key compromise
37450b9d-89e2-4144-af21-c01dfb50d5e8
Revocation Entry
- Status
- enabled
- Serial
0A7FAE5292EE76C1F4F6561820F4CAE4- Last Modified
- 2018-01-23 13:41:20 UTC
- Schema
- 1552493004389
Issuer
- DN
- C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert SHA2 High Assurance Server CA
- DN SHA-256
9a682dce6a5a012651fdb5c79735899b7a791fa8419745fe3072db80bcdd9c58- Issuer DER
MHAxCzAJBgNVBAYTAlVTMRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5jb20xLzAtBgNVBAMTJkRpZ2lDZXJ0IFNIQTIgSGlnaCBBc3N1cmFuY2UgU2VydmVyIENB
Context
- Bugzilla
- 1427034
- Action
- Added to OneCRL as a key-compromise revocation for DigiCert SHA2 High Assurance Server CA / serial 0A7FAE5292EE76C1F4F6561820F4CAE4; the OneCRL record shows m**********n@mozilla.com as the actor, created 2018-01-17T13:03:45.551668672Z and last modified 2018-01-23T13:41:20+00:00. Kathleen Wilson later confirmed in Bugzilla on 2018-01-31 that it was added.
- Confidence
- Explicit in OneCRL thread · 0.98
CCADB Link
- Issuer CA
- DigiCert SHA2 High Assurance Server CA
- CA Owner
- DigiCert
AI Summary
Generated 2026-06-30 11:48 UTC · Model: gpt-5.4-miniA DigiCert-issued certificate for localbattle.net was added to OneCRL. The OneCRL entry records the reason as key compromise and shows it was added by mn@mozilla.com, with the entry created on 2018-01-17 and last modified on 2018-01-23. In the Bugzilla thread, Hanno Boeck reported that Blizzard’s application embedded a certificate and private key for localbattle.net, and later noted that the cert had been submitted to CT. Jeremy Rowley of DigiCert stated the certificate had been revoked and that DigiCert revokes certs within 24 hours of confirming key compromise when reported to re@digicert.com. W. Thayer then asked to add the certificate to OneCRL, and Kathleen Wilson later confirmed it was added on 2018-01-31. The thread does not state a CCADB candidate-report state or revocation field as the qualification trigger; the qualification appears to be based on the reported key compromise and subsequent revocation. The external cause is the embedded private key in Blizzard’s localbattle.net certificate, i.e. a key-compromise incident.
Added to OneCRL as a key-compromise revocation for DigiCert SHA2 High Assurance Server CA / serial 0A7FAE5292EE76C1F4F6561820F4CAE4; the OneCRL record shows m**********n@mozilla.com as the actor, created 2018-01-17T13:03:45.551668672Z and last modified 2018-01-23T13:41:20+00:00. Kathleen Wilson later confirmed in Bugzilla on 2018-01-31 that it was added.
Unknown / not stated; the thread does not mention a CCADB candidate report state or specific CCADB revocation field. The OneCRL detail is simply 'key compromise.'
Blizzard's localbattle.net certificate/private key embedded in software, reported as a key compromise; DigiCert confirmed revocation after key-compromise reporting. No CA closure is stated.
Explicit in OneCRL thread · 0.98
- 2017-12-25Hanno Boeck opened Bugzilla 1427034 reporting a DigiCert-issued localbattle.net certificate with an embedded private key, describing it as a key compromise.
- 2018-01-06Mozilla asked whether the certificate should be added to OneCRL.
- 2018-01-07DigiCert stated the certificate was revoked and that it revokes certs within 24 hours of confirmed key compromise reported to r**********e@digicert.com.
- 2018-01-08Mozilla decided to add the certificate to OneCRL.
- 2018-01-17The OneCRL entry was created with reason 'key compromise'.
- 2018-01-23The OneCRL entry was last modified.
- 2018-01-31Kathleen Wilson confirmed in Bugzilla that the certificate was added to OneCRL.
AI-generated from the OneCRL record and linked Bugzilla thread. Mozilla and CCADB records remain authoritative.
Raw Remote Settings Record
{
"schema": 1552493004389,
"details": {
"bug": "https://bugzilla.mozilla.org/show_bug.cgi?id=1427034",
"who": "mgoodwin@mozilla.com",
"why": "",
"name": "key compromise",
"created": "2018-01-17T13:03:45.551668672Z"
},
"enabled": true,
"issuerName": "MHAxCzAJBgNVBAYTAlVTMRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5jb20xLzAtBgNVBAMTJkRpZ2lDZXJ0IFNIQTIgSGlnaCBBc3N1cmFuY2UgU2VydmVyIENB",
"serialNumber": "Cn+uUpLudsH09lYYIPTK5A==",
"id": "37450b9d-89e2-4144-af21-c01dfb50d5e8",
"last_modified": 1516714880459
}