Information Security Certification Authority
4c0da88a-8e3a-4cf7-ad6e-e162ed953867
Revocation Entry
- Status
- enabled
- Serial
451D3270968C19997CF2E4E3B97708EFE276F318- Last Modified
- 2023-11-16 17:13:43 UTC
- Schema
- 1699660807926
Issuer
- DN
- CN=Information Security Certification Authority, O=ISCA, C=KZ
- DN SHA-256
e14b60e76779d8927d4278b44223cf3d4362fa72866ab89a0e1b0698fc97a2a3- Issuer DER
MFMxNTAzBgNVBAMTLEluZm9ybWF0aW9uIFNlY3VyaXR5IENlcnRpZmljYXRpb24gQXV0aG9yaXR5MQ0wCwYDVQQKEwRJU0NBMQswCQYDVQQGEwJLWg==
Context
- Bugzilla
- 1864724
- Action
- Added a OneCRL revocation for the ISCA certificate (issuer CN=Information Security Certification Authority, O=ISCA, C=KZ; serial 451D3270968C19997CF2E4E3B97708EFE276F318). Kathleen Wilson requested it on 2023-11-14; Dana Keeler approved and pushed it to production on 2023-11-16.
- Confidence
- Explicit in OneCRL thread · 0.98
CCADB Link
- Issuer CA
- —
- CA Owner
- —
AI Summary
Generated 2026-06-30 10:26 UTC · Model: gpt-5.4-miniThis bug added a new OneCRL revocation entry for the Information Security Certification Authority (ISCA) certificate, identified by issuer CN=Information Security Certification Authority, O=ISCA, C=KZ and serial 451D3270968C19997CF2E4E3B97708EFE276F318. Kathleen Wilson initiated the request on 2023-11-14, saying the ISCA certificate at isca.gov.kz had changed again and asking that the new cert be added to OneCRL. Dana Keeler later approved and applied the change in production on 2023-11-16, and Kathleen verified it in Nightly and Release afterward. The thread explicitly ties the entry to "Kazakhstan MITM (#9)" as the stated reason. The bug does not state a CCADB revocation field, candidate-report state, or a specific CA closure as the qualification trigger. A later comment says the cert was already actively used to MITM several sites, which supports the security rationale but is separate from the OneCRL workflow itself.
Added a OneCRL revocation for the ISCA certificate (issuer CN=Information Security Certification Authority, O=ISCA, C=KZ; serial 451D3270968C19997CF2E4E3B97708EFE276F318). Kathleen Wilson requested it on 2023-11-14; Dana Keeler approved and pushed it to production on 2023-11-16.
Unknown / not stated; the thread only shows a OneCRL request and approval, with no explicit CCADB revoked-status, revocation-date, candidate-report, or manual-addition trigger stated.
Kazakhstan MITM (#9); later comment says the certificate was actively used to MITM rengum.ru, tsargrad.tv, and kompromat.wiki. No CA closure is stated.
Explicit in OneCRL thread · 0.98
- 2023-11-14Kathleen Wilson filed the bug and requested adding the updated ISCA certificate to OneCRL.
- 2023-11-15Dana Keeler approved the proposed OneCRL change in staging.
- 2023-11-16Dana Keeler approved the change on prod and later verified the revocation in Nightly/Release.
- 2023-11-19A commenter stated the certificate was actively used to MITM several sites.
- 2023-11-20Kathleen Wilson verified the OneCRL entry in Firefox Nightly and Release profiles.
AI-generated from the OneCRL record and linked Bugzilla thread. Mozilla and CCADB records remain authoritative.
Raw Remote Settings Record
{
"schema": 1699660807926,
"details": {
"bug": "1864724",
"who": "dkeeler@mozilla.com",
"why": "Kazakhstan MITM (#9)",
"name": "Information Security Certification Authority",
"created": "2023-11-14T23:39:21Z"
},
"enabled": true,
"issuerName": "MFMxNTAzBgNVBAMTLEluZm9ybWF0aW9uIFNlY3VyaXR5IENlcnRpZmljYXRpb24gQXV0aG9yaXR5MQ0wCwYDVQQKEwRJU0NBMQswCQYDVQQGEwJLWg==",
"serialNumber": "RR0ycJaMGZl88uTjuXcI7+J28xg=",
"id": "4c0da88a-8e3a-4cf7-ad6e-e162ed953867",
"last_modified": 1700154823756
}