included these revocations and reported zero errors. Kathleen Wilson confirmed on 2017-06-28 that the entries had been added to OneCRL. The bug title and comments indicate the source was a batch of CCADB-generated entries, but the thread does not state the specific revocation reason, revocation date, or candidate-report field values for these certificates. The thread also does not state any external compliance incident or CA shutdown as the cause for these revocations.

OneCRL action

Four revoked intermediate entries were prepared for addition to OneCRL in a Kinto-admin formatted attachment created by Mark Goodwin on 2017-06-15, validated as correct by Kathleen Wilson on 2017-06-16, compatibility-tested by Matt Wobensmith on 2017-06-26, and confirmed by Kathleen Wilson as added to OneCRL on 2017-06-28.

CCADB trigger

Explicitly described only as 'CCADB entries generated 2017-06-15T17:03:23Z' and as new revoked intermediate records. No specific CCADB revocation status fields, revocation reason, revocation date, or candidate-report qualification criteria are stated in the thread.

External cause

unknown

Confidence

Explicit in OneCRL thread · 0.93

Chronology

2017-06-15Mark Goodwin filed Bug 1373288 for CCADB-generated entries and attached revocation data for new records.
2017-06-15A tooling check reported the pending Kinto dataset matched the bug changeset.
2017-06-16Kathleen Wilson confirmed the entries were the correct ones to add to OneCRL.
2017-06-19Discussion clarified the difference between Kinto-admin input format and revocations.txt test format.
2017-06-22Mark Goodwin pointed to a revocations.txt file in Bug 1375006 that included the revocations from this bug.
2017-06-26Matt Wobensmith reported a canary compatibility test found zero errors.
2017-06-28Kathleen Wilson confirmed the entries had been added to OneCRL.
2021-04-15Automation moved the bug to Core::Security Block-lists, Allow-lists, and other State.

Bug 1343305 Bug 1369342 Bug 1375006 Bug 1373288

AI-generated from the OneCRL record and linked Bugzilla thread. Mozilla and CCADB records remain authoritative.

Status	Name	Issuer	Serial	CCADB	Modified
disabled	Revoked intermediates	C=BE, OU=Trusted Root, O=GlobalSign nv-sa, CN=Trusted Root CA G2	`46C74E0B17A96571C4B3512BC0F7`	Trusted Root CA G2 GlobalSign nv-sa	2017-06-15
disabled	Revoked intermediates	C=IE, O=Baltimore, OU=CyberTrust, CN=Baltimore CyberTrust Root	`0727A66D`	Baltimore CyberTrust Root DigiCert	2017-06-15
disabled	Revoked intermediates	C=IE, O=Baltimore, OU=CyberTrust, CN=Baltimore CyberTrust Root	`0727A66B`	Baltimore CyberTrust Root DigiCert	2017-06-15

Raw Remote Settings Record

{
    "schema": 1552493014308,
    "details": {
        "bug": "https://bugzilla.mozilla.org/show_bug.cgi?id=1373288",
        "who": ".",
        "why": "",
        "name": "Revoked intermediates",
        "created": "2017-06-15T16:43:23Z"
    },
    "enabled": false,
    "issuerName": "MFoxCzAJBgNVBAYTAklFMRIwEAYDVQQKEwlCYWx0aW1vcmUxEzARBgNVBAsTCkN5YmVyVHJ1c3QxIjAgBgNVBAMTGUJhbHRpbW9yZSBDeWJlclRydXN0IFJvb3Q=",
    "serialNumber": "Byemaw==",
    "id": "148f7a38-535a-4097-a7a5-83abc4e35800",
    "last_modified": 1497542606104
}