OneCRL Entry
14b84eed-77c6-49ca-9cb4-d4d68159bd46
Revocation Entry
- Status
- disabled
- Serial
68ED49DDA3792592578C325120DA22E9F1E10BD4- Last Modified
- 2026-06-18 23:27:07 UTC
- Schema
- 1781802209389
Issuer
- DN
- C=HK, ST=Hong Kong, L=Hong Kong, O=Hongkong Post, CN=Hongkong Post Root CA 3
- DN SHA-256
03d3a3709a5ed93510ef2309c181493c500793ed9f7544d5288c0b53a3423d16- Issuer DER
MG8xCzAJBgNVBAYTAkhLMRIwEAYDVQQIEwlIb25nIEtvbmcxEjAQBgNVBAcTCUhvbmcgS29uZzEWMBQGA1UEChMNSG9uZ2tvbmcgUG9zdDEgMB4GA1UEAxMXSG9uZ2tvbmcgUG9zdCBSb290IENBIDM=
Context
- Bugzilla
- 2048702
- Action
- On 2026-06-18, c**********l@bots.tld added 16 revoked intermediate CA issuer/serial pairs to OneCRL via bug 2048702; Ben Wilson reviewed them, David Keeler approved staging and production, and Ben Wilson verified them in OneCRL/Firefox profiles on 2026-06-19.
- Confidence
- Explicit in OneCRL thread · 0.99
CCADB Link
- Issuer CA
- Hongkong Post Root CA 3
- CA Owner
- GlobalSign nv-sa
AI Summary
Generated 2026-06-30 10:46 UTC · Model: gpt-5.4-miniThis bug added 16 revoked CA intermediate certificates to OneCRL. The additions were initiated automatically by the ccadb2onercl bot, which opened the bug and attached the proposed issuer/serial pairs on 2026-06-18. Ben Wilson reviewed the list, confirmed the issuer-serial pairs were correct, and requested staging approval; David Keeler approved staging and later production. The bug was then verified as present in OneCRL and Firefox profiles. The thread explicitly says the qualification basis was revoked intermediate certificates reported in the CCADB. No separate external compliance incident, root program report, or CA closure is stated in the thread.
On 2026-06-18, c**********l@bots.tld added 16 revoked intermediate CA issuer/serial pairs to OneCRL via bug 2048702; Ben Wilson reviewed them, David Keeler approved staging and production, and Ben Wilson verified them in OneCRL/Firefox profiles on 2026-06-19.
Explicitly stated: revoked intermediate certificates reported in the CCADB; no candidate-report state, manual-addition rationale, or revocation date field is mentioned in the thread.
Unknown / not stated; the thread does not cite a separate compliance incident, m.d.s.p. thread, root program report, or CA closure.
Explicit in OneCRL thread · 0.99
- 2026-06-18ccadb2onercl bot opened bug 2048702 and posted proposed OneCRL additions for revoked intermediate certificates reported in CCADB.
- 2026-06-18Ben Wilson confirmed the issuer-serial pairs were correct and asked for staging approval.
- 2026-06-18David Keeler approved the changes in staging.
- 2026-06-18Ben Wilson confirmed the same CA issuer names and serial numbers for 16 revoked certificates and said the change could go to production.
- 2026-06-18David Keeler approved production.
- 2026-06-19Ben Wilson verified the revocations were in OneCRL and Firefox profiles.
AI-generated from the OneCRL record and linked Bugzilla thread. Mozilla and CCADB records remain authoritative.
Raw Remote Settings Record
{
"schema": 1781802209389,
"details": {
"bug": "https://bugzilla.mozilla.org/show_bug.cgi?id=2048702",
"who": "",
"why": "",
"name": "",
"created": ""
},
"enabled": false,
"issuerName": "MG8xCzAJBgNVBAYTAkhLMRIwEAYDVQQIEwlIb25nIEtvbmcxEjAQBgNVBAcTCUhvbmcgS29uZzEWMBQGA1UEChMNSG9uZ2tvbmcgUG9zdDEgMB4GA1UEAxMXSG9uZ2tvbmcgUG9zdCBSb290IENBIDM=",
"serialNumber": "aO1J3aN5JZJXjDJRINoi6fHhC9Q=",
"id": "14b84eed-77c6-49ca-9cb4-d4d68159bd46",
"last_modified": 1781825227534
}