Information Security Certification Authority
2e32f465-fab4-4365-94d8-9a83041e660a
Revocation Entry
- Status
- enabled
- Serial
320412DF4C2FB102F3980CAA76BA610AE62C8492- Last Modified
- 2024-03-05 21:23:30 UTC
- Schema
- 1709632813150
Issuer
- DN
- CN=Information Security Certification Authority, O=ISCA, C=KZ
- DN SHA-256
e14b60e76779d8927d4278b44223cf3d4362fa72866ab89a0e1b0698fc97a2a3- Issuer DER
MFMxNTAzBgNVBAMTLEluZm9ybWF0aW9uIFNlY3VyaXR5IENlcnRpZmljYXRpb24gQXV0aG9yaXR5MQ0wCwYDVQQKEwRJU0NBMQswCQYDVQQGEwJLWg==
Context
- Bugzilla
- 1879046
- Action
- A new OneCRL entry was added for the self-signed certificate "Information Security Certification Authority" with issuer DN "CN=Information Security Certification Authority, O=ISCA, C=KZ" and serial 320412DF4C2FB102F3980CAA76BA610AE62C8492. The production-pending addition was posted by d**********r@mozilla.com on 2024-03-05, approved in Kinto staging by b**********n@mozilla.com the same day, and confirmed as included in OneCRL by b**********n@mozilla.com on 2024-03-07.
- Confidence
- Explicit in OneCRL thread · 0.97
CCADB Link
- Issuer CA
- —
- CA Owner
- —
AI Summary
Generated 2026-06-30 10:10 UTC · Model: gpt-5.4Mozilla added the self-signed CA certificate named "Information Security Certification Authority" to OneCRL after a user reported a Kazakhstan man-in-the-middle interception attempt. The report stated that visiting m.reactor.cc resulted in replacement of the real certificate with the attached certificate chain, and that many people install a mandatory government certificate to access some government websites. On 2024-03-04, David Keeler said he believed he had found the certificate the government wanted users to install and attached it to the bug. Ben Wilson then provided the certificate metadata needed for OneCRL entry creation and approved the proposed change in Kinto staging on 2024-03-05. A production comparison log posted by David Keeler on 2024-03-05 showed one pending production addition for this certificate, with details naming the entry, bug, actor, and reason "Kazakhstan MITM (#10)". Ben Wilson confirmed on 2024-03-07 that the CA certificate was included in OneCRL and the bug was closed. The thread does not mention CCADB revocation fields, a candidate-report state, or a revocation reason/date as the trigger. The apparent cause stated in the thread is a Kazakhstan government MITM attempt involving a certificate users were reportedly required to install.
A new OneCRL entry was added for the self-signed certificate "Information Security Certification Authority" with issuer DN "CN=Information Security Certification Authority, O=ISCA, C=KZ" and serial 320412DF4C2FB102F3980CAA76BA610AE62C8492. The production-pending addition was posted by d**********r@mozilla.com on 2024-03-05, approved in Kinto staging by b**********n@mozilla.com the same day, and confirmed as included in OneCRL by b**********n@mozilla.com on 2024-03-07.
unknown
Explicit in the bug thread: a reported Kazakhstan government MITM attempt using the "Information Security Certification Authority" certificate that users were reportedly asked or required to install for access to some government websites.
Explicit in OneCRL thread · 0.97
- 2024-02-07Bug 1879046 was filed reporting another Kazakhstan MITM attempt and attaching observed certificate files.
- 2024-03-04David Keeler said he believed he had found the certificate the government wanted users to install and attached it.
- 2024-03-05Ben Wilson posted certificate metadata needed for adding the root certificate to OneCRL.
- 2024-03-05Ben Wilson approved the proposed OneCRL change in Kinto staging.
- 2024-03-05David Keeler posted a production comparison showing one pending OneCRL addition for "Information Security Certification Authority" with reason "Kazakhstan MITM (#10)".
- 2024-03-05Ben Wilson noted the CA certificate was also recorded at crt.sh.
- 2024-03-07Ben Wilson confirmed the CA certificate was included in OneCRL and the bug could be closed.
AI-generated from the OneCRL record and linked Bugzilla thread. Mozilla and CCADB records remain authoritative.
Raw Remote Settings Record
{
"schema": 1709632813150,
"details": {
"bug": "https://bugzilla.mozilla.org/show_bug.cgi?id=1879046",
"who": "dkeeler@mozilla.com",
"why": "Kazakhstan MITM (#10)",
"name": "Information Security Certification Authority",
"created": ""
},
"enabled": true,
"issuerName": "MFMxNTAzBgNVBAMTLEluZm9ybWF0aW9uIFNlY3VyaXR5IENlcnRpZmljYXRpb24gQXV0aG9yaXR5MQ0wCwYDVQQKEwRJU0NBMQswCQYDVQQGEwJLWg==",
"serialNumber": "MgQS30wvsQLzmAyqdrphCuYshJI=",
"id": "2e32f465-fab4-4365-94d8-9a83041e660a",
"last_modified": 1709673810455
}