OneCRL Entry
34f55474-686d-421e-9563-357a2192d609
Revocation Entry
- Status
- disabled
- Serial
018E7478A40E276F120C40D9C27A98- Last Modified
- 2025-01-08 22:18:56 UTC
- Schema
- 1734800449172
Issuer
- DN
- C=SE, O=Telia Company AB, CN=Telia EC TLS Root CA v3
- DN SHA-256
8a9154009643253665eafe99eac2fe19d5a999de47d2acd5a7981ced588739d1- Issuer DER
MEoxCzAJBgNVBAYTAlNFMRkwFwYDVQQKDBBUZWxpYSBDb21wYW55IEFCMSAwHgYDVQQDDBdUZWxpYSBFQyBUTFMgUm9vdCBDQSB2Mw==
Context
- Bugzilla
- 1938770
- Action
- Fifteen disabled OneCRL records tied to bug 1938770 were added for specific issuer/serial pairs representing revoked intermediate certificates, initiated by the Common CA Database to OneCRL Bot when it opened the bug on 2024-12-21. Ben Wilson explicitly confirmed on 2025-01-06 that these were the correct entries, staging approval was recorded on 2025-01-07, production approval on 2025-01-08, and propagation to OneCRL and Firefox profiles was verified on 2025-01-09.
- Confidence
- Explicit in OneCRL thread · 0.98
CCADB Link
- Issuer CA
- Telia EC TLS Root CA v3
- CA Owner
- Telia Company
AI Summary
Generated 2026-06-30 11:13 UTC · Model: gpt-5.4Bug 1938770 tracks a batch addition of revoked intermediate certificate entries to Mozilla OneCRL. The bug was created on 2024-12-21 by the Common CA Database to OneCRL Bot, which stated that it was adding entries to OneCRL based on revoked intermediate certificates reported in the CCADB. The proposed additions covered 15 issuer-and-serial entries associated with SwissSign AG, Telia Company, Krajowa Izba Rozliczeniowa S.A. (KIR), and SECOM Trust Systems Co., Ltd. On 2025-01-06, Ben Wilson confirmed that these were the correct entries to add to OneCRL. The entries were then approved in staging on 2025-01-07, confirmed as correct for production on 2025-01-08, approved in production on 2025-01-08, and verified as propagated to OneCRL and Firefox profiles on 2025-01-09. The thread does not state individual revocation reasons, revocation dates, or any external compliance incident for the listed certificates. It also does not cite a related CA incident bug, root program report, or mailing-list discussion explaining why the certificates had been revoked.
Fifteen disabled OneCRL records tied to bug 1938770 were added for specific issuer/serial pairs representing revoked intermediate certificates, initiated by the Common CA Database to OneCRL Bot when it opened the bug on 2024-12-21. Ben Wilson explicitly confirmed on 2025-01-06 that these were the correct entries, staging approval was recorded on 2025-01-07, production approval on 2025-01-08, and propagation to OneCRL and Firefox profiles was verified on 2025-01-09.
Explicitly stated as revoked intermediate certificates reported in the CCADB; no individual CCADB revocation reason, revocation date, candidate-report field state, or manual-addition explanation is given in the thread.
unknown
Explicit in OneCRL thread · 0.98
- 2024-12-21ccadb2onercl bot opened Bug 1938770 and said it was adding entries to OneCRL based on revoked intermediate certificates reported in the CCADB.
- 2024-12-21Bot attached issuer/serial pairs, proposed OneCRL additions, and decoded entry details.
- 2025-01-06David Keeler asked Ben Wilson to confirm whether the entries were correct.
- 2025-01-06Ben Wilson confirmed these were the correct entries to add to OneCRL and listed staging and verification steps.
- 2025-01-07Attachment with compare.py output was added noting approval in staging.
- 2025-01-08Ben Wilson said the staging entries were correct and could be moved into production.
- 2025-01-08David Keeler recorded approval in production.
- 2025-01-09Ben Wilson verified that the additions had propagated to OneCRL and Firefox profiles.
AI-generated from the OneCRL record and linked Bugzilla thread. Mozilla and CCADB records remain authoritative.
Raw Remote Settings Record
{
"schema": 1734800449172,
"details": {
"bug": "https://bugzilla.mozilla.org/show_bug.cgi?id=1938770",
"who": "",
"why": "",
"name": "",
"created": ""
},
"enabled": false,
"issuerName": "MEoxCzAJBgNVBAYTAlNFMRkwFwYDVQQKDBBUZWxpYSBDb21wYW55IEFCMSAwHgYDVQQDDBdUZWxpYSBFQyBUTFMgUm9vdCBDQSB2Mw==",
"serialNumber": "AY50eKQOJ28SDEDZwnqY",
"id": "34f55474-686d-421e-9563-357a2192d609",
"last_modified": 1736374736437
}