← OneCRL Browser

OneCRL Entry

1b74aa7b-2506-48bd-88bc-39af44ee70ce

Revocation Entry

Status: enabled
Serial: 0A01414100000138E4381D6C00000002
Last Modified: 2017-07-11 13:11:50 UTC
Schema: 1552493014308

Issuer

DN: O=Digital Signature Trust Co., CN=DST Root CA X3
DN SHA-256: aa847b4a4a2bb10d825a0a68e1051183ea33b1d304c5eac6e477b23ad3eae4f6
Issuer DER: MD8xJDAiBgNVBAoTG0RpZ2l0YWwgU2lnbmF0dXJlIFRydXN0IENvLjEXMBUGA1UEAxMORFNUIFJvb3QgQ0EgWDM=

Context

Bugzilla: 1379974
Action: 10 intermediate certificates were added to OneCRL; Mark Goodwin (:mgoodwin) initiated the bug and attached revocation data on 2017-07-11, Kathleen Wilson confirmed the entries, and the list was approved/shipped on 2017-07-18.
Confidence: Explicit in OneCRL thread · 0.93

CCADB Link

Issuer CA: DST Root CA X3
CA Owner: IdenTrust Services, LLC

AI Summary

Generated 2026-06-30 11:42 UTC · Model: gpt-5.4-mini

Mozilla added 10 intermediate CA certificates to OneCRL in this bug. The request was initiated by Mark Goodwin (:mgoodwin), who opened the bug and attached revocation data and a revocations.txt file on 2017-07-11. Kathleen Wilson later confirmed the attached entries were correct for OneCRL and asked for compat testing, and the list was pushed after a successful canary pass. The bug thread does not state a CCADB revocation reason, candidate-report state, or manual-addition trigger beyond the attached revocation data. The thread also does not name a specific external compliance incident or CA closure; only the affected issuers and their DigiCert/IdenTrust/Firmaprofesional ownership are visible from the entries. Timeline-wise, the entries were created in OneCRL on 2017-07-11 and approved/shipped on 2017-07-18, with confirmation of presence on 2017-07-19.

OneCRL action

10 intermediate certificates were added to OneCRL; Mark Goodwin (:mgoodwin) initiated the bug and attached revocation data on 2017-07-11, Kathleen Wilson confirmed the entries, and the list was approved/shipped on 2017-07-18.

CCADB trigger

Unknown / not stated; the thread only references attached revocation data and a revocations.txt file, with no explicit CCADB revoked-status, revocation reason/date, or candidate-report state described.

External cause

Unknown / not stated; no explicit external compliance incident, root program report, m.d.s.p. thread, or CA closure is named in the bug thread.

Confidence

Explicit in OneCRL thread · 0.93

Chronology

2017-07-11Mark Goodwin opened Bug 1379974 and attached revocation data for new OneCRL records.
2017-07-11A revocations.txt attachment was created for the 10 entries.
2017-07-11OneCRL records were created for the affected intermediates.
2017-07-18Canary testing on 100k top sites passed and the entries were approved and shipped.
2017-07-19Kathleen Wilson confirmed the entries were present in OneCRL.

Bug 1379974

AI-generated from the OneCRL record and linked Bugzilla thread. Mozilla and CCADB records remain authoritative.

Status	Name	Issuer	Serial	CCADB	Modified
enabled	—	C=US, O=VeriSign, Inc., OU=Class 3 Public Primary Certification Authority	`44C81D446101BF42B31428E0185A741E`	Class 3 Public Primary Certification Authority DigiCert	2017-07-11
enabled	—	C=US, O=VeriSign, Inc., OU=Class 3 Public Primary Certification Authority	`13F606464D76899A99B8C7EC22255A7A`	Class 3 Public Primary Certification Authority DigiCert	2017-07-11
enabled	—	C=US, O=VeriSign, Inc., OU=Class 3 Public Primary Certification Authority - G2, OU=(c) 1998 VeriSign, Inc. - For authorized use only, OU=VeriSign Trust Network	`3B6421FAA85B051B99035D720E170B19`	Class 3 Public Primary Certification Authority - G2 DigiCert	2017-07-11
enabled	—	C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=(c) 1999 VeriSign, Inc. - For authorized use only, CN=VeriSign Class 3 Public Primary Certification Authority - G3	`0FF5651AA9B3F4D6A2D72C02C9D4FF45`	VeriSign Class 3 Public Primary Certification Authority - G3 DigiCert	2017-07-11
enabled	—	C=US, O=VeriSign, Inc., OU=Class 3 Public Primary Certification Authority - G2, OU=(c) 1998 VeriSign, Inc. - For authorized use only, OU=VeriSign Trust Network	`07C7FB087254A95DD56AB78B3C4FB690`	Class 3 Public Primary Certification Authority - G2 DigiCert	2017-07-11
enabled	—	C=US, O=VeriSign, Inc., OU=Class 3 Public Primary Certification Authority	`1D546290A5D1435A2E84EA5870E9DAFC`	Class 3 Public Primary Certification Authority DigiCert	2017-07-11
enabled	—	C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=(c) 2007 VeriSign, Inc. - For authorized use only, CN=VeriSign Class 3 Public Primary Certification Authority - G4	`466238E0044354250E81734AF400806E`	VeriSign Class 3 Public Primary Certification Authority - G4 DigiCert	2017-07-11
enabled	—	C=US, O=VeriSign, Inc., OU=Class 3 Public Primary Certification Authority	`023FC224DD90599005DB91973D700338`	Class 3 Public Primary Certification Authority DigiCert	2017-07-11
enabled	—	O=Digital Signature Trust Co., CN=DST Root CA X3	`0A01414100000138E4381D6C00000002`	DST Root CA X3 IdenTrust Services, LLC	2017-07-11
enabled	—	C=ES, CN=Autoridad de Certificacion Firmaprofesional CIF A62634068	`24628A9E6D34B8E4`	Autoridad de Certificacion Firmaprofesional CIF A62634068 Autoridad de Certificacion Firmaprofesional	2017-07-11

Raw Remote Settings Record

{
    "schema": 1552493014308,
    "details": {
        "bug": "https://bugzilla.mozilla.org/show_bug.cgi?id=1379974",
        "who": "",
        "why": "",
        "name": "",
        "created": "2017-07-11T14:11:47Z"
    },
    "enabled": true,
    "issuerName": "MD8xJDAiBgNVBAoTG0RpZ2l0YWwgU2lnbmF0dXJlIFRydXN0IENvLjEXMBUGA1UEAxMORFNUIFJvb3QgQ0EgWDM=",
    "serialNumber": "CgFBQQAAATjkOB1sAAAAAg==",
    "id": "1b74aa7b-2506-48bd-88bc-39af44ee70ce",
    "last_modified": 1499778710731
}