← OneCRL Browser

OneCRL Entry

17086fc0-bc58-40ee-8523-e2d76f855c11

Revocation Entry

Status: disabled
Serial: 01EE5F224E59C4D16E6CF53163
Last Modified: 2020-11-25 18:27:36 UTC
Schema: 1606237257131

Issuer

DN: OU=GlobalSign Root CA - R3, O=GlobalSign, CN=GlobalSign
DN SHA-256: 5bdab67a96c25c9b087f12e81ed40d23384becf64c4a37f50048191cc2427590
Issuer DER: MEwxIDAeBgNVBAsTF0dsb2JhbFNpZ24gUm9vdCBDQSAtIFIzMRMwEQYDVQQKEwpHbG9iYWxTaWduMRMwEQYDVQQDEwpHbG9iYWxTaWdu

Context

Bugzilla: 1679183
Action: 15 revoked intermediate-certificate entries were added to OneCRL; initiated by c**********l@bots.tld on 2020-11-24, with stage approval by j**********c@insufficient.coffee on 2020-11-25 18:14:44Z and production approval on 2020-11-25 18:28:46Z.
Confidence: Explicit in OneCRL thread · 0.98

CCADB Link

Issuer CA: GlobalSign
CA Owner: GlobalSign nv-sa

AI Summary

Generated 2026-06-30 11:41 UTC · Model: gpt-5.4-mini

This bug added 15 OneCRL entries for revoked intermediate certificates reported in the CCADB. The additions were initiated by the ccadb2onercl bot on 2020-11-24, which created the bug and attached the proposed issuer/serial pairs and decoded entry list. Kathleen Wilson explicitly confirmed the entries were correct and asked JC to run the OneCRL entry checker and approve the changes at stage and production. JC then approved the changes at stage on 2020-11-25 and at production later the same day. The thread does not state a specific CCADB revocation field or candidate-report state beyond the bot’s statement that the entries were based on revoked intermediates reported in CCADB. The thread also does not identify a specific external compliance incident or CA closure; it only notes that these revocations had already been added to other root store equivalents of OneCRL.

OneCRL action

15 revoked intermediate-certificate entries were added to OneCRL; initiated by c**********l@bots.tld on 2020-11-24, with stage approval by j**********c@insufficient.coffee on 2020-11-25 18:14:44Z and production approval on 2020-11-25 18:28:46Z.

CCADB trigger

Explicitly stated trigger: revoked intermediate certificates reported in the CCADB; no specific CCADB revocation field, candidate-report state, or manual-addition rationale is stated.

External cause

Unknown / not stated; no specific compliance incident, root program report, m.d.s.p. thread, or CA closure is identified in the thread.

Confidence

Explicit in OneCRL thread · 0.98

Chronology

2020-11-24ccadb2onercl bot created bug 1679183 and announced OneCRL additions based on revoked intermediates reported in CCADB.
2020-11-24Bot attached the proposed OneCRL issuer/serial pairs and decoded entry list.
2020-11-24Kathleen Wilson confirmed the entries were correct and requested checker/approval steps.
2020-11-25JC approved the changes at stage.
2020-11-25JC approved the changes at production.

Bug 1679183

AI-generated from the OneCRL record and linked Bugzilla thread. Mozilla and CCADB records remain authoritative.

Status	Name	Issuer	Serial	CCADB	Modified
disabled	—	C=BM, O=QuoVadis Limited, OU=Root Certification Authority, CN=QuoVadis Root Certification Authority	`1B12F441BBC6DB36F167384919C95B0B16245C47`	QuoVadis Root Certification Authority DigiCert	2020-11-25
disabled	—	O=Digital Signature Trust Co., CN=DST Root CA X3	`400174E0927439B8ED0BAE830EE07F48`	DST Root CA X3 IdenTrust Services, LLC	2020-11-25
disabled	—	O=Digital Signature Trust Co., CN=DST Root CA X3	`400174E092652FC60BA981DF7F4D9298`	DST Root CA X3 IdenTrust Services, LLC	2020-11-25
disabled	—	C=IT, L=Milan, O=Actalis S.p.A./03358520967, CN=Actalis Authentication Root CA	`6E898B681DB091FC533C8CD63FD800E7`	Actalis Authentication Root CA Actalis	2020-11-25
disabled	—	C=BM, O=QuoVadis Limited, CN=QuoVadis Enterprise Trust CA 2 G3	`2F03B74077FE58434F3613C3B38D5ABB52CDD30E`	QuoVadis Enterprise Trust CA 2 G3 DigiCert	2020-11-25
disabled	—	C=BM, O=QuoVadis Limited, CN=QuoVadis Root CA 2	`41DE06035455EE98C82694A090A946304F2EFF87`	QuoVadis Root CA 2 DigiCert	2020-11-25
disabled	—	C=BM, O=QuoVadis Limited, CN=QuoVadis Root CA 2	`43A90E0F1875301023583E27E8FB80B9EDC64B0E`	QuoVadis Root CA 2 DigiCert	2020-11-25
disabled	—	C=BM, O=QuoVadis Limited, CN=QuoVadis Enterprise Trust CA 2 G3	`36AF9B7895098D1894844480BB593B93A674453D`	QuoVadis Enterprise Trust CA 2 G3 DigiCert	2020-11-25
disabled	—	C=IT, L=Milan, O=Actalis S.p.A./03358520967, CN=Actalis Authentication Root CA	`45E78CA5F5FBD35E0A6C1733F818BB54`	Actalis Authentication Root CA Actalis	2020-11-25
disabled	—	C=BM, O=QuoVadis Limited, CN=QuoVadis Root CA 2	`73DA5AFA23D93FBA842E0A20F401C9D86E24FC5D`	QuoVadis Root CA 2 DigiCert	2020-11-25
disabled	—	OU=GlobalSign Root CA - R3, O=GlobalSign, CN=GlobalSign	`01EE5F224E59C4D16E6CF53163`	GlobalSign GlobalSign nv-sa	2020-11-25
disabled	—	C=IT, L=Milan, O=Actalis S.p.A./03358520967, CN=Actalis Authentication Root CA	`614AE08B40C7B311D85EDE3D934540DA`	Actalis Authentication Root CA Actalis	2020-11-25
disabled	—	C=BM, O=QuoVadis Limited, CN=QuoVadis Root CA 3	`0AF85CFA8FBEA55C3D00BE8DF4DD30E83EF28244`	QuoVadis Root CA 3 DigiCert	2020-11-25
disabled	—	C=BM, O=QuoVadis Limited, CN=QuoVadis Enterprise Trust CA 2 G3	`18917D9BA1A239A92A20D96D7D76D942DC4A1065`	QuoVadis Enterprise Trust CA 2 G3 DigiCert	2020-11-25
disabled	—	C=BM, O=QuoVadis Limited, CN=QuoVadis Root CA 2	`7669C040A5D25D8A6D4EF75BCB144E52A390589D`	QuoVadis Root CA 2 DigiCert	2020-11-25

Raw Remote Settings Record

{
    "schema": 1606237257131,
    "details": {
        "bug": "https://bugzilla.mozilla.org/show_bug.cgi?id=1679183",
        "who": "",
        "why": "",
        "name": "",
        "created": ""
    },
    "enabled": false,
    "issuerName": "MEwxIDAeBgNVBAsTF0dsb2JhbFNpZ24gUm9vdCBDQSAtIFIzMRMwEQYDVQQKEwpHbG9iYWxTaWduMRMwEQYDVQQDEwpHbG9iYWxTaWdu",
    "serialNumber": "Ae5fIk5ZxNFubPUxYw==",
    "id": "17086fc0-bc58-40ee-8523-e2d76f855c11",
    "last_modified": 1606328856840
}