OneCRL Entry
87ab6f9e-a949-4fbb-a4e5-dfc8e2c38bdb
Revocation Entry
- Status
- disabled
- Serial
06DE6553F4712A18312DFDA2B4846D1B36F76E- Last Modified
- 2026-05-08 16:10:57 UTC
- Schema
- 1777482136828
Issuer
- DN
- C=US, O=Amazon, CN=Amazon Root CA 3
- DN SHA-256
2aa22f436cafcc940e07b4f3036725a2741a7893fdeb2cbdb41d97bc377117fc- Issuer DER
MDkxCzAJBgNVBAYTAlVTMQ8wDQYDVQQKEwZBbWF6b24xGTAXBgNVBAMTEEFtYXpvbiBSb290IENBIDM=
Context
- Bugzilla
- 2035889
- Action
- 28 issuer/serial pairs were added to OneCRL from CCADB-reported revoked intermediate certificates; initiated by c**********l@bots.tld on 2026-04-29, approved by Dana Keeler in staging on 2026-05-07 and in production on 2026-05-08.
- Confidence
- Explicit in OneCRL thread · 0.98
CCADB Link
- Issuer CA
- Amazon Root CA 3
- CA Owner
- Amazon Trust Services
AI Summary
Generated 2026-06-30 10:49 UTC · Model: gpt-5.4-miniThis bug added 28 issuer/serial entries to OneCRL for revoked intermediate certificates reported in the CCADB. The action was initiated by the ccadb2onercl bot on 2026-04-29, which created the proposed OneCRL additions and attached decoded issuer/serial lists. Dana Keeler (:keeler) approved the changes in staging on 2026-05-07 and in production on 2026-05-08. The thread explicitly states the entries were equivalent OneCRL issuer and serial pairs and that they were already present in Firefox profiles by 2026-05-12. The bug does not state the specific CCADB revocation field values or a candidate-report state that triggered qualification, only that the source was revoked intermediate certificates in CCADB. No external compliance incident, root program report, m.d.s.p. thread, or CA closure is cited in the thread.
28 issuer/serial pairs were added to OneCRL from CCADB-reported revoked intermediate certificates; initiated by c**********l@bots.tld on 2026-04-29, approved by Dana Keeler in staging on 2026-05-07 and in production on 2026-05-08.
Unknown / not stated; the thread only says the entries were based on revoked intermediate certificates reported in the CCADB.
Unknown / not stated; no external compliance incident or CA closure is referenced in the thread.
Explicit in OneCRL thread · 0.98
- 2026-04-29ccadb2onercl bot opened the bug and proposed OneCRL additions based on revoked intermediate certificates in CCADB.
- 2026-04-30Ben Wilson listed the 28 decoded issuer/serial entries and requested staging approval and validation.
- 2026-05-07Dana Keeler approved the changes in staging.
- 2026-05-08Dana Keeler approved the changes in production.
- 2026-05-12Ben Wilson said the entries were in Firefox profiles and he would update the 28 records in CCADB.
AI-generated from the OneCRL record and linked Bugzilla thread. Mozilla and CCADB records remain authoritative.
Raw Remote Settings Record
{
"schema": 1777482136828,
"details": {
"bug": "https://bugzilla.mozilla.org/show_bug.cgi?id=2035889",
"who": "",
"why": "",
"name": "",
"created": ""
},
"enabled": false,
"issuerName": "MDkxCzAJBgNVBAYTAlVTMQ8wDQYDVQQKEwZBbWF6b24xGTAXBgNVBAMTEEFtYXpvbiBSb290IENBIDM=",
"serialNumber": "Bt5lU/RxKhgxLf2itIRtGzb3bg==",
"id": "87ab6f9e-a949-4fbb-a4e5-dfc8e2c38bdb",
"last_modified": 1778256657404
}