OneCRL Entry
88535da1-66d8-43a1-a113-9c0c0153e533
Revocation Entry
- Status
- disabled
- Serial
07D683B67F1D937BC0C9FEF461B78604C721C5- Last Modified
- 2026-05-08 16:10:57 UTC
- Schema
- 1777482138051
Issuer
- DN
- C=US, O=Amazon, CN=Amazon Root CA 4
- DN SHA-256
c5c7dae5f35575b3745870976e1a02f78707095d502a78a7f662a4578ba2f646- Issuer DER
MDkxCzAJBgNVBAYTAlVTMQ8wDQYDVQQKEwZBbWF6b24xGTAXBgNVBAMTEEFtYXpvbiBSb290IENBIDQ=
Context
- Bugzilla
- 2035889
- Action
- 28 issuer/serial pairs were added to OneCRL from CCADB-reported revoked intermediate certificates; initiated by c**********l@bots.tld on 2026-04-29, approved by Dana Keeler in staging on 2026-05-07 and in production on 2026-05-08.
- Confidence
- Explicit in OneCRL thread · 0.98
CCADB Link
- Issuer CA
- Amazon Root CA 4
- CA Owner
- Amazon Trust Services
AI Summary
Generated 2026-06-30 10:49 UTC · Model: gpt-5.4-miniThis bug added 28 issuer/serial entries to OneCRL for revoked intermediate certificates reported in the CCADB. The action was initiated by the ccadb2onercl bot on 2026-04-29, which created the proposed OneCRL additions and attached decoded issuer/serial lists. Dana Keeler (:keeler) approved the changes in staging on 2026-05-07 and in production on 2026-05-08. The thread explicitly states the entries were equivalent OneCRL issuer and serial pairs and that they were already present in Firefox profiles by 2026-05-12. The bug does not state the specific CCADB revocation field values or a candidate-report state that triggered qualification, only that the source was revoked intermediate certificates in CCADB. No external compliance incident, root program report, m.d.s.p. thread, or CA closure is cited in the thread.
28 issuer/serial pairs were added to OneCRL from CCADB-reported revoked intermediate certificates; initiated by c**********l@bots.tld on 2026-04-29, approved by Dana Keeler in staging on 2026-05-07 and in production on 2026-05-08.
Unknown / not stated; the thread only says the entries were based on revoked intermediate certificates reported in the CCADB.
Unknown / not stated; no external compliance incident or CA closure is referenced in the thread.
Explicit in OneCRL thread · 0.98
- 2026-04-29ccadb2onercl bot opened the bug and proposed OneCRL additions based on revoked intermediate certificates in CCADB.
- 2026-04-30Ben Wilson listed the 28 decoded issuer/serial entries and requested staging approval and validation.
- 2026-05-07Dana Keeler approved the changes in staging.
- 2026-05-08Dana Keeler approved the changes in production.
- 2026-05-12Ben Wilson said the entries were in Firefox profiles and he would update the 28 records in CCADB.
AI-generated from the OneCRL record and linked Bugzilla thread. Mozilla and CCADB records remain authoritative.
Raw Remote Settings Record
{
"schema": 1777482138051,
"details": {
"bug": "https://bugzilla.mozilla.org/show_bug.cgi?id=2035889",
"who": "",
"why": "",
"name": "",
"created": ""
},
"enabled": false,
"issuerName": "MDkxCzAJBgNVBAYTAlVTMQ8wDQYDVQQKEwZBbWF6b24xGTAXBgNVBAMTEEFtYXpvbiBSb290IENBIDQ=",
"serialNumber": "B9aDtn8dk3vAyf70YbeGBMchxQ==",
"id": "88535da1-66d8-43a1-a113-9c0c0153e533",
"last_modified": 1778256657447
}