← OneCRL Browser

OneCRL Entry

6263a3b5-3a6b-4fad-93f5-7a69c61562a7

Revocation Entry

Status: disabled
Serial: 400174E092652FC60BA981DF7F4D9298
Last Modified: 2020-11-25 18:27:36 UTC
Schema: 1606237254204

Issuer

DN: O=Digital Signature Trust Co., CN=DST Root CA X3
DN SHA-256: aa847b4a4a2bb10d825a0a68e1051183ea33b1d304c5eac6e477b23ad3eae4f6
Issuer DER: MD8xJDAiBgNVBAoTG0RpZ2l0YWwgU2lnbmF0dXJlIFRydXN0IENvLjEXMBUGA1UEAxMORFNUIFJvb3QgQ0EgWDM=

Context

Bugzilla: 1679183
Action: 15 revoked intermediate-certificate entries were added to OneCRL; initiated by c**********l@bots.tld on 2020-11-24, with stage approval by j**********c@insufficient.coffee on 2020-11-25 18:14:44Z and production approval on 2020-11-25 18:28:46Z.
Confidence: Explicit in OneCRL thread · 0.98

CCADB Link

Issuer CA: DST Root CA X3
CA Owner: IdenTrust Services, LLC

AI Summary

Generated 2026-06-30 11:41 UTC · Model: gpt-5.4-mini

This bug added 15 OneCRL entries for revoked intermediate certificates reported in the CCADB. The additions were initiated by the ccadb2onercl bot on 2020-11-24, which created the bug and attached the proposed issuer/serial pairs and decoded entry list. Kathleen Wilson explicitly confirmed the entries were correct and asked JC to run the OneCRL entry checker and approve the changes at stage and production. JC then approved the changes at stage on 2020-11-25 and at production later the same day. The thread does not state a specific CCADB revocation field or candidate-report state beyond the bot’s statement that the entries were based on revoked intermediates reported in CCADB. The thread also does not identify a specific external compliance incident or CA closure; it only notes that these revocations had already been added to other root store equivalents of OneCRL.

OneCRL action

15 revoked intermediate-certificate entries were added to OneCRL; initiated by c**********l@bots.tld on 2020-11-24, with stage approval by j**********c@insufficient.coffee on 2020-11-25 18:14:44Z and production approval on 2020-11-25 18:28:46Z.

CCADB trigger

Explicitly stated trigger: revoked intermediate certificates reported in the CCADB; no specific CCADB revocation field, candidate-report state, or manual-addition rationale is stated.

External cause

Unknown / not stated; no specific compliance incident, root program report, m.d.s.p. thread, or CA closure is identified in the thread.

Confidence

Explicit in OneCRL thread · 0.98

Chronology

2020-11-24ccadb2onercl bot created bug 1679183 and announced OneCRL additions based on revoked intermediates reported in CCADB.
2020-11-24Bot attached the proposed OneCRL issuer/serial pairs and decoded entry list.
2020-11-24Kathleen Wilson confirmed the entries were correct and requested checker/approval steps.
2020-11-25JC approved the changes at stage.
2020-11-25JC approved the changes at production.

Bug 1679183

AI-generated from the OneCRL record and linked Bugzilla thread. Mozilla and CCADB records remain authoritative.

Status	Name	Issuer	Serial	CCADB	Modified
disabled	—	C=BM, O=QuoVadis Limited, OU=Root Certification Authority, CN=QuoVadis Root Certification Authority	`1B12F441BBC6DB36F167384919C95B0B16245C47`	QuoVadis Root Certification Authority DigiCert	2020-11-25
disabled	—	O=Digital Signature Trust Co., CN=DST Root CA X3	`400174E0927439B8ED0BAE830EE07F48`	DST Root CA X3 IdenTrust Services, LLC	2020-11-25
disabled	—	O=Digital Signature Trust Co., CN=DST Root CA X3	`400174E092652FC60BA981DF7F4D9298`	DST Root CA X3 IdenTrust Services, LLC	2020-11-25
disabled	—	C=IT, L=Milan, O=Actalis S.p.A./03358520967, CN=Actalis Authentication Root CA	`6E898B681DB091FC533C8CD63FD800E7`	Actalis Authentication Root CA Actalis	2020-11-25
disabled	—	C=BM, O=QuoVadis Limited, CN=QuoVadis Enterprise Trust CA 2 G3	`2F03B74077FE58434F3613C3B38D5ABB52CDD30E`	QuoVadis Enterprise Trust CA 2 G3 DigiCert	2020-11-25
disabled	—	C=BM, O=QuoVadis Limited, CN=QuoVadis Root CA 2	`41DE06035455EE98C82694A090A946304F2EFF87`	QuoVadis Root CA 2 DigiCert	2020-11-25
disabled	—	C=BM, O=QuoVadis Limited, CN=QuoVadis Root CA 2	`43A90E0F1875301023583E27E8FB80B9EDC64B0E`	QuoVadis Root CA 2 DigiCert	2020-11-25
disabled	—	C=BM, O=QuoVadis Limited, CN=QuoVadis Enterprise Trust CA 2 G3	`36AF9B7895098D1894844480BB593B93A674453D`	QuoVadis Enterprise Trust CA 2 G3 DigiCert	2020-11-25
disabled	—	C=IT, L=Milan, O=Actalis S.p.A./03358520967, CN=Actalis Authentication Root CA	`45E78CA5F5FBD35E0A6C1733F818BB54`	Actalis Authentication Root CA Actalis	2020-11-25
disabled	—	C=BM, O=QuoVadis Limited, CN=QuoVadis Root CA 2	`73DA5AFA23D93FBA842E0A20F401C9D86E24FC5D`	QuoVadis Root CA 2 DigiCert	2020-11-25
disabled	—	OU=GlobalSign Root CA - R3, O=GlobalSign, CN=GlobalSign	`01EE5F224E59C4D16E6CF53163`	GlobalSign GlobalSign nv-sa	2020-11-25
disabled	—	C=IT, L=Milan, O=Actalis S.p.A./03358520967, CN=Actalis Authentication Root CA	`614AE08B40C7B311D85EDE3D934540DA`	Actalis Authentication Root CA Actalis	2020-11-25
disabled	—	C=BM, O=QuoVadis Limited, CN=QuoVadis Root CA 3	`0AF85CFA8FBEA55C3D00BE8DF4DD30E83EF28244`	QuoVadis Root CA 3 DigiCert	2020-11-25
disabled	—	C=BM, O=QuoVadis Limited, CN=QuoVadis Enterprise Trust CA 2 G3	`18917D9BA1A239A92A20D96D7D76D942DC4A1065`	QuoVadis Enterprise Trust CA 2 G3 DigiCert	2020-11-25
disabled	—	C=BM, O=QuoVadis Limited, CN=QuoVadis Root CA 2	`7669C040A5D25D8A6D4EF75BCB144E52A390589D`	QuoVadis Root CA 2 DigiCert	2020-11-25

Raw Remote Settings Record

{
    "schema": 1606237254204,
    "details": {
        "bug": "https://bugzilla.mozilla.org/show_bug.cgi?id=1679183",
        "who": "",
        "why": "",
        "name": "",
        "created": ""
    },
    "enabled": false,
    "issuerName": "MD8xJDAiBgNVBAoTG0RpZ2l0YWwgU2lnbmF0dXJlIFRydXN0IENvLjEXMBUGA1UEAxMORFNUIFJvb3QgQ0EgWDM=",
    "serialNumber": "QAF04JJlL8YLqYHff02SmA==",
    "id": "6263a3b5-3a6b-4fad-93f5-7a69c61562a7",
    "last_modified": 1606328856906
}