OneCRL Entry
5576448f-2e6b-4c82-a8f0-dbf690002993
Revocation Entry
- Status
- disabled
- Serial
1CD786631EC0CFBA0B52FA9B5E0287B1- Last Modified
- 2023-12-07 22:58:33 UTC
- Schema
- 1701882093343
Issuer
- DN
- C=DE, O=T-Systems Enterprise Services GmbH, OU=T-Systems Trust Center, CN=T-TeleSec GlobalRoot Class 3
- DN SHA-256
6e247c1efca52eae4cbabdf04561dbb7e5c80ca02bfb2e9fe7d074479b3edd6a- Issuer DER
MIGCMQswCQYDVQQGEwJERTErMCkGA1UECgwiVC1TeXN0ZW1zIEVudGVycHJpc2UgU2VydmljZXMgR21iSDEfMB0GA1UECwwWVC1TeXN0ZW1zIFRydXN0IENlbnRlcjElMCMGA1UEAwwcVC1UZWxlU2VjIEdsb2JhbFJvb3QgQ2xhc3MgMw==
Context
- Bugzilla
- 1868611
- Action
- 22 OneCRL issuer/serial entries were proposed by the Common CA Database to OneCRL Bot on 2023-12-06 and approved for production by Dana Keeler on 2023-12-07 after Ben Wilson confirmed they were the correct entries to add; Ben Wilson verified them in Firefox profiles on 2023-12-08.
- Confidence
- Explicit in OneCRL thread · 0.98
CCADB Link
- Issuer CA
- T-TeleSec GlobalRoot Class 3
- CA Owner
- Deutsche Telekom Security GmbH
AI Summary
Generated 2026-06-30 11:41 UTC · Model: gpt-5.4Bug 1868611 is a batch OneCRL case created by the Common CA Database to OneCRL Bot on 2023-12-06 for revoked intermediate certificates reported in the CCADB. The bug explicitly states that entries were being added to OneCRL based on revoked intermediates in CCADB, and the attached proposed additions correspond to 22 issuer/serial pairs. Ben Wilson explicitly confirmed on 2023-12-06 that these were the correct entries to add and said TLS Canary was not needed for this batch. Dana Keeler later validated the staging/production comparison output showing 22 changes waiting in production and then approved the production change on 2023-12-07. Ben Wilson verified on 2023-12-08 that the changes were present in Firefox Nightly and Release profiles. The local OneCRL entry data shows all listed records tied to this bug and last modified on 2023-12-07, with enabled set to false in the provided snapshot. The thread does not state per-certificate revocation reasons, revocation dates, or any external compliance incident or CA shutdown that caused the underlying revocations.
22 OneCRL issuer/serial entries were proposed by the Common CA Database to OneCRL Bot on 2023-12-06 and approved for production by Dana Keeler on 2023-12-07 after Ben Wilson confirmed they were the correct entries to add; Ben Wilson verified them in Firefox profiles on 2023-12-08.
Explicitly stated as revoked intermediate certificates reported in the CCADB; no per-entry revocation reason, revocation date, or candidate-report field details are stated in the thread.
unknown
Explicit in OneCRL thread · 0.98
- 2023-12-06ccadb2onercl bot filed Bug 1868611 stating entries were being added to OneCRL based on revoked intermediate certificates reported in the CCADB.
- 2023-12-06Bot attached line-delimited issuer/serial pairs, proposed OneCRL additions, and decoded entry details.
- 2023-12-06Ben Wilson confirmed these were the correct entries to add and said TLS Canary was not needed.
- 2023-12-07Dana Keeler reported staging/production comparison output showing 22 changes waiting in production.
- 2023-12-07Ben Wilson reviewed the checker output and asked to proceed with Kinto Production approval.
- 2023-12-07Dana Keeler approved the changes in production.
- 2023-12-08Ben Wilson verified the changes in Firefox Nightly and Release profiles.
AI-generated from the OneCRL record and linked Bugzilla thread. Mozilla and CCADB records remain authoritative.
Raw Remote Settings Record
{
"schema": 1701882093343,
"details": {
"bug": "https://bugzilla.mozilla.org/show_bug.cgi?id=1868611",
"who": "",
"why": "",
"name": "",
"created": ""
},
"enabled": false,
"issuerName": "MIGCMQswCQYDVQQGEwJERTErMCkGA1UECgwiVC1TeXN0ZW1zIEVudGVycHJpc2UgU2VydmljZXMgR21iSDEfMB0GA1UECwwWVC1TeXN0ZW1zIFRydXN0IENlbnRlcjElMCMGA1UEAwwcVC1UZWxlU2VjIEdsb2JhbFJvb3QgQ2xhc3MgMw==",
"serialNumber": "HNeGYx7Az7oLUvqbXgKHsQ==",
"id": "5576448f-2e6b-4c82-a8f0-dbf690002993",
"last_modified": 1701989913592
}