← OneCRL Browser

Symantec test certificates

781f8787-6508-d6aa-c508-13ac2bb0d930

Revocation Entry

Status: enabled
Serial: 3AA436AD5D08493737D3C67FA1083317
Last Modified: 2016-11-28 16:06:00 UTC
Schema: 1552493036467

Issuer

DN: C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)10, CN=VeriSign Class 3 Secure Server CA - G3
DN SHA-256: ce4cc59fa8b7ba12c1595c2bd5af3691e73d4bca0559c47382fb8f727927e900
Issuer DER: MIG1MQswCQYDVQQGEwJVUzEXMBUGA1UEChMOVmVyaVNpZ24sIEluYy4xHzAdBgNVBAsTFlZlcmlTaWduIFRydXN0IE5ldHdvcmsxOzA5BgNVBAsTMlRlcm1zIG9mIHVzZSBhdCBodHRwczovL3d3dy52ZXJpc2lnbi5jb20vcnBhIChjKTEwMS8wLQYDVQQDEyZWZXJpU2lnbiBDbGFzcyAzIFNlY3VyZSBTZXJ2ZXIgQ0EgLSBHMw==

Context

Bugzilla: 1267648
Action: Added many OneCRL CertItem blocklist entries labeled "Symantec test certificates"; requested by Mark Goodwin (:mgoodwin) on 2016-04-26, staged by Andrew Williamson (:eviljeff) on addons-dev, and marked done on production by jthomas on 2016-04-28.
Confidence: Explicit in OneCRL thread · 0.98

CCADB Link

Issuer CA: VeriSign Class 3 Secure Server CA - G3
CA Owner: DigiCert

AI Summary

Generated 2026-06-30 11:48 UTC · Model: gpt-5.4-mini

Mozilla added a large set of OneCRL blocklist entries for Symantec test certificates. The request was initiated by Mark Goodwin in Bugzilla, asking for CertItem blocklist entries for the serial/issuer pairs attached to bug 1214321. Andrew Williamson replied that the certs had been added on addons-dev and that the same script could be run in production after verification. The final Bugzilla comment says the change was done on production on 2016-04-28. The OneCRL records show the entries were created on 2016-04-28 and last modified on 2016-11-28, with detail_name set to "Symantec test certificates" and detail_who/detail_why left as ".". The thread does not state a CCADB revocation field, candidate-report state, or a specific external compliance incident/CA closure as the cause; the reason is therefore not stated in the thread.

OneCRL action

Added many OneCRL CertItem blocklist entries labeled "Symantec test certificates"; requested by Mark Goodwin (:mgoodwin) on 2016-04-26, staged by Andrew Williamson (:eviljeff) on addons-dev, and marked done on production by jthomas on 2016-04-28.

CCADB trigger

Unknown / not stated; the thread only shows manual blocklist entry creation and does not cite a CCADB revocation field or candidate-report state.

External cause

Unknown / not stated; no external compliance incident, root program report, m.d.s.p. thread, or CA closure is cited in the thread.

Confidence

Explicit in OneCRL thread · 0.98

Chronology

2016-04-26Mark Goodwin opened Bug 1267648 requesting CertItem blocklist entries for Symantec test certificates.
2016-04-27Andrew Williamson said the certs had been added on addons-dev using a django-admin shell script.
2016-04-28jthomas reported the entries were done on production.
2016-04-28OneCRL records were created for the Symantec test certificates.
2016-11-28OneCRL records show last_modified_at timestamps for the entries.

Bug 1214321 Bug 1267648 gist.github.com

AI-generated from the OneCRL record and linked Bugzilla thread. Mozilla and CCADB records remain authoritative.

Status	Name	Issuer	Serial	CCADB	Modified
enabled	Symantec test certificates	C=US, O=GeoTrust Inc., OU=Domain Validated SSL, CN=GeoTrust DV SSL CA - G2	`5E17059B683AD7DAEDF12AE8F9AE2B1C`	GeoTrust DV SSL CA - G2 DigiCert	2016-11-28
enabled	Symantec test certificates	C=US, O=GeoTrust Inc., OU=Domain Validated SSL, CN=GeoTrust DV SSL CA - G4	`1F4F`	GeoTrust DV SSL CA - G4 DigiCert	2016-11-28
enabled	Symantec test certificates	C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 3 EV SSL CA - G3	`69C2350852209B0485068539F9A84382`	Symantec Class 3 EV SSL CA - G3 DigiCert	2016-11-28
enabled	Symantec test certificates	C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 3 EV SSL CA - G2	`5152AC11ECE91963954385BD7ACB2D9E`	Symantec Class 3 EV SSL CA - G2 DigiCert	2016-11-28
enabled	Symantec test certificates	C=US, O=GeoTrust Inc., CN=GeoTrust SSL CA - G3	`4544F519E85DD4A2983DFA8E960B29A1`	GeoTrust SSL CA - G3 DigiCert	2016-11-28
enabled	Symantec test certificates	C=US, O=thawte, Inc., OU=Domain Validated SSL, CN=thawte DV SSL CA - G2	`0AA66012F1C0B27CE44FFFD057D2A35F`	thawte DV SSL CA - G2 DigiCert	2016-11-28
enabled	Symantec test certificates	C=US, O=GeoTrust Inc., CN=GeoTrust SHA256 SSL CA	`394BEF56C716D3F365B687E4995F6A9A`	GeoTrust SHA256 SSL CA DigiCert	2016-11-28
enabled	Symantec test certificates	C=US, O=GeoTrust Inc., OU=Domain Validated SSL, CN=GeoTrust DV SSL CA - G3	`3911609828F4EF63637099EBC4E31F40`	GeoTrust DV SSL CA - G3 DigiCert	2016-11-28
enabled	Symantec test certificates	C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)10, CN=VeriSign Class 3 International Server CA - G3	`3A7BD75FBDA6BD423621DFCD3337A09A`	VeriSign Class 3 International Server CA - G3 DigiCert	2016-11-28
enabled	Symantec test certificates	C=US, O=GeoTrust Inc., OU=Domain Validated SSL, CN=GeoTrust DV SSL SHA256 CA	`660C1F12A66706C50DBCDB99EFB15B40`	GeoTrust DV SSL SHA256 CA DigiCert	2016-11-28
enabled	Symantec test certificates	C=US, O=GeoTrust Inc., OU=Domain Validated SSL, CN=GeoTrust DV SSL CA - G3	`2FBF572D53B6666B40BBB1401BC5A6CF`	GeoTrust DV SSL CA - G3 DigiCert	2016-11-28
enabled	Symantec test certificates	C=US, O=thawte, Inc., OU=Domain Validated SSL, CN=thawte DV SSL CA - G2	`054AD88EBBB9A71D729B8414377DD339`	thawte DV SSL CA - G2 DigiCert	2016-11-28
enabled	Symantec test certificates	C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 3 Secure Server CA - G4	`2E77DC51A5C6FE9C55D82A57339F984A`	Symantec Class 3 Secure Server CA - G4 DigiCert	2016-11-28
enabled	Symantec test certificates	C=US, O=GeoTrust Inc., OU=Domain Validated SSL, CN=GeoTrust DV SSL CA - G3	`748B56973D95EB63E18A5AA3F66E8F6E`	GeoTrust DV SSL CA - G3 DigiCert	2016-11-28
enabled	Symantec test certificates	C=US, O=thawte, Inc., OU=Domain Validated SSL, CN=thawte DV SSL CA - G2	`19D5F3E0BD5BE8528D08C1BD273DAD8C`	thawte DV SSL CA - G2 DigiCert	2016-11-28
enabled	Symantec test certificates	C=US, O=thawte, Inc., OU=Domain Validated SSL, CN=thawte DV SSL CA - G2	`208C454B234CEA65AD0A04C6D082F73A`	thawte DV SSL CA - G2 DigiCert	2016-11-28
enabled	Symantec test certificates	C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 3 Secure Server CA - G4	`77C02D2B2990C2438F0C18FE8633F316`	Symantec Class 3 Secure Server CA - G4 DigiCert	2016-11-28
enabled	Symantec test certificates	C=US, O=GeoTrust Inc., OU=Domain Validated SSL, CN=GeoTrust DV SSL CA - G3	`2A3A157D9DDBCBAFA92FC7ECB327CCE8`	GeoTrust DV SSL CA - G3 DigiCert	2016-11-28
enabled	Symantec test certificates	C=US, O=GeoTrust Inc., CN=GeoTrust SSL CA - G2	`49D7A016B2DA1530ACA0C016E440FECC`	GeoTrust SSL CA - G2 DigiCert	2016-11-28
enabled	Symantec test certificates	C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 3 Secure Server CA - G4	`4EEACF3C8E9E8AFB4D78661D3346565D`	Symantec Class 3 Secure Server CA - G4 DigiCert	2016-11-28
enabled	Symantec test certificates	C=US, O=thawte, Inc., CN=thawte SHA256 SSL CA	`50A28AE6897FACA0597210003A766368`	thawte SHA256 SSL CA DigiCert	2016-11-28
enabled	Symantec test certificates	C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 3 Secure Server CA - G4	`50C5305F04F56788EEC90FC23537F89B`	Symantec Class 3 Secure Server CA - G4 DigiCert	2016-11-28
enabled	Symantec test certificates	C=US, O=GeoTrust Inc., OU=Domain Validated SSL, CN=GeoTrust DV SSL CA - G3	`5CB847220EEF3FEB567D1AAFB8A780C7`	GeoTrust DV SSL CA - G3 DigiCert	2016-11-28
enabled	Symantec test certificates	C=US, O=thawte, Inc., OU=Domain Validated SSL, CN=thawte DV SSL CA - G2	`139236CBAB08A279786BE4E695773B7F`	thawte DV SSL CA - G2 DigiCert	2016-11-28
enabled	Symantec test certificates	C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)10, CN=VeriSign Class 3 Secure Server CA - G3	`36F109A1160BDB2BC066B0236C3222A5`	VeriSign Class 3 Secure Server CA - G3 DigiCert	2016-11-28
enabled	Symantec test certificates	C=US, O=thawte, Inc., OU=Domain Validated SSL, CN=thawte DV SSL CA - G2	`4EA7D7C3E1648717D5804F4654C82359`	thawte DV SSL CA - G2 DigiCert	2016-11-28
enabled	Symantec test certificates	C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 3 Secure Server CA - G4	`7B3740782C4A1FB045B3BBE7DDBC986B`	Symantec Class 3 Secure Server CA - G4 DigiCert	2016-11-28
enabled	Symantec test certificates	C=US, O=Thawte, Inc., CN=Thawte SGC CA - G2	`7038205187F027703561C768793EACE0`	Thawte SGC CA - G2 DigiCert	2016-11-28
enabled	Symantec test certificates	C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 3 Secure Server CA - G4	`6BDFD57B2556AF3143EEB3363C41F040`	Symantec Class 3 Secure Server CA - G4 DigiCert	2016-11-28
enabled	Symantec test certificates	C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 3 Secure Server CA - G4	`1D9C8B7FE2BBD0529CFA3A269BC0E20F`	Symantec Class 3 Secure Server CA - G4 DigiCert	2016-11-28
enabled	Symantec test certificates	C=US, O=thawte, Inc., CN=thawte SSL CA - G2	`26952F609C968DD1A67A81FB61C62E9F`	thawte SSL CA - G2 DigiCert	2016-11-28
enabled	Symantec test certificates	C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 3 Secure Server CA - G4	`E39288E16231C977CDADDB5D8FB0BA`	Symantec Class 3 Secure Server CA - G4 DigiCert	2016-11-28
enabled	Symantec test certificates	C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 3 Secure Server CA - G4	`4B1E75C7B57CA587BCAE9ECF30FFF7AA`	Symantec Class 3 Secure Server CA - G4 DigiCert	2016-11-28
enabled	Symantec test certificates	C=US, O=thawte, Inc., OU=Domain Validated SSL, CN=thawte DV SSL CA - G2	`46F9B6084C36202D8CBBF6B1D00E3A41`	thawte DV SSL CA - G2 DigiCert	2016-11-28
enabled	Symantec test certificates	C=US, O=GeoTrust Inc., CN=GeoTrust SSL CA - G3	`6F1FD71C9A9CC310CEA6DC49DA5879BF`	GeoTrust SSL CA - G3 DigiCert	2016-11-28
enabled	Symantec test certificates	C=US, O=thawte, Inc., CN=thawte SSL CA - G2	`14D212C965931A2E58728E9F1A1E7CFC`	thawte SSL CA - G2 DigiCert	2016-11-28
enabled	Symantec test certificates	C=US, O=GeoTrust Inc., CN=GeoTrust SSL CA - G2	`55F4D2BA6DB99DBEB960F969BA1240BE`	GeoTrust SSL CA - G2 DigiCert	2016-11-28
enabled	Symantec test certificates	C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 3 ECC 256 bit EV CA - G2	`3A1AED9E0170A2D2DC9B88BECF4D128C`	Symantec Class 3 ECC 256 bit EV CA - G2 DigiCert	2016-11-28
enabled	Symantec test certificates	C=US, O=GeoTrust Inc., CN=GeoTrust SSL CA - G2	`597F3D8E7F3219956FA0A4C3F630DF45`	GeoTrust SSL CA - G2 DigiCert	2016-11-28
enabled	Symantec test certificates	C=US, O=GeoTrust Inc., OU=Domain Validated SSL, CN=GeoTrust DV SSL CA - G3	`1CDA350D1E1709EE264B589432C63A5A`	GeoTrust DV SSL CA - G3 DigiCert	2016-11-28
enabled	Symantec test certificates	C=US, O=GeoTrust Inc., OU=Domain Validated SSL, CN=GeoTrust DV SSL CA - G2	`10340C234B51E244A7B6FD4EDFB375D2`	GeoTrust DV SSL CA - G2 DigiCert	2016-11-28
enabled	Symantec test certificates	C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 3 DSA SSL CA	`02E86F3EC6197D53FA503B2ECA3799E1`	not linked	2016-11-28
enabled	Symantec test certificates	C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)10, CN=VeriSign Class 3 Secure Server CA - G3	`3AA436AD5D08493737D3C67FA1083317`	VeriSign Class 3 Secure Server CA - G3 DigiCert	2016-11-28
enabled	Symantec test certificates	C=US, O=GeoTrust Inc., OU=Domain Validated SSL, CN=GeoTrust DV SSL CA - G3	`60D3A8B3A609A0F0BBEEAC12182A5BEF`	GeoTrust DV SSL CA - G3 DigiCert	2016-11-28
enabled	Symantec test certificates	C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 3 Secure Server CA - G4	`3C074A64F89A69CD82BCFC5B3ABB073B`	Symantec Class 3 Secure Server CA - G4 DigiCert	2016-11-28
enabled	Symantec test certificates	C=US, O=GeoTrust Inc., OU=Domain Validated SSL, CN=GeoTrust DV SSL SHA256 CA	`384E3F77EA77611CF371297E92667C33`	GeoTrust DV SSL SHA256 CA DigiCert	2016-11-28
enabled	Symantec test certificates	C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 3 Secure Server CA - G4	`0328163F61607764FE88B6E6025293EA`	Symantec Class 3 Secure Server CA - G4 DigiCert	2016-11-28
enabled	Symantec test certificates	C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 3 Secure Server CA - G4	`13BEC7EB2BF21508CED0F70DDF1D07F9`	Symantec Class 3 Secure Server CA - G4 DigiCert	2016-11-28
enabled	Symantec test certificates	C=US, O=Thawte, Inc., CN=Thawte SGC CA - G2	`7B46C4161235EB1C7D535CAF948E7AAC`	Thawte SGC CA - G2 DigiCert	2016-11-28
enabled	Symantec test certificates	C=US, O=thawte, Inc., OU=Domain Validated SSL, CN=thawte DV SSL CA - G2	`0D889F45D3FA69043C30B6D7658D9FE6`	thawte DV SSL CA - G2 DigiCert	2016-11-28
enabled	Symantec test certificates	C=US, O=GeoTrust Inc., OU=Domain Validated SSL, CN=GeoTrust DV SSL CA - G2	`3FA1BB21848BD91671B734E1F08EAA3C`	GeoTrust DV SSL CA - G2 DigiCert	2016-11-28
enabled	Symantec test certificates	C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)10, CN=VeriSign Class 3 Secure Server CA - G3	`41906F6A94D916F99892D10FB0160B41`	VeriSign Class 3 Secure Server CA - G3 DigiCert	2016-11-28
enabled	Symantec test certificates	C=US, O=GeoTrust Inc., OU=Domain Validated SSL, CN=GeoTrust DV SSL CA - G3	`516DE82992930ECACFCBFADFC2618D69`	GeoTrust DV SSL CA - G3 DigiCert	2016-11-28
enabled	Symantec test certificates	C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 3 ECC 256 bit SSL CA	`5374A0451DC9F83EB9EF95AE0B1B9779`	Symantec Class 3 ECC 256 bit SSL CA DigiCert	2016-11-28
enabled	Symantec test certificates	C=US, O=GeoTrust Inc., CN=GeoTrust SSL CA - G3	`729AA95D558F939017CC6C3ECCD21C07`	GeoTrust SSL CA - G3 DigiCert	2016-11-28
enabled	Symantec test certificates	C=US, O=GeoTrust Inc., OU=Domain Validated SSL, CN=GeoTrust DV SSL CA	`096869`	GeoTrust DV SSL CA DigiCert	2016-11-28

Raw Remote Settings Record

{
    "schema": 1552493036467,
    "details": {
        "bug": "https://bugzilla.mozilla.org/show_bug.cgi?id=1267648",
        "who": ".",
        "why": ".",
        "name": "Symantec test certificates",
        "created": "2016-04-28T21:08:08Z"
    },
    "enabled": true,
    "issuerName": "MIG1MQswCQYDVQQGEwJVUzEXMBUGA1UEChMOVmVyaVNpZ24sIEluYy4xHzAdBgNVBAsTFlZlcmlTaWduIFRydXN0IE5ldHdvcmsxOzA5BgNVBAsTMlRlcm1zIG9mIHVzZSBhdCBodHRwczovL3d3dy52ZXJpc2lnbi5jb20vcnBhIChjKTEwMS8wLQYDVQQDEyZWZXJpU2lnbiBDbGFzcyAzIFNlY3VyZSBTZXJ2ZXIgQ0EgLSBHMw==",
    "serialNumber": "OqQ2rV0ISTc308Z/oQgzFw==",
    "id": "781f8787-6508-d6aa-c508-13ac2bb0d930",
    "last_modified": 1480349160870
}