OneCRL Entry
162db353-603b-4cbc-b243-7a3bd606ff4b
Revocation Entry
- Status
- disabled
- Serial
330000000710F17E5773D03D87000000000007- Last Modified
- 2025-08-25 21:55:50 UTC
- Schema
- 1755882048831
Issuer
- DN
- C=US, O=Microsoft Corporation, CN=Microsoft TLS RSA Root G2
- DN SHA-256
817a62825c59307224bfb64f5a55e8233916ad1364f6dae3821e79547b4c7bd4- Issuer DER
MFExCzAJBgNVBAYTAlVTMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xIjAgBgNVBAMTGU1pY3Jvc29mdCBUTFMgUlNBIFJvb3QgRzI=
Context
- Bugzilla
- 1984708
- Action
- Eleven disabled OneCRL entries, each identified by issuer DN and serial number, were proposed by the Common CA Database to OneCRL Bot on 2025-08-22 and then reviewed by Ben Wilson and approved by David Keeler in staging on 2025-08-22 and in production on 2025-08-25.
- Confidence
- Explicit in OneCRL thread · 0.98
CCADB Link
- Issuer CA
- Microsoft TLS RSA Root G2
- CA Owner
- DigiCert
AI Summary
Generated 2026-06-30 11:13 UTC · Model: gpt-5.4This Bugzilla case was created automatically by the Common CA Database to OneCRL Bot on 2025-08-22 for CCADB entries generated at 2025-08-22T17:00:39Z. The thread explicitly states that entries were being added to OneCRL based on revoked intermediate certificates reported in the CCADB. The proposed OneCRL change covered 11 CA certificates: five under Microsoft TLS RSA Root G2 and six under emSign Root TLS CA - G1 and G3, with DigiCert and eMudhra Technologies Limited shown as the CCADB CA owners in the entry data. Ben Wilson listed the 11 issuer/serial pairs and said they were ready for review and approval in Kinto Staging on 2025-08-22. David Keeler approved the changes in staging on 2025-08-22 and later approved them in production on 2025-08-25. On 2025-08-26, an i**********g@ccadb.org comment stated that these additions to OneCRL appear in the reporter's profile, on crt.sh, and elsewhere. The thread does not state the individual revocation reasons, revocation dates, or any external compliance incident or CA closure that caused the revocations.
Eleven disabled OneCRL entries, each identified by issuer DN and serial number, were proposed by the Common CA Database to OneCRL Bot on 2025-08-22 and then reviewed by Ben Wilson and approved by David Keeler in staging on 2025-08-22 and in production on 2025-08-25.
Explicitly stated as revoked intermediate certificates reported in the CCADB; no specific revocation reason, revocation date, or candidate-report field values are given in the thread.
unknown
Explicit in OneCRL thread · 0.98
- 2025-08-22Bug 1984708 was created by the Common CA Database to OneCRL Bot for CCADB entries generated at 2025-08-22T17:00:39Z.
- 2025-08-22Bot stated it was adding entries to OneCRL based on revoked intermediate certificates reported in the CCADB.
- 2025-08-22Attachments were created for issuer/serial pairs, proposed OneCRL additions, and decoded names/serials/hashes.
- 2025-08-22Ben Wilson listed 11 CA certificates to be added to OneCRL and said they were ready for review/approval in Kinto Staging.
- 2025-08-22David Keeler approved the changes in staging and noted 11 changes waiting in production.
- 2025-08-23Ben Wilson said the staging information matched the proposed additions and that they should move forward in production.
- 2025-08-25David Keeler approved the changes in production.
- 2025-08-26i**********g@ccadb.org stated the additions appear in its profile, on crt.sh, and elsewhere.
AI-generated from the OneCRL record and linked Bugzilla thread. Mozilla and CCADB records remain authoritative.
Raw Remote Settings Record
{
"schema": 1755882048831,
"details": {
"bug": "https://bugzilla.mozilla.org/show_bug.cgi?id=1984708",
"who": "",
"why": "",
"name": "",
"created": ""
},
"enabled": false,
"issuerName": "MFExCzAJBgNVBAYTAlVTMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xIjAgBgNVBAMTGU1pY3Jvc29mdCBUTFMgUlNBIFJvb3QgRzI=",
"serialNumber": "MwAAAAcQ8X5Xc9A9hwAAAAAABw==",
"id": "162db353-603b-4cbc-b243-7a3bd606ff4b",
"last_modified": 1756158950183
}