OneCRL Entry
1ea836d8-ae1a-4d4d-9ec8-c3ef4fd75011
Revocation Entry
- Status
- disabled
- Serial
5FE08EE145771C42C9ADD82839EAA83E- Last Modified
- 2026-03-26 20:16:39 UTC
- Schema
- 1773334942153
Issuer
- DN
- C=CN, O=UniTrust, CN=UniTrust Global TLS ECC Root CA R2
- DN SHA-256
2b96c6e5237a083f1c0c19383ddefa0142c0cea9dbc7c6d14fb82a7abecf6206- Issuer DER
ME0xCzAJBgNVBAYTAkNOMREwDwYDVQQKEwhVbmlUcnVzdDErMCkGA1UEAxMiVW5pVHJ1c3QgR2xvYmFsIFRMUyBFQ0MgUm9vdCBDQSBSMg==
Context
- Bugzilla
- 2022912
- Action
- On 2026-03-12, the ccadb2onercl bot added 6 disabled OneCRL entries for UniTrust issuer/serial pairs; Ben Wilson verified them on 2026-03-25, and they were approved into production on 2026-03-26.
- Confidence
- Explicit in OneCRL thread · 0.96
CCADB Link
AI Summary
Generated 2026-06-30 10:50 UTC · Model: gpt-5.4-miniThis bug added 6 OneCRL entries for revoked UniTrust intermediate certificates, all tied to the issuer/serial pairs verified by Ben Wilson. The additions were initiated by the CCADB-to-OneCRL bot on 2026-03-12, which said it was adding entries based on revoked intermediate certificates reported in CCADB. The bot created the line-delimited issuer/serial attachment and the proposed OneCRL attachment, and the entries were later approved in stage and then in production. The OneCRL records show the affected issuers as UniTrust Global TLS RSA Root CA R1 and UniTrust Global TLS ECC Root CA R2, with all 6 entries disabled in the published state. The thread does not state the specific CCADB revocation field values, candidate-report state, or the underlying compliance incident that caused the revocations. Timeline-wise, the bot opened the bug on 2026-03-12, stage approval occurred on 2026-03-25, production approval on 2026-03-26, and the bug was closed on 2026-03-27 after the entries appeared in Firefox profiles.
On 2026-03-12, the ccadb2onercl bot added 6 disabled OneCRL entries for UniTrust issuer/serial pairs; Ben Wilson verified them on 2026-03-25, and they were approved into production on 2026-03-26.
Revoked intermediate certificates reported in CCADB; specific revocation fields, candidate-report state, and revocation date are not stated.
Unknown / not stated
Explicit in OneCRL thread · 0.96
- 2026-03-12ccadb2onercl bot opened Bug 2022912 and announced OneCRL additions based on revoked intermediate certificates reported in CCADB.
- 2026-03-12Bot created the issuer/serial attachment and proposed OneCRL attachment.
- 2026-03-25Ben Wilson verified the six issuer-serial pairs and marked them correct for OneCRL.
- 2026-03-25Stage approval was granted for the changes.
- 2026-03-26Production approval was granted for the changes.
- 2026-03-27Ben Wilson said the entries were in his Firefox profiles and the bug could be closed.
AI-generated from the OneCRL record and linked Bugzilla thread. Mozilla and CCADB records remain authoritative.
Raw Remote Settings Record
{
"schema": 1773334942153,
"details": {
"bug": "https://bugzilla.mozilla.org/show_bug.cgi?id=2022912",
"who": "",
"why": "",
"name": "",
"created": ""
},
"enabled": false,
"issuerName": "ME0xCzAJBgNVBAYTAkNOMREwDwYDVQQKEwhVbmlUcnVzdDErMCkGA1UEAxMiVW5pVHJ1c3QgR2xvYmFsIFRMUyBFQ0MgUm9vdCBDQSBSMg==",
"serialNumber": "X+CO4UV3HELJrdgoOeqoPg==",
"id": "1ea836d8-ae1a-4d4d-9ec8-c3ef4fd75011",
"last_modified": 1774556199375
}