OneCRL Entry
3654949f-c25a-406d-8b8d-df8b4034cb4f
Revocation Entry
- Status
- disabled
- Serial
2464954812CB077A3793DB0FBD22389B- Last Modified
- 2023-09-25 15:35:54 UTC
- Schema
- 1695233106750
Issuer
- DN
- C=US, ST=New Jersey, L=Jersey City, O=The USERTRUST Network, CN=USERTrust ECC Certification Authority
- DN SHA-256
43143292d7aa402e4c1baa15289d13dc9d524a085fad7d95b06ea33fb5b0a39b- Issuer DER
MIGIMQswCQYDVQQGEwJVUzETMBEGA1UECBMKTmV3IEplcnNleTEUMBIGA1UEBxMLSmVyc2V5IENpdHkxHjAcBgNVBAoTFVRoZSBVU0VSVFJVU1QgTmV0d29yazEuMCwGA1UEAxMlVVNFUlRydXN0IEVDQyBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eQ==
Context
- Bugzilla
- 1854222
- Action
- Seventeen disabled OneCRL issuer/serial entries were added in a batch tied to Bug 1854222. The action was initiated by the Common CA Database to OneCRL Bot when it filed the bug on 2023-09-20T18:04:55Z stating the entries were based on revoked intermediate certificates reported in the CCADB. Ben Wilson approved the batch for addition on 2023-09-20, Dana Keeler approved it on staging on 2023-09-21 and in production on 2023-09-25, and Ben Wilson verified deployment on 2023-09-26.
- Confidence
- Explicit in OneCRL thread · 0.98
CCADB Link
- Issuer CA
- USERTrust ECC Certification Authority
- CA Owner
- Sectigo
AI Summary
Generated 2026-06-30 11:41 UTC · Model: gpt-5.4Bug 1854222 is a Mozilla OneCRL case opened by the Common CA Database to OneCRL Bot on 2023-09-20 for a batch of revoked intermediate certificates reported in the CCADB. The bug explicitly states that entries were being added to OneCRL based on revoked intermediate certificates reported in the CCADB. The proposed batch contained 17 issuer/serial entries spanning certificates associated with SwissSign AG, Sectigo/USERTrust, BEIJING CERTIFICATE AUTHORITY, Firmaprofesional, Google Trust Services, GlobalSign, and TWCA. Ben Wilson confirmed on 2023-09-20 that these were the correct entries to add and said TLS Canary was not needed for this batch. Dana Keeler approved the changes on staging on 2023-09-21 and approved them in production on 2023-09-25. Ben Wilson then verified on 2023-09-26 that the changes were present in Firefox Nightly and Release profiles. The thread does not state per-certificate revocation reasons, revocation dates, or any external compliance incident or CA closure explaining the underlying revocations. It is therefore only explicit that CCADB-reported revoked intermediates qualified this batch for OneCRL processing.
Seventeen disabled OneCRL issuer/serial entries were added in a batch tied to Bug 1854222. The action was initiated by the Common CA Database to OneCRL Bot when it filed the bug on 2023-09-20T18:04:55Z stating the entries were based on revoked intermediate certificates reported in the CCADB. Ben Wilson approved the batch for addition on 2023-09-20, Dana Keeler approved it on staging on 2023-09-21 and in production on 2023-09-25, and Ben Wilson verified deployment on 2023-09-26.
Explicitly stated as revoked intermediate certificates reported in the CCADB. No specific CCADB revocation fields, revocation reasons, revocation dates, or candidate-report state are given in the thread.
Unknown; the thread does not cite any related compliance incident, root program report, mailing-list discussion, or CA closure as the reason for the revocations.
Explicit in OneCRL thread · 0.98
- 2023-09-20ccadb2onercl bot filed Bug 1854222 stating entries were being added to OneCRL based on revoked intermediate certificates reported in the CCADB.
- 2023-09-20Bot attached issuer/serial pairs, proposed OneCRL additions, and decoded entry details.
- 2023-09-20Ben Wilson confirmed these were the correct entries to add and said TLS Canary was not needed.
- 2023-09-21Dana Keeler approved the batch on staging and reported 17 changes waiting in production.
- 2023-09-22Ben Wilson confirmed the staging output matched the proposed additions and authorized production approval.
- 2023-09-25Dana Keeler approved the changes in production.
- 2023-09-26Ben Wilson verified the changes were present in Firefox Nightly and Release profiles.
AI-generated from the OneCRL record and linked Bugzilla thread. Mozilla and CCADB records remain authoritative.
Raw Remote Settings Record
{
"schema": 1695233106750,
"details": {
"bug": "https://bugzilla.mozilla.org/show_bug.cgi?id=1854222",
"who": "",
"why": "",
"name": "",
"created": ""
},
"enabled": false,
"issuerName": "MIGIMQswCQYDVQQGEwJVUzETMBEGA1UECBMKTmV3IEplcnNleTEUMBIGA1UEBxMLSmVyc2V5IENpdHkxHjAcBgNVBAoTFVRoZSBVU0VSVFJVU1QgTmV0d29yazEuMCwGA1UEAxMlVVNFUlRydXN0IEVDQyBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eQ==",
"serialNumber": "JGSVSBLLB3o3k9sPvSI4mw==",
"id": "3654949f-c25a-406d-8b8d-df8b4034cb4f",
"last_modified": 1695656154653
}