← OneCRL Browser

OneCRL Entry

53d9308c-0df2-476a-95af-4f06e4b8d253

Revocation Entry

Status: disabled
Serial: 0F5BAD3B8D3E07D559529B7CFB6A30B0
Last Modified: 2026-03-10 21:01:22 UTC
Schema: 1772730081783

Issuer

DN: C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Global Root G2
DN SHA-256: b965834d63c2aa0675acd92be6ca95c69826a1180f6b594dec731a6cd6dac9d4
Issuer DER: MGExCzAJBgNVBAYTAlVTMRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5jb20xIDAeBgNVBAMTF0RpZ2lDZXJ0IEdsb2JhbCBSb290IEcy

Context

Bugzilla: 2021383
Action: On 2026-03-05T17:01:08Z, c**********l@bots.tld proposed adding 44 revoked issuer/serial pairs to OneCRL; Ben Wilson confirmed them on 2026-03-05T20:53:18Z, David Keeler approved production on 2026-03-10T21:01:42Z, and Ben Wilson verified them in OneCRL on 2026-03-11T14:35:49Z.
Confidence: Explicit in OneCRL thread · 0.98

CCADB Link

Issuer CA: DigiCert Global Root G2
CA Owner: DigiCert

AI Summary

Generated 2026-06-30 10:51 UTC · Model: gpt-5.4-mini

This bug added 44 issuer/serial pairs to OneCRL, all marked disabled in the local OneCRL entries and matching the 44 certificates listed in the bug comments. The request was initiated automatically by the ccadb2onercl bot, which said it was adding entries based on revoked intermediate certificates reported in the CCADB. Ben Wilson reviewed the proposed additions, confirmed the 44 entries were correct, and asked to move them into production. David Keeler then approved the changes in production, and Ben Wilson later verified that the 44 CA certificates were contained in OneCRL. The thread explicitly states the CCADB basis was revoked intermediate certificates reported in CCADB, but it does not state the specific CCADB revocation fields or candidate-report state that triggered qualification. The thread also does not identify a single external compliance incident or CA closure as the cause; only the CCADB-reported revocations are explicit.

OneCRL action

On 2026-03-05T17:01:08Z, c**********l@bots.tld proposed adding 44 revoked issuer/serial pairs to OneCRL; Ben Wilson confirmed them on 2026-03-05T20:53:18Z, David Keeler approved production on 2026-03-10T21:01:42Z, and Ben Wilson verified them in OneCRL on 2026-03-11T14:35:49Z.

CCADB trigger

Explicitly stated trigger: revoked intermediate certificates reported in the CCADB; specific CCADB revocation fields, candidate-report state, or manual-addition rationale are not stated.

External cause

Unknown / not stated; the thread only says the entries were based on revoked intermediate certificates reported in CCADB and does not cite a separate compliance incident, root program report, m.d.s.p. thread, or CA closure.

Confidence

Explicit in OneCRL thread · 0.98

Chronology

2026-03-05ccadb2onercl bot opened the bug and proposed 44 OneCRL additions based on revoked intermediate certificates in CCADB.
2026-03-05Ben Wilson confirmed the 44 entries were correct and ready for production.
2026-03-10David Keeler approved the changes in production.
2026-03-11Ben Wilson verified the 44 CA certificates were contained in OneCRL.

Bug 2021383 crt.sh

AI-generated from the OneCRL record and linked Bugzilla thread. Mozilla and CCADB records remain authoritative.

Status	Name	Issuer	Serial	CCADB	Modified
disabled	—	C=US, O=SecureTrust Corporation, CN=SecureTrust CA	`076B9C83A6F816DB07DE81EF75D6BAF8EA803D`	SecureTrust CA SSL.com	2026-03-10
disabled	—	C=US, O=SecureTrust Corporation, CN=SecureTrust CA	`076B9C83A240FE8AB30D8E895D1F447D16990E`	SecureTrust CA SSL.com	2026-03-10
disabled	—	C=US, ST=Illinois, L=Chicago, O=Trustwave Holdings, Inc., CN=Trustwave Global ECC P256 Certification Authority	`06CE82D9A8B57C104843994DACD79E28633E5F`	Trustwave Global ECC P256 Certification Authority SSL.com	2026-03-10
disabled	—	C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Global Root G2	`01A66577E2755575D4EDDA5F06E741D1`	DigiCert Global Root G2 DigiCert	2026-03-10
disabled	—	C=US, ST=Illinois, L=Chicago, O=Trustwave Holdings, Inc., CN=Trustwave Global ECC P256 Certification Authority	`07CE18ECF456C9AAF7271E5BE9BA26CF263135`	Trustwave Global ECC P256 Certification Authority SSL.com	2026-03-10
disabled	—	C=JP, O=SECOM Trust Systems CO.,LTD., CN=Security Communication ECC RootCA1	`1DAFAA492A280D4D6FFA6ADDFCFB3A1A`	Security Communication ECC RootCA1 SECOM Trust Systems Co., Ltd.	2026-03-10
disabled	—	C=US, O=SecureTrust Corporation, CN=SecureTrust CA	`076B9C83A4ACA8AF581CBEF232CAD142A73519`	SecureTrust CA SSL.com	2026-03-10
disabled	—	C=US, ST=Illinois, L=Chicago, O=Trustwave Holdings, Inc., CN=Trustwave Global Certification Authority	`06CE82D99FB3B180C281020314A2D1C7640017`	Trustwave Global Certification Authority SSL.com	2026-03-10
disabled	—	C=US, ST=Illinois, L=Chicago, O=Trustwave Holdings, Inc., CN=Trustwave Global Certification Authority	`07CE18ECEFEE27577C1AA3A62888728009963E`	Trustwave Global Certification Authority SSL.com	2026-03-10
disabled	—	C=US, O=SecureTrust Corporation, CN=SecureTrust CA	`06F1EC00E31E46D341B2B2633CE480D915F81D`	SecureTrust CA SSL.com	2026-03-10
disabled	—	C=US, O=SecureTrust Corporation, CN=SecureTrust CA	`07CE97C57A28C57B5C9FFC53FE69E8639DB872`	SecureTrust CA SSL.com	2026-03-10
disabled	—	C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Global Root G2	`0C40B9C958224B341C912C34C5742135`	DigiCert Global Root G2 DigiCert	2026-03-10
disabled	—	C=US, ST=Illinois, L=Chicago, O=Trustwave Holdings, Inc., CN=Trustwave Global ECC P256 Certification Authority	`07CE18ECFAE6EFEA7DEF67DFDAC0959553D47C`	Trustwave Global ECC P256 Certification Authority SSL.com	2026-03-10
disabled	—	C=US, ST=Illinois, L=Chicago, O=Trustwave Holdings, Inc., CN=Trustwave Global ECC P256 Certification Authority	`06CE82D9AF531423847B85FB677932AAF80508`	Trustwave Global ECC P256 Certification Authority SSL.com	2026-03-10
disabled	—	C=US, O=SecureTrust Corporation, CN=SecureTrust CA	`07EE24A9C4458B9F79BCF9808896598782A472`	SecureTrust CA SSL.com	2026-03-10
disabled	—	C=US, ST=Illinois, L=Chicago, O=Trustwave Holdings, Inc., CN=Trustwave Global Certification Authority	`07CE18ECF8D5BFF93EEC9391A80D24994C437A`	Trustwave Global Certification Authority SSL.com	2026-03-10
disabled	—	C=US, ST=Illinois, L=Chicago, O=Trustwave Holdings, Inc., CN=Trustwave Global ECC P384 Certification Authority	`07CE18ECF57F3863D8CC87419CB7DF49C10898`	Trustwave Global ECC P384 Certification Authority SSL.com	2026-03-10
disabled	—	C=US, ST=Illinois, L=Chicago, O=Trustwave Holdings, Inc., CN=Trustwave Global ECC P384 Certification Authority	`06CE82D9B07A17CC5376157813389A2930A44A`	Trustwave Global ECC P384 Certification Authority SSL.com	2026-03-10
disabled	—	C=US, ST=Illinois, L=Chicago, O=Trustwave Holdings, Inc., CN=Trustwave Global Certification Authority	`07CE18ED0549DB4432F95E8BA03C9D78446EA9`	Trustwave Global Certification Authority SSL.com	2026-03-10
disabled	—	C=CN, O=UniTrust, CN=UCA Global G2 Root	`62CEFC700FE3CA60B3D51FF162DCA400`	UCA Global G2 Root Asseco Data Systems S.A.	2026-03-10
disabled	—	C=US, ST=Illinois, L=Chicago, O=Trustwave Holdings, Inc., CN=Trustwave Global ECC P384 Certification Authority	`06CE82D9A9D8E29837EF90BEAF59DC6551BED6`	Trustwave Global ECC P384 Certification Authority SSL.com	2026-03-10
disabled	—	C=US, ST=Illinois, L=Chicago, O=Trustwave Holdings, Inc., CN=Trustwave Global ECC P256 Certification Authority	`06CE82D9A20A3797CD878EB3DAA41D08680AF7`	Trustwave Global ECC P256 Certification Authority SSL.com	2026-03-10
disabled	—	C=US, ST=Illinois, L=Chicago, O=Trustwave Holdings, Inc., CN=Trustwave Global ECC P384 Certification Authority	`07CE18ED01FA2FAC388ED11C045149591CD809`	Trustwave Global ECC P384 Certification Authority SSL.com	2026-03-10
disabled	—	C=US, O=IdenTrust, CN=IdenTrust Commercial Root CA 1	`40019BFC48428234EDEE4C99E0357073`	IdenTrust Commercial Root CA 1 IdenTrust Services, LLC	2026-03-10
disabled	—	C=US, ST=Illinois, L=Chicago, O=Trustwave Holdings, Inc., CN=Trustwave Global Certification Authority	`06CE82D9AD30465CF22697F246B101EC92953B`	Trustwave Global Certification Authority SSL.com	2026-03-10
disabled	—	C=US, O=SecureTrust Corporation, CN=Secure Global CA	`07CE18ED0BD129A5CF75507E9AC79366260CB1`	Secure Global CA SSL.com	2026-03-10
disabled	—	C=US, ST=Illinois, L=Chicago, O=Trustwave Holdings, Inc., CN=Trustwave Global ECC P256 Certification Authority	`07CE18ED00D45857AFED9E4038180AC1ACBA0F`	Trustwave Global ECC P256 Certification Authority SSL.com	2026-03-10
disabled	—	C=ES, CN=Autoridad de Certificacion Firmaprofesional CIF A62634068	`295458DABF4A3AE3E3F4A8999D48B5FB`	Autoridad de Certificacion Firmaprofesional CIF A62634068 Autoridad de Certificacion Firmaprofesional	2026-03-10
disabled	—	C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Global Root G2	`0EAB72B62946450C62DE692C8265048A`	DigiCert Global Root G2 DigiCert	2026-03-10
disabled	—	C=US, ST=Illinois, L=Chicago, O=Trustwave Holdings, Inc., CN=Trustwave Global Certification Authority	`06CE82D9A69703AEFE5D37D18858C74026B004`	Trustwave Global Certification Authority SSL.com	2026-03-10
disabled	—	C=US, O=SecureTrust Corporation, CN=SecureTrust CA	`06F1EC00E80B1BAF9870A7C4B6CBE401A32D68`	SecureTrust CA SSL.com	2026-03-10
disabled	—	C=CN, O=UniTrust, CN=UCA Global G2 Root	`63805182BF2320DEF7EC9AAEFB964C61`	UCA Global G2 Root Asseco Data Systems S.A.	2026-03-10
disabled	—	C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Global Root G2	`0F5BAD3B8D3E07D559529B7CFB6A30B0`	DigiCert Global Root G2 DigiCert	2026-03-10
disabled	—	C=US, ST=Illinois, L=Chicago, O=Trustwave Holdings, Inc., CN=Trustwave Global ECC P384 Certification Authority	`06CE82D9A331594530006781829387E40DBCB6`	Trustwave Global ECC P384 Certification Authority SSL.com	2026-03-10
disabled	—	C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Global Root G3	`0C3D2F09209D76D81B29FCB3EEA66C06`	DigiCert Global Root G3 DigiCert	2026-03-10
disabled	—	C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Global Root G3	`05022B8F0977569D822CB0B4B74D5555`	DigiCert Global Root G3 DigiCert	2026-03-10
disabled	—	C=JP, O=SECOM Trust Systems CO.,LTD., OU=Security Communication RootCA2	`22B9B154F33C5E5E00`	Security Communication RootCA2 SECOM Trust Systems CO., LTD.	2026-03-10
disabled	—	C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Global Root G3	`0950BBDE2B07B8BFA44EB03D8174E5A8`	DigiCert Global Root G3 DigiCert	2026-03-10
disabled	—	C=US, ST=Illinois, L=Chicago, O=Trustwave Holdings, Inc., CN=Trustwave Global Certification Authority	`07BC0B4AFE82F017DB7966A4589A560B398CA1`	Trustwave Global Certification Authority SSL.com	2026-03-10
disabled	—	C=US, ST=Illinois, L=Chicago, O=Trustwave Holdings, Inc., CN=Trustwave Global ECC P384 Certification Authority	`07CE18ED087C72EB533E0CDA0843A79CD4BF0C`	Trustwave Global ECC P384 Certification Authority SSL.com	2026-03-10
disabled	—	C=US, ST=Illinois, L=Chicago, O=Trustwave Holdings, Inc., CN=Trustwave Global ECC P384 Certification Authority	`07CE18ECFC0B3372F33E1906C7BF21870E9B38`	Trustwave Global ECC P384 Certification Authority SSL.com	2026-03-10
disabled	—	C=US, ST=Illinois, L=Chicago, O=Trustwave Holdings, Inc., CN=Trustwave Global ECC P256 Certification Authority	`07CE18ED075A180CE72A7E3446FEA173E1E749`	Trustwave Global ECC P256 Certification Authority SSL.com	2026-03-10
disabled	—	C=US, O=SecureTrust Corporation, CN=SecureTrust CA	`06F1EC00E58E9ADD372C871D25843FDAB852D9`	SecureTrust CA SSL.com	2026-03-10
disabled	—	C=US, ST=Illinois, L=Chicago, O=Trustwave Holdings, Inc., CN=Trustwave Global Certification Authority	`07CE18ECFEC41AB34D32D4C870F19DA16397B2`	Trustwave Global Certification Authority SSL.com	2026-03-10

Raw Remote Settings Record

{
    "schema": 1772730081783,
    "details": {
        "bug": "https://bugzilla.mozilla.org/show_bug.cgi?id=2021383",
        "who": "",
        "why": "",
        "name": "",
        "created": ""
    },
    "enabled": false,
    "issuerName": "MGExCzAJBgNVBAYTAlVTMRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5jb20xIDAeBgNVBAMTF0RpZ2lDZXJ0IEdsb2JhbCBSb290IEcy",
    "serialNumber": "D1utO40+B9VZUpt8+2owsA==",
    "id": "53d9308c-0df2-476a-95af-4f06e4b8d253",
    "last_modified": 1773176482037
}