Revoked intermediates
6ff3473b-bd64-4b79-98c4-4622661c8e80
Revocation Entry
- Status
- enabled
- Serial
00CB- Last Modified
- 2017-05-10 23:23:40 UTC
- Schema
- 1552493017141
Issuer
- DN
- C=US, O=Wells Fargo WellsSecure, OU=Wells Fargo Bank NA, CN=WellsSecure Public Root Certificate Authority
- DN SHA-256
331d8724a7aff05221253b01ca81b107533dd2ffcd7b3ec54f5fffbe78276125- Issuer DER
MIGFMQswCQYDVQQGEwJVUzEgMB4GA1UECgwXV2VsbHMgRmFyZ28gV2VsbHNTZWN1cmUxHDAaBgNVBAsME1dlbGxzIEZhcmdvIEJhbmsgTkExNjA0BgNVBAMMLVdlbGxzU2VjdXJlIFB1YmxpYyBSb290IENlcnRpZmljYXRlIEF1dGhvcml0eQ==
Context
- Bugzilla
- 1343305
- Action
- A bulk set of revoked intermediate certificate entries was added to the OneCRL 'Revoked intermediates' collection for multiple CA owners and issuers. The action was initiated in Bugzilla by Mark Goodwin, with explicit confirmation from Kathleen Wilson that the entries were correct and later production approval recorded by j**********c@insufficient.coffee on 2017-05-02. Mark Goodwin stated that crypto engineering was responsible for staging and adding the blocks. The local OneCRL records tied to this bug show detail_created of 2017-05-10T22:53:40Z and last_modified_at timestamps from 2017-05-10T23:19:37Z through 2017-05-10T23:24:38Z.
- Confidence
- Explicit in OneCRL thread · 0.96
CCADB Link
- Issuer CA
- WellsSecure Public Root Certificate Authority
- CA Owner
- Wells Fargo Bank N.A.
AI Summary
Generated 2026-06-30 11:42 UTC · Model: gpt-5.4Bug 1343305 tracks a bulk addition of public CA intermediate revocations to Mozilla OneCRL. The bug was filed by Mark Goodwin on 2017-02-28 with an attachment requesting blocklist entries, explicitly stating they should be added following approval from Kathleen Wilson and Matt. Kathleen Wilson confirmed on 2017-02-28 that the listed entries were the correct entries to add to OneCRL, and a canary run was later reported as showing no regressions on top sites. Mark Goodwin stated on 2017-05-02 that the changes were staged on the production Kinto instance and that crypto engineering was then responsible for staging and adding the blocks. Approval at production Kinto was recorded on 2017-05-02, and the local OneCRL records show the entries were created on 2017-05-10 and last modified between 23:19 and 23:24 UTC that day. The thread also documents post-deployment data-format issues involving missing base64 padding and missing created timestamps, which were later fixed. Kathleen Wilson confirmed on 2017-05-12 that revocations.txt on her system had updated and contained the new entries.
A bulk set of revoked intermediate certificate entries was added to the OneCRL 'Revoked intermediates' collection for multiple CA owners and issuers. The action was initiated in Bugzilla by Mark Goodwin, with explicit confirmation from Kathleen Wilson that the entries were correct and later production approval recorded by j**********c@insufficient.coffee on 2017-05-02. Mark Goodwin stated that crypto engineering was responsible for staging and adding the blocks. The local OneCRL records tied to this bug show detail_created of 2017-05-10T22:53:40Z and last_modified_at timestamps from 2017-05-10T23:19:37Z through 2017-05-10T23:24:38Z.
Explicitly described as 'CCADB entries generated 2017-02-28' and filed as a request to add the listed blocklist entries. The thread does not state specific CCADB revocation fields, revocation reasons, revocation dates, or candidate-report status for individual certificates.
Unknown / not stated. The thread does not cite a specific external compliance incident, CA closure, root program report, or m.d.s.p. discussion as the reason these certificates qualified for OneCRL.
Explicit in OneCRL thread · 0.96
- 2017-02-28Mark Goodwin filed Bug 1343305 and requested addition of the attached blocklist entries following approval from Kathleen and Matt.
- 2017-02-28Kathleen Wilson confirmed that the listed entries were the correct entries to add to OneCRL.
- 2017-03-03A canary run was reported as showing no regressions on top sites.
- 2017-05-02Mark Goodwin said the changes were staged on the production Kinto instance and that crypto engineering was now responsible for staging and adding these blocks.
- 2017-05-02Production Kinto approval was recorded at 20:25:20 UTC.
- 2017-05-10The local OneCRL records for this bug show the entries created at 22:53:40Z.
- 2017-05-10The local OneCRL records show last_modified_at timestamps between 23:19:37Z and 23:24:38Z.
- 2017-05-10Mark Goodwin said missing base64 padding and missing created timestamps had been fixed and updated data should appear on the CDN soon.
- 2017-05-12Kathleen Wilson confirmed that revocations.txt on her system had updated and contained the new entries.
AI-generated from the OneCRL record and linked Bugzilla thread. Mozilla and CCADB records remain authoritative.
Raw Remote Settings Record
{
"schema": 1552493017141,
"details": {
"bug": "https://bugzilla.mozilla.org/show_bug.cgi?id=1343305",
"who": ".",
"why": ".",
"name": "Revoked intermediates",
"created": "2017-05-10T22:53:40Z"
},
"enabled": true,
"issuerName": "MIGFMQswCQYDVQQGEwJVUzEgMB4GA1UECgwXV2VsbHMgRmFyZ28gV2VsbHNTZWN1cmUxHDAaBgNVBAsME1dlbGxzIEZhcmdvIEJhbmsgTkExNjA0BgNVBAMMLVdlbGxzU2VjdXJlIFB1YmxpYyBSb290IENlcnRpZmljYXRlIEF1dGhvcml0eQ==",
"serialNumber": "AMs=",
"id": "6ff3473b-bd64-4b79-98c4-4622661c8e80",
"last_modified": 1494458620210
}