← OneCRL Browser

OneCRL Entry

495b31a1-84f2-4a2e-b4b0-f24303c0b114

Revocation Entry

Status: enabled
Serial: 3F26C6EB68EAA71298395E4C9570063C9603CBD3
Last Modified: 2018-02-09 14:05:53 UTC
Schema: 1552493002970

Issuer

DN: C=BM, O=QuoVadis Limited, CN=QuoVadis Root CA 1 G3
DN SHA-256: 5b6b8acf0bdbb5e1a6d24e8cd4cefc5c49a51487417086aaaced9cddec3b819d
Issuer DER: MEgxCzAJBgNVBAYTAkJNMRkwFwYDVQQKExBRdW9WYWRpcyBMaW1pdGVkMR4wHAYDVQQDExVRdW9WYWRpcyBSb290IENBIDEgRzM=

Context

Bugzilla: 1437038
Action: On 2018-02-09T14:05:40Z, 13 intermediate CA revocation entries were generated from CCADB data and added to OneCRL; o**********s@mozilla.bugs initiated the bug and attached the revocation data, Kathleen Wilson confirmed the entries were correct, and w**********r@fastly.com later confirmed they were added.
Confidence: Explicit in OneCRL thread · 0.97

CCADB Link

Issuer CA: QuoVadis Root CA 1 G3
CA Owner: DigiCert

AI Summary

Generated 2026-06-30 11:42 UTC · Model: gpt-5.4-mini

This Bugzilla case added 13 CA intermediate certificates to Mozilla OneCRL, with the entries generated from CCADB revocation data on 2018-02-09T14:05:40Z. The thread explicitly says the correct entries were to be added to OneCRL, and later confirms that the entries had been added. The initial action was initiated by o**********s@mozilla.bugs, who created the bug and attached revocation data files. Kathleen Wilson explicitly reviewed the attachment and confirmed the entries were correct for OneCRL, and TLS Canary was run with no regressions. The bug comments also show a Kinto dataset check finding 13 expected added entries and no missing or extra entries, followed by confirmation that the changes were triggered at Kinto and then added to production. The thread does not state a specific CCADB revocation reason or external compliance incident for these certificates, so that cause is not stated here.

OneCRL action

On 2018-02-09T14:05:40Z, 13 intermediate CA revocation entries were generated from CCADB data and added to OneCRL; o**********s@mozilla.bugs initiated the bug and attached the revocation data, Kathleen Wilson confirmed the entries were correct, and w**********r@fastly.com later confirmed they were added.

CCADB trigger

CCADB-generated revocation data / candidate report state is explicit; no specific revocation reason, revoked-status field, or external compliance trigger is stated in the thread.

External cause

Unknown / not stated

Confidence

Explicit in OneCRL thread · 0.97

Chronology

2018-02-09Bug 1437038 created; revocation data attachments posted for intermediates to be revoked.
2018-02-09Kathleen Wilson confirmed the attachment contained the correct entries to add to OneCRL.
2018-02-10TLS Canary pass reported no regressions.
2018-02-12Kinto dataset comparison found 13 expected added entries and triggered the change at Kinto.
2018-02-13w**********r@fastly.com confirmed the entries had been added to OneCRL.

Bug 1437038

AI-generated from the OneCRL record and linked Bugzilla thread. Mozilla and CCADB records remain authoritative.

Status	Name	Issuer	Serial	CCADB	Modified
enabled	—	C=DE, O=Deutsche Telekom AG, OU=T-TeleSec Trust Center, CN=Deutsche Telekom Root CA 2	`22C58380932FEEE6`	Deutsche Telekom Root CA 2 Deutsche Telekom Security GmbH	2018-02-09
enabled	—	C=BM, O=QuoVadis Limited, CN=QuoVadis Root CA 2	`583166B348B2A658CC928853CC1BDFE069933AED`	QuoVadis Root CA 2 DigiCert	2018-02-09
enabled	—	C=BM, O=QuoVadis Limited, CN=QuoVadis Root CA 1 G3	`3F26C6EB68EAA71298395E4C9570063C9603CBD3`	QuoVadis Root CA 1 G3 DigiCert	2018-02-09
enabled	—	C=BM, O=QuoVadis Limited, OU=Root Certification Authority, CN=QuoVadis Root Certification Authority	`421FD2B1`	QuoVadis Root Certification Authority DigiCert	2018-02-09
enabled	—	C=NL, O=Staat der Nederlanden, CN=Staat der Nederlanden Organisatie CA - G2	`01313311`	Staat der Nederlanden Organisatie CA - G2 Government of The Netherlands, PKIoverheid (Logius)	2018-02-09
enabled	—	C=NL, O=Staat der Nederlanden, CN=Staat der Nederlanden Burger CA - G2	`013137DF`	Staat der Nederlanden Burger CA - G2 Government of The Netherlands, PKIoverheid (Logius)	2018-02-09
enabled	—	C=IE, O=Baltimore, OU=CyberTrust, CN=Baltimore CyberTrust Root	`07279CA7`	Baltimore CyberTrust Root DigiCert	2018-02-09
enabled	—	C=AU, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Australia Class 2 CA - G2	`3193700B1D01023CD33A072F1EC99D85`	Symantec Australia Class 2 CA - G2 DigiCert	2018-02-09
enabled	—	C=PT, O=SCEE, CN=ECRaizEstado	`3D6C218C41E1D27E46E8FF1BF9B02472`	ECRaizEstado DigiCert	2018-02-09
enabled	—	C=IE, O=Baltimore, OU=CyberTrust, CN=Baltimore CyberTrust Root	`0727BFC4`	Baltimore CyberTrust Root DigiCert	2018-02-09
enabled	—	C=AU, O=Symantec Corporation, OU=VeriSign Trust Network, CN=Symantec Australia Class 2 CA	`367E911DA54898C12D1CB6CFAA5C8610`	Symantec Australia Class 2 CA DigiCert	2018-02-09
enabled	—	C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=(c) 2008 VeriSign, Inc. - For authorized use only, CN=VeriSign Universal Root Certification Authority	`5F6D973A5C1F7354DAC3F391C063887A`	VeriSign Universal Root Certification Authority DigiCert	2018-02-09
enabled	—	C=PT, O=SCEE, CN=ECRaizEstado	`3E0226786A8291AA46E8FE36E8D7BCE7`	ECRaizEstado DigiCert	2018-02-09

Raw Remote Settings Record

{
    "schema": 1552493002970,
    "details": {
        "bug": "https://bugzilla.mozilla.org/show_bug.cgi?id=1437038",
        "who": "",
        "why": "",
        "name": "",
        "created": "2018-02-09T14:05:40Z"
    },
    "enabled": true,
    "issuerName": "MEgxCzAJBgNVBAYTAkJNMRkwFwYDVQQKExBRdW9WYWRpcyBMaW1pdGVkMR4wHAYDVQQDExVRdW9WYWRpcyBSb290IENBIDEgRzM=",
    "serialNumber": "PybG62jqpxKYOV5MlXAGPJYDy9M=",
    "id": "495b31a1-84f2-4a2e-b4b0-f24303c0b114",
    "last_modified": 1518185153363
}