OneCRL Entry
2d547269-424e-4338-80cb-cd5130c5a55e
Revocation Entry
- Status
- disabled
- Serial
580E00B14E86CE35- Last Modified
- 2025-09-26 22:20:32 UTC
- Schema
- 1758733248537
Issuer
- DN
- C=US, O=AffirmTrust, CN=AffirmTrust Commercial
- DN SHA-256
ce179a08c8bb92549bb52c86134a31983bb3e703c1ce91941d62e6cf130207f1- Issuer DER
MEQxCzAJBgNVBAYTAlVTMRQwEgYDVQQKDAtBZmZpcm1UcnVzdDEfMB0GA1UEAwwWQWZmaXJtVHJ1c3QgQ29tbWVyY2lhbA==
Context
- Bugzilla
- 1990548
- Action
- Ten disabled OneCRL issuer/serial entries were proposed by the Common CA Database to OneCRL Bot on 2025-09-24 based on revoked intermediate certificates reported in the CCADB, then reviewed by Mozilla staff, approved in staging by David Keeler on 2025-09-26, approved for Kinto Production by Ben Wilson on 2025-09-26, and approved in production by David Keeler on 2025-09-26.
- Confidence
- Explicit in OneCRL thread · 0.98
CCADB Link
- Issuer CA
- AffirmTrust Commercial
- CA Owner
- Entrust
AI Summary
Generated 2026-06-30 11:13 UTC · Model: gpt-5.4Bug 1990548 is a Mozilla OneCRL case automatically opened by the Common CA Database to OneCRL Bot on 2025-09-24. The bug states that entries were being added to OneCRL based on revoked intermediate certificates reported in the CCADB. Ben Wilson identified ten CA certificates in the batch that should be added to OneCRL, consisting of certificates under the AffirmTrust Commercial, vTrus Root CA, and vTrus ECC Root CA issuers. The staging review was approved by David Keeler on 2025-09-26, Ben Wilson then confirmed the entries were correct for Kinto Production, and David Keeler approved them in production the same day. Ben Wilson later confirmed on 2025-09-27 that the entries appeared in his Firefox profiles. The thread does not state the specific CCADB revocation reason codes, revocation dates, or candidate-report field values for the individual certificates. The thread also does not state any external compliance incident or CA closure as the reason for these revocations.
Ten disabled OneCRL issuer/serial entries were proposed by the Common CA Database to OneCRL Bot on 2025-09-24 based on revoked intermediate certificates reported in the CCADB, then reviewed by Mozilla staff, approved in staging by David Keeler on 2025-09-26, approved for Kinto Production by Ben Wilson on 2025-09-26, and approved in production by David Keeler on 2025-09-26.
Explicitly stated as revoked intermediate certificates reported in the CCADB; no specific revocation reason, revocation date, candidate report state, or CCADB field values are stated in the thread.
unknown
Explicit in OneCRL thread · 0.98
- 2025-09-24CCADB to OneCRL Bot opened Bug 1990548 and stated entries were being added to OneCRL based on revoked intermediate certificates reported in the CCADB.
- 2025-09-24The bot attached issuer/serial pairs, proposed OneCRL additions, and decoded entry details.
- 2025-09-24Ben Wilson listed the ten CA certificates that should be added to OneCRL and said they were ready for review/approval in staging.
- 2025-09-25The bot posted that changes were still in review and the bug required resolution.
- 2025-09-26The bot again posted that changes were still in review.
- 2025-09-26David Keeler approved the changes in staging and reported ten changes waiting in production.
- 2025-09-26Ben Wilson confirmed the entries were correct and could be approved in Kinto Production.
- 2025-09-26David Keeler approved the entries in production.
- 2025-09-27Ben Wilson confirmed the entries appeared in his Firefox profiles.
AI-generated from the OneCRL record and linked Bugzilla thread. Mozilla and CCADB records remain authoritative.
Raw Remote Settings Record
{
"schema": 1758733248537,
"details": {
"bug": "https://bugzilla.mozilla.org/show_bug.cgi?id=1990548",
"who": "",
"why": "",
"name": "",
"created": ""
},
"enabled": false,
"issuerName": "MEQxCzAJBgNVBAYTAlVTMRQwEgYDVQQKDAtBZmZpcm1UcnVzdDEfMB0GA1UEAwwWQWZmaXJtVHJ1c3QgQ29tbWVyY2lhbA==",
"serialNumber": "WA4AsU6GzjU=",
"id": "2d547269-424e-4338-80cb-cd5130c5a55e",
"last_modified": 1758925232395
}