OneCRL Entry
6fc15a27-f22e-414b-a8c7-93be30e2ff91
Revocation Entry
- Status
- disabled
- Serial
00CF66BD77FE43CBDC2ED6840F2EC9B58B- Last Modified
- 2025-07-14 21:43:28 UTC
- Schema
- 1752253362313
Issuer
- DN
- C=GB, ST=Greater Manchester, L=Salford, O=Comodo CA Limited, CN=AAA Certificate Services
- DN SHA-256
92c66812fe7e023f22aa00eca6fd1c44f9a73fe76105965fc6b669d1d62a6f1b- Issuer DER
MHsxCzAJBgNVBAYTAkdCMRswGQYDVQQIDBJHcmVhdGVyIE1hbmNoZXN0ZXIxEDAOBgNVBAcMB1NhbGZvcmQxGjAYBgNVBAoMEUNvbW9kbyBDQSBMaW1pdGVkMSEwHwYDVQQDDBhBQUEgQ2VydGlmaWNhdGUgU2VydmljZXM=
Context
- Bugzilla
- 1976939
- Action
- On 2025-07-11, the ccadb2onercl bot opened the bug and proposed adding 16 issuer/serial OneCRL entries derived from CCADB-reported revoked intermediate certificates. Ben Wilson confirmed the decoded list on 2025-07-12 and approved it for staging review. Dana Keeler approved the batch in staging on 2025-07-14 after checker output showed 16 changes waiting in production, and later approved it in production the same day. Ben Wilson verified the change in Firefox Nightly and Beta profiles on 2025-07-15.
- Confidence
- Explicit in OneCRL thread · 0.97
CCADB Link
- Issuer CA
- AAA Certificate Services
- CA Owner
- Sectigo
AI Summary
Generated 2026-06-30 11:13 UTC · Model: gpt-5.4Bug 1976939 was created by the Common CA Database to OneCRL Bot on 2025-07-11 to add OneCRL entries based on revoked intermediate certificates reported in the CCADB. The bug proposed 16 issuer-and-serial entries spanning certificates associated with OISTE WISeKey, UniTrust, GoDaddy, Starfield, Sectigo/Comodo, and Actalis. Ben Wilson decoded and confirmed the entries, stated they were the correct entries to add to OneCRL, and said TLS Canary was not needed for this batch. Review then proceeded through staging and production approval, with Dana Keeler reporting 16 changes waiting in production and later approving them in production. The resulting OneCRL records in the provided entry list are all disabled=false? No; they are enabled set to false, matching OneCRL blocklist-style entries as stored in the dataset. The thread explicitly ties qualification to revoked intermediate certificates reported in CCADB, but it does not state per-certificate revocation reasons, revocation dates, or candidate-report field values. The thread also does not cite any external compliance incident, mailing-list discussion, or CA closure as the cause of these revocations.
On 2025-07-11, the ccadb2onercl bot opened the bug and proposed adding 16 issuer/serial OneCRL entries derived from CCADB-reported revoked intermediate certificates. Ben Wilson confirmed the decoded list on 2025-07-12 and approved it for staging review. Dana Keeler approved the batch in staging on 2025-07-14 after checker output showed 16 changes waiting in production, and later approved it in production the same day. Ben Wilson verified the change in Firefox Nightly and Beta profiles on 2025-07-15.
Explicitly stated as revoked intermediate certificates reported in the CCADB; no per-certificate revocation reason, revocation date, candidate report state, or manual-addition explanation is stated in the thread.
unknown
Explicit in OneCRL thread · 0.97
- 2025-07-11ccadb2onercl bot filed Bug 1976939 stating it was adding entries to OneCRL based on revoked intermediate certificates reported in the CCADB.
- 2025-07-11The bot attached the issuer/serial list, proposed OneCRL additions, and a decoded attachment.
- 2025-07-12Ben Wilson posted decoded entries for the 16 certificates.
- 2025-07-12Ben Wilson stated these were the correct entries to add to OneCRL and that TLS Canary was not needed.
- 2025-07-14Dana Keeler reported checker output showing 16 changes waiting in production and approved the batch in staging.
- 2025-07-14Ben Wilson reconfirmed the production list matched the earlier attachment.
- 2025-07-14Dana Keeler approved the changes in production.
- 2025-07-15Ben Wilson verified the change in Firefox Nightly and Beta Release profiles.
AI-generated from the OneCRL record and linked Bugzilla thread. Mozilla and CCADB records remain authoritative.
Raw Remote Settings Record
{
"schema": 1752253362313,
"details": {
"bug": "https://bugzilla.mozilla.org/show_bug.cgi?id=1976939",
"who": "",
"why": "",
"name": "",
"created": ""
},
"enabled": false,
"issuerName": "MHsxCzAJBgNVBAYTAkdCMRswGQYDVQQIDBJHcmVhdGVyIE1hbmNoZXN0ZXIxEDAOBgNVBAcMB1NhbGZvcmQxGjAYBgNVBAoMEUNvbW9kbyBDQSBMaW1pdGVkMSEwHwYDVQQDDBhBQUEgQ2VydGlmaWNhdGUgU2VydmljZXM=",
"serialNumber": "AM9mvXf+Q8vcLtaEDy7JtYs=",
"id": "6fc15a27-f22e-414b-a8c7-93be30e2ff91",
"last_modified": 1752529408896
}