OneCRL Entry
360abd2f-267a-4f07-b0c9-29da1c4770b7
Revocation Entry
- Status
- disabled
- Serial
0D10E9F89400260FD7B5152EB88FE101FC4AC149- Last Modified
- 2025-08-22 04:33:07 UTC
- Schema
- 1755622854733
Issuer
- DN
- C=CN, O=TrustAsia Technologies, Inc., CN=TrustAsia TLS RSA Root CA
- DN SHA-256
ec518856ad726b0f0a1a2a0fad37e1851858b229b6f9b411b86eb6911f0eca48- Issuer DER
MFgxCzAJBgNVBAYTAkNOMSUwIwYDVQQKExxUcnVzdEFzaWEgVGVjaG5vbG9naWVzLCBJbmMuMSIwIAYDVQQDExlUcnVzdEFzaWEgVExTIFJTQSBSb290IENB
Context
- Bugzilla
- 1983893
- Action
- Four disabled OneCRL issuer/serial entries were added for revoked intermediate certificates: two under issuer 'Actalis Authentication Root CA' and two under issuers 'TrustAsia TLS RSA Root CA' and 'TrustAsia TLS ECC Root CA'. The bug was initiated by the Common CA Database to OneCRL Bot on 2025-08-19, Ben Wilson specified the correct entries on 2025-08-20, staging was approved and validated by Daniel Keeler on 2025-08-21, production was approved by Daniel Keeler on 2025-08-22, and Ben Wilson verified the entries in Firefox Beta and Nightly later that day.
- Confidence
- Explicit in OneCRL thread · 0.97
CCADB Link
- Issuer CA
- TrustAsia TLS RSA Root CA
- CA Owner
- TrustAsia Technologies, Inc.
AI Summary
Generated 2026-06-30 11:13 UTC · Model: gpt-5.4This Bugzilla case tracks adding four revoked intermediate certificate entries to Mozilla OneCRL. The bug was created on 2025-08-19 by the Common CA Database to OneCRL Bot, which stated that the entries were being added based on revoked intermediate certificates reported in the CCADB. Ben Wilson then confirmed the specific four issuer/serial pairs to add, noting that they were only 4 of 15 CA revocations he had identified in the CCADB and that the other 11 would be handled later when the CCADB process was fixed. The four entries correspond to two Actalis-issued certificates under the Actalis Authentication Root CA and two TrustAsia-issued certificates under the TrustAsia TLS RSA Root CA and TrustAsia TLS ECC Root CA. Review and staging verification occurred on 2025-08-21, production approval occurred on 2025-08-22, and Ben Wilson later verified the changes in Firefox Beta and Nightly before closure. The thread does not state the individual revocation reasons, revocation dates, or any external compliance incident or CA closure explaining why these certificates had been revoked. A timeline-based inference is that qualification came from CCADB-reported revoked intermediates surfaced by the bot, but the exact CCADB candidate-report fields are not described in the thread.
Four disabled OneCRL issuer/serial entries were added for revoked intermediate certificates: two under issuer 'Actalis Authentication Root CA' and two under issuers 'TrustAsia TLS RSA Root CA' and 'TrustAsia TLS ECC Root CA'. The bug was initiated by the Common CA Database to OneCRL Bot on 2025-08-19, Ben Wilson specified the correct entries on 2025-08-20, staging was approved and validated by Daniel Keeler on 2025-08-21, production was approved by Daniel Keeler on 2025-08-22, and Ben Wilson verified the entries in Firefox Beta and Nightly later that day.
Explicitly stated as revoked intermediate certificates reported in the CCADB. Ben Wilson also stated these were 4 of 15 CA revocations he had identified in the CCADB. No revocation reason, revocation date, or specific CCADB candidate-report field/state is stated.
unknown
Explicit in OneCRL thread · 0.97
- 2025-08-19Bug 1983893 was created by the Common CA Database to OneCRL Bot to add entries to OneCRL based on revoked intermediate certificates reported in the CCADB.
- 2025-08-19The bot attached issuer/serial data, proposed OneCRL additions, and decoded entry details.
- 2025-08-20Ben Wilson stated these were only 4 of 15 CA revocations identified in the CCADB, confirmed the correct four entries, and said they had been filed in staging.
- 2025-08-21Daniel Keeler approved the changes in staging, validated them with remote-settings-devtools, and attached onecrl-entry-checker output showing four production changes waiting.
- 2025-08-21Ben Wilson verified the proposed additions were correct and requested approval in Kinto Production.
- 2025-08-22Daniel Keeler approved the changes in production.
- 2025-08-22Ben Wilson verified the changes in Firefox Beta and Nightly profiles and indicated the bug could be closed.
- 2025-08-25The bug was resolved FIXED.
AI-generated from the OneCRL record and linked Bugzilla thread. Mozilla and CCADB records remain authoritative.
Raw Remote Settings Record
{
"schema": 1755622854733,
"details": {
"bug": "https://bugzilla.mozilla.org/show_bug.cgi?id=1983893",
"who": "",
"why": "",
"name": "",
"created": ""
},
"enabled": false,
"issuerName": "MFgxCzAJBgNVBAYTAkNOMSUwIwYDVQQKExxUcnVzdEFzaWEgVGVjaG5vbG9naWVzLCBJbmMuMSIwIAYDVQQDExlUcnVzdEFzaWEgVExTIFJTQSBSb290IENB",
"serialNumber": "DRDp+JQAJg/XtRUuuI/hAfxKwUk=",
"id": "360abd2f-267a-4f07-b0c9-29da1c4770b7",
"last_modified": 1755837187977
}