← OneCRL Browser

OneCRL Entry

7b11d8a9-7ad2-4623-ad06-1569943adf06

Revocation Entry

Status
disabled
Serial
5D544509A0D60AA7
Last Modified
2021-06-14 21:09:55 UTC
Schema
1623430883338

Issuer

DN
C=US, O=AffirmTrust, CN=AffirmTrust Premium
DN SHA-256
b02318c89f8cf957a9f1b8e3c82f6b21698dcbc05b769cefd34eefd7ef58b4e4
Issuer DER
MEExCzAJBgNVBAYTAlVTMRQwEgYDVQQKDAtBZmZpcm1UcnVzdDEcMBoGA1UEAwwTQWZmaXJtVHJ1c3QgUHJlbWl1bQ==

Context

Bugzilla
1716034
Action
A large batch of issuer/serial entries for revoked intermediate certificates was added to OneCRL. The action was initiated by the Common CA Database to OneCRL Bot when it filed the bug on 2021-06-11T17:00:54Z, then reviewed by Mozilla staff, approved by d**********r@mozilla.com in Kinto Production on 2021-06-14T21:10:18Z, and subsequently verified by Kathleen Wilson.
Confidence
Explicit in OneCRL thread · 0.98

CCADB Link

Issuer CA
AffirmTrust Premium
CA Owner
Entrust

AI Summary

Generated 2026-06-30 11:41 UTC · Model: gpt-5.4

Bug 1716034 is a batch OneCRL case created by the Common CA Database to OneCRL Bot on 2021-06-11. The bug explicitly states that entries were being added to OneCRL based on revoked intermediate certificates reported in the CCADB. The proposed additions covered many issuer/serial pairs across multiple CA owners, and the bug included attachments listing the issuer/serial pairs and proposed OneCRL additions. Kathleen Wilson confirmed on 2021-06-11 that these were the correct entries to add and that TLS Canary was not needed for this batch. David Keeler later reported that onecrl-entry-checker output looked good and approved the changes in Kinto Production on 2021-06-14. Kathleen Wilson then verified the changes in Firefox Nightly and Firefox Release profiles. The thread does not state per-certificate CCADB revocation reasons, revocation dates, or any single external compliance incident explaining the listed revocations. Because the bug is a bulk CCADB-driven import, any certificate-specific cause would require separate evidence not present in this thread.

OneCRL action

A large batch of issuer/serial entries for revoked intermediate certificates was added to OneCRL. The action was initiated by the Common CA Database to OneCRL Bot when it filed the bug on 2021-06-11T17:00:54Z, then reviewed by Mozilla staff, approved by d**********r@mozilla.com in Kinto Production on 2021-06-14T21:10:18Z, and subsequently verified by Kathleen Wilson.

CCADB trigger

Explicitly CCADB-driven: the bot stated the entries were added based on revoked intermediate certificates reported in the CCADB. No per-entry revocation status fields, reasons, dates, or candidate-report state are stated in the thread.

External cause

Unknown; the thread does not identify a single external compliance incident, CA closure, root program report, or m.d.s.p. discussion as the cause of the revocations in this batch.

Confidence

Explicit in OneCRL thread · 0.98

Chronology
  • 2021-06-11Bug 1716034 was created by the Common CA Database to OneCRL Bot.
  • 2021-06-11Bot stated it was adding entries to OneCRL based on revoked intermediate certificates reported in the CCADB.
  • 2021-06-11Attachments were added listing issuer/serial pairs and proposed OneCRL additions.
  • 2021-06-11Kathleen Wilson confirmed the entries were correct and said TLS Canary was not needed for this batch.
  • 2021-06-14David Keeler attached onecrl-entry-checker output and said everything looked good.
  • 2021-06-14Kathleen Wilson said to proceed with approving the changes at Kinto Production.
  • 2021-06-14David Keeler approved the changes in production.
  • 2021-06-15Kathleen Wilson verified the changes in a Firefox Nightly profile.
  • 2021-06-16Kathleen Wilson verified the changes in a Firefox Release profile.
Bug 1716034

AI-generated from the OneCRL record and linked Bugzilla thread. Mozilla and CCADB records remain authoritative.

OneCRL entries for this Bugzilla case

62 entries
Status Name Issuer Serial CCADB Modified
disabled — O=TeliaSonera, CN=TeliaSonera Root CA v1 00863C75641195854FB43138A0A0CF8AA3 TeliaSonera Root CA v1
Telia Company
 2022-07-25
disabled — C=JP, O=SECOM Trust Systems CO.,LTD., OU=Security Communication RootCA2 22B9B0DC Security Communication RootCA2
SECOM Trust Systems CO., LTD.
 2021-06-14
disabled — C=JP, O=SECOM Trust.net, OU=Security Communication RootCA1 12B9B0E8 Security Communication RootCA1
SECOM Trust Systems CO., LTD.
 2021-06-14
disabled — C=JP, O=SECOM Trust Systems CO.,LTD., OU=Security Communication RootCA2 22B9B0D8 Security Communication RootCA2
SECOM Trust Systems CO., LTD.
 2021-06-14
disabled — C=JP, O=SECOM Trust Systems CO.,LTD., OU=Security Communication RootCA2 22B9B139C990390946 Security Communication RootCA2
SECOM Trust Systems CO., LTD.
 2021-06-14
disabled — C=US, O=Microsoft Corporation, CN=Microsoft RSA Root Certificate Authority 2017 33000000289B1BE7B00F974391000000000028 Microsoft RSA Root Certificate Authority 2017
Microsoft Corporation
 2021-06-14
disabled — C=US, O=Microsoft Corporation, CN=Microsoft RSA Root Certificate Authority 2017 33000000265EE5CBEF101479FB000000000026 Microsoft RSA Root Certificate Authority 2017
Microsoft Corporation
 2021-06-14
disabled — C=JP, O=SECOM Trust.net, OU=Security Communication RootCA1 12B9B0E7 Security Communication RootCA1
SECOM Trust Systems CO., LTD.
 2021-06-14
disabled — C=JP, O=SECOM Trust Systems CO.,LTD., OU=Security Communication RootCA2 22B9B13B804FBBC401 Security Communication RootCA2
SECOM Trust Systems CO., LTD.
 2021-06-14
disabled — C=US, O=AffirmTrust, CN=AffirmTrust Networking 5F0ACCB65A6BF800 AffirmTrust Networking
Entrust
 2021-06-14
disabled — C=JP, O=SECOM Trust Systems CO.,LTD., OU=Security Communication RootCA2 22B9B0FCD4C7943B40 Security Communication RootCA2
SECOM Trust Systems CO., LTD.
 2021-06-14
disabled — C=JP, O=SECOM Trust Systems CO.,LTD., OU=Security Communication RootCA2 22B9B0E6212893CE16 Security Communication RootCA2
SECOM Trust Systems CO., LTD.
 2021-06-14
disabled — C=JP, O=SECOM Trust.net, OU=Security Communication RootCA1 12B9B0F4 Security Communication RootCA1
SECOM Trust Systems CO., LTD.
 2021-06-14
disabled — C=JP, O=SECOM Trust Systems CO.,LTD., OU=Security Communication RootCA2 22B9B0F71D5DAC6E8C Security Communication RootCA2
SECOM Trust Systems CO., LTD.
 2021-06-14
disabled — C=JP, O=SECOM Trust.net, OU=Security Communication RootCA1 12B9B0E9 Security Communication RootCA1
SECOM Trust Systems CO., LTD.
 2021-06-14
disabled — C=JP, O=SECOM Trust Systems CO.,LTD., OU=Security Communication RootCA2 22B9B0F6A6B9E0C3C2 Security Communication RootCA2
SECOM Trust Systems CO., LTD.
 2021-06-14
disabled — C=US, O=Microsoft Corporation, CN=Microsoft ECC Root Certificate Authority 2017 330000002378F1186465D367C2000000000023 Microsoft ECC Root Certificate Authority 2017
Microsoft Corporation
 2021-06-14
disabled — C=JP, O=SECOM Trust Systems CO.,LTD., OU=Security Communication RootCA2 22B9B0BD Security Communication RootCA2
SECOM Trust Systems CO., LTD.
 2021-06-14
disabled — C=JP, O=SECOM Trust Systems CO.,LTD., OU=Security Communication RootCA2 22B9B13D9238E0BBC2 Security Communication RootCA2
SECOM Trust Systems CO., LTD.
 2021-06-14
disabled — C=US, O=Microsoft Corporation, CN=Microsoft RSA Root Certificate Authority 2017 3300000027C7DEAF47D6C012FE000000000027 Microsoft RSA Root Certificate Authority 2017
Microsoft Corporation
 2021-06-14
disabled — C=FI, O=Telia Finland Oyj, CN=Telia Root CA v2 01675FAC72994C74BF1A67EDC1B3AD Telia Root CA v2
Telia Company
 2021-06-14
disabled — C=JP, O=SECOM Trust Systems CO.,LTD., OU=Security Communication RootCA2 22B9B13684A2A4AA92 Security Communication RootCA2
SECOM Trust Systems CO., LTD.
 2021-06-14
disabled — C=JP, O=SECOM Trust Systems CO.,LTD., OU=Security Communication RootCA2 22B9B150F277A586AD Security Communication RootCA2
SECOM Trust Systems CO., LTD.
 2021-06-14
disabled — C=US, O=Microsoft Corporation, CN=Microsoft ECC Root Certificate Authority 2017 330000002404E553405F2DAAD3000000000024 Microsoft ECC Root Certificate Authority 2017
Microsoft Corporation
 2021-06-14
disabled — C=JP, O=SECOM Trust Systems CO.,LTD., OU=Security Communication RootCA2 22B9B0CE Security Communication RootCA2
SECOM Trust Systems CO., LTD.
 2021-06-14
disabled — C=US, O=Microsoft Corporation, CN=Microsoft RSA Root Certificate Authority 2017 3300000029D905146635D54EBD000000000029 Microsoft RSA Root Certificate Authority 2017
Microsoft Corporation
 2021-06-14
disabled — C=JP, O=SECOM Trust Systems CO.,LTD., OU=Security Communication RootCA2 22B9B0CD Security Communication RootCA2
SECOM Trust Systems CO., LTD.
 2021-06-14
disabled — C=JP, O=SECOM Trust Systems CO.,LTD., OU=Security Communication RootCA2 22B9B131EC0DFF09FE Security Communication RootCA2
SECOM Trust Systems CO., LTD.
 2021-06-14
disabled — C=JP, O=SECOM Trust Systems CO.,LTD., OU=Security Communication RootCA2 22B9B0CA Security Communication RootCA2
SECOM Trust Systems CO., LTD.
 2021-06-14
disabled — C=US, O=AffirmTrust, CN=AffirmTrust Premium 0BCFCF3759C2F586 AffirmTrust Premium
Entrust
 2021-06-14
disabled — C=US, O=AffirmTrust, CN=AffirmTrust Commercial 2926357EA5CA133E AffirmTrust Commercial
Entrust
 2021-06-14
disabled — serialNumber=G63287510, C=ES, O=ANF Autoridad de Certificacion, OU=ANF CA Raiz, CN=ANF Secure Server Root CA 016210359FAB8AE2 ANF Secure Server Root CA
Autoridad de Certificación (ANF AC)
 2021-06-14
disabled — C=US, O=AffirmTrust, CN=AffirmTrust Networking 3D847C1B4ABB3202 AffirmTrust Networking
Entrust
 2021-06-14
disabled — C=US, O=AffirmTrust, CN=AffirmTrust Premium 5D544509A0D60AA7 AffirmTrust Premium
Entrust
 2021-06-14
disabled — C=JP, O=SECOM Trust.net, OU=Security Communication RootCA1 12B9B0EA Security Communication RootCA1
SECOM Trust Systems CO., LTD.
 2021-06-14
disabled — C=JP, O=SECOM Trust Systems CO.,LTD., OU=Security Communication RootCA2 22B9B0E70024E41D45 Security Communication RootCA2
SECOM Trust Systems CO., LTD.
 2021-06-14
disabled — C=US, O=AffirmTrust, CN=AffirmTrust Networking 2EED7B3DAB645B10 AffirmTrust Networking
Entrust
 2021-06-14
disabled — C=US, O=AffirmTrust, CN=AffirmTrust Premium ECC 107CAA12ECD68C54 AffirmTrust Premium ECC
Entrust
 2021-06-14
disabled — C=JP, O=SECOM Trust Systems CO.,LTD., OU=Security Communication RootCA2 22B9B0D7 Security Communication RootCA2
SECOM Trust Systems CO., LTD.
 2021-06-14
disabled — C=US, O=AffirmTrust, CN=AffirmTrust Premium ECC 2B44F713DF170C16 AffirmTrust Premium ECC
Entrust
 2021-06-14
disabled — C=JP, O=SECOM Trust Systems CO.,LTD., OU=Security Communication RootCA2 22B9B1300602CE60BE Security Communication RootCA2
SECOM Trust Systems CO., LTD.
 2021-06-14
disabled — C=JP, O=SECOM Trust Systems CO.,LTD., OU=Security Communication RootCA2 22B9B16AE75C8B5865 Security Communication RootCA2
SECOM Trust Systems CO., LTD.
 2021-06-14
disabled — C=JP, O=SECOM Trust Systems CO.,LTD., OU=Security Communication RootCA2 22B9B16EB150AD7E36 Security Communication RootCA2
SECOM Trust Systems CO., LTD.
 2021-06-14
disabled — C=JP, O=SECOM Trust.net, OU=Security Communication RootCA1 12B9B0F8 Security Communication RootCA1
SECOM Trust Systems CO., LTD.
 2021-06-14
disabled — C=JP, O=SECOM Trust Systems CO.,LTD., OU=Security Communication RootCA2 22B9B137346B15370E Security Communication RootCA2
SECOM Trust Systems CO., LTD.
 2021-06-14
disabled — O=Cybertrust, Inc, CN=Cybertrust Global Root 0AA15896A4D1AF800DA1690EF4A3AFB4 Cybertrust Global Root
DigiCert
 2021-06-14
disabled — C=JP, O=SECOM Trust.net, OU=Security Communication RootCA1 12B9B0E2 Security Communication RootCA1
SECOM Trust Systems CO., LTD.
 2021-06-14
disabled — C=IE, O=Baltimore, OU=CyberTrust, CN=Baltimore CyberTrust Root 054340D0A2C4CC8111FAA8377D46E06F Baltimore CyberTrust Root
DigiCert
 2021-06-14
disabled — C=JP, O=SECOM Trust.net, OU=Security Communication RootCA1 12B9B0E3 Security Communication RootCA1
SECOM Trust Systems CO., LTD.
 2021-06-14
disabled — C=JP, O=SECOM Trust.net, OU=Security Communication RootCA1 12B9B0E5 Security Communication RootCA1
SECOM Trust Systems CO., LTD.
 2021-06-14
disabled — C=US, O=Microsoft Corporation, CN=Microsoft ECC Root Certificate Authority 2017 330000002571AFE0D5AEE7A2F5000000000025 Microsoft ECC Root Certificate Authority 2017
Microsoft Corporation
 2021-06-14
disabled — C=US, O=AffirmTrust, CN=AffirmTrust Networking 5AF80E98C1530A58 AffirmTrust Networking
Entrust
 2021-06-14
disabled — C=US, O=AffirmTrust, CN=AffirmTrust Commercial 631BF90C8AB02C81 AffirmTrust Commercial
Entrust
 2021-06-14
disabled — C=JP, O=SECOM Trust Systems CO.,LTD., OU=Security Communication RootCA2 22B9B0C6 Security Communication RootCA2
SECOM Trust Systems CO., LTD.
 2021-06-14
disabled — C=EU, L=Madrid (see current address at www.camerfirma.com/address), serialNumber=A82743287, O=AC Camerfirma S.A., CN=Global Chambersign Root - 2008 6C8B466D4A04435AD1FBCC Global Chambersign Root - 2008
AC Camerfirma, S.A.
 2021-06-14
disabled — C=US, O=AffirmTrust, CN=AffirmTrust Commercial 5B469990EC759D34 AffirmTrust Commercial
Entrust
 2021-06-14
disabled — C=JP, O=SECOM Trust Systems CO.,LTD., OU=Security Communication RootCA2 22B9B0EEDAE6CEE513 Security Communication RootCA2
SECOM Trust Systems CO., LTD.
 2021-06-14
disabled — C=JP, O=SECOM Trust.net, OU=Security Communication RootCA1 12B9B0F1 Security Communication RootCA1
SECOM Trust Systems CO., LTD.
 2021-06-14
disabled — C=US, O=Microsoft Corporation, CN=Microsoft ECC Root Certificate Authority 2017 33000000269AB02DDE29ABBCF7000000000026 Microsoft ECC Root Certificate Authority 2017
Microsoft Corporation
 2021-06-14
disabled — C=JP, O=SECOM Trust Systems CO.,LTD., OU=Security Communication RootCA2 22B9B0DB Security Communication RootCA2
SECOM Trust Systems CO., LTD.
 2021-06-14
disabled — C=JP, O=SECOM Trust Systems CO.,LTD., OU=Security Communication RootCA2 22B9B0E529F4E49ECE Security Communication RootCA2
SECOM Trust Systems CO., LTD.
 2021-06-14
disabled — C=US, O=AffirmTrust, CN=AffirmTrust Networking 239015C7F6788046 AffirmTrust Networking
Entrust
 2021-06-14

Raw Remote Settings Record

{
    "schema": 1623430883338,
    "details": {
        "bug": "https://bugzilla.mozilla.org/show_bug.cgi?id=1716034",
        "who": "",
        "why": "",
        "name": "",
        "created": ""
    },
    "enabled": false,
    "issuerName": "MEExCzAJBgNVBAYTAlVTMRQwEgYDVQQKDAtBZmZpcm1UcnVzdDEcMBoGA1UEAwwTQWZmaXJtVHJ1c3QgUHJlbWl1bQ==",
    "serialNumber": "XVRFCaDWCqc=",
    "id": "7b11d8a9-7ad2-4623-ad06-1569943adf06",
    "last_modified": 1623704995345
}

We use only essential cookies and local browser storage for preferences and security. See our Privacy Policy for details.

⚠

Confirm action