OneCRL Entry
63273f3c-6d24-447c-86e9-b7f0ffe1c015
Revocation Entry
- Status
- disabled
- Serial
52E843B1967E54CEA0592C37A16F9A94- Last Modified
- 2023-05-24 20:22:57 UTC
- Schema
- 1684515700404
Issuer
- DN
- C=CN, O=UniTrust, CN=UCA Extended Validation Root
- DN SHA-256
25c7eef7bf1e3efe3b99e272f07e204b85f966d3aada0767952e73da652dc11b- Issuer DER
MEcxCzAJBgNVBAYTAkNOMREwDwYDVQQKDAhVbmlUcnVzdDElMCMGA1UEAwwcVUNBIEV4dGVuZGVkIFZhbGlkYXRpb24gUm9vdA==
Context
- Bugzilla
- 1834089
- Action
- A batch of revoked intermediate certificate issuer/serial entries was proposed for addition to OneCRL by the Common CA Database to OneCRL Bot on 2023-05-19T17:01:27Z, reviewed by Kathleen Wilson, approved by Dana Keeler at Kinto Staging on 2023-05-23 and Kinto Production on 2023-05-24, and verified as present in Firefox profiles by Kathleen Wilson on 2023-05-24.
- Confidence
- Explicit in OneCRL thread · 0.98
CCADB Link
AI Summary
Generated 2026-06-30 11:13 UTC · Model: gpt-5.4Bug 1834089 is a batch OneCRL case created by the Common CA Database to OneCRL Bot on 2023-05-19. The bot stated it was adding entries to OneCRL based on revoked intermediate certificates reported in the CCADB. The proposed batch contained multiple issuer-and-serial revocation entries spanning several CA owners, and the local OneCRL entry list shows 29 disabled records associated with this bug after later state changes. Kathleen Wilson explicitly confirmed on 2023-05-22 that these were the correct entries to add to OneCRL and said TLS Canary was not needed for this batch. Dana Keeler approved the changes at Kinto Staging on 2023-05-23 and in production on 2023-05-24. Kathleen Wilson then verified on 2023-05-24 that the entries had been added to OneCRL in Firefox Nightly and Production profiles. The thread does not state per-certificate CCADB revocation reasons, revocation dates, or any external compliance incident or CA closure explaining the underlying revocations.
A batch of revoked intermediate certificate issuer/serial entries was proposed for addition to OneCRL by the Common CA Database to OneCRL Bot on 2023-05-19T17:01:27Z, reviewed by Kathleen Wilson, approved by Dana Keeler at Kinto Staging on 2023-05-23 and Kinto Production on 2023-05-24, and verified as present in Firefox profiles by Kathleen Wilson on 2023-05-24.
Explicitly stated as revoked intermediate certificates reported in the CCADB. No per-entry revocation reason, revocation date, candidate-report state, or manual-addition rationale is stated in the thread.
Unknown; the thread does not cite any related compliance incident, root program report, mailing-list discussion, or CA closure as the reason for the underlying revocations.
Explicit in OneCRL thread · 0.98
- 2023-05-19CCADB to OneCRL Bot filed Bug 1834089 and said it was adding entries to OneCRL based on revoked intermediate certificates reported in the CCADB.
- 2023-05-19Bot attached issuer/serial pairs, proposed OneCRL additions, and decoded entry details.
- 2023-05-22Kathleen Wilson confirmed these were the correct entries to add and said TLS Canary was not needed for this batch.
- 2023-05-23Dana Keeler approved the changes at Kinto Staging.
- 2023-05-24Kathleen Wilson said the changes looked correct and asked to proceed with Kinto Production approval.
- 2023-05-24Dana Keeler approved the changes in production.
- 2023-05-24Kathleen Wilson verified the entries had been added to OneCRL in Firefox Nightly and Production profiles.
AI-generated from the OneCRL record and linked Bugzilla thread. Mozilla and CCADB records remain authoritative.
Raw Remote Settings Record
{
"schema": 1684515700404,
"details": {
"bug": "https://bugzilla.mozilla.org/show_bug.cgi?id=1834089",
"who": "",
"why": "",
"name": "",
"created": ""
},
"enabled": false,
"issuerName": "MEcxCzAJBgNVBAYTAkNOMREwDwYDVQQKDAhVbmlUcnVzdDElMCMGA1UEAwwcVUNBIEV4dGVuZGVkIFZhbGlkYXRpb24gUm9vdA==",
"serialNumber": "UuhDsZZ+VM6gWSw3oW+alA==",
"id": "63273f3c-6d24-447c-86e9-b7f0ffe1c015",
"last_modified": 1684959777318
}