OneCRL Entry
890fcce3-a97e-4372-aa5f-e02609358139
Revocation Entry
- Status
- disabled
- Serial
088765199EA3DF08F2D9F4257CE390AD- Last Modified
- 2025-08-22 04:33:07 UTC
- Schema
- 1755569747528
Issuer
- DN
- C=IT, L=Milan, O=Actalis S.p.A./03358520967, CN=Actalis Authentication Root CA
- DN SHA-256
02b7fea4088dcc670549c2202e8c9ee89e50349368c0dd3c115a9a6c716022aa- Issuer DER
MGsxCzAJBgNVBAYTAklUMQ4wDAYDVQQHDAVNaWxhbjEjMCEGA1UECgwaQWN0YWxpcyBTLnAuQS4vMDMzNTg1MjA5NjcxJzAlBgNVBAMMHkFjdGFsaXMgQXV0aGVudGljYXRpb24gUm9vdCBDQQ==
Context
- Bugzilla
- 1983893
- Action
- Four disabled OneCRL issuer/serial entries were added for revoked intermediate certificates: two under issuer 'Actalis Authentication Root CA' and two under issuers 'TrustAsia TLS RSA Root CA' and 'TrustAsia TLS ECC Root CA'. The bug was initiated by the Common CA Database to OneCRL Bot on 2025-08-19, Ben Wilson specified the correct entries on 2025-08-20, staging was approved and validated by Daniel Keeler on 2025-08-21, production was approved by Daniel Keeler on 2025-08-22, and Ben Wilson verified the entries in Firefox Beta and Nightly later that day.
- Confidence
- Explicit in OneCRL thread · 0.97
CCADB Link
- Issuer CA
- Actalis Authentication Root CA
- CA Owner
- Actalis
AI Summary
Generated 2026-06-30 11:13 UTC · Model: gpt-5.4This Bugzilla case tracks adding four revoked intermediate certificate entries to Mozilla OneCRL. The bug was created on 2025-08-19 by the Common CA Database to OneCRL Bot, which stated that the entries were being added based on revoked intermediate certificates reported in the CCADB. Ben Wilson then confirmed the specific four issuer/serial pairs to add, noting that they were only 4 of 15 CA revocations he had identified in the CCADB and that the other 11 would be handled later when the CCADB process was fixed. The four entries correspond to two Actalis-issued certificates under the Actalis Authentication Root CA and two TrustAsia-issued certificates under the TrustAsia TLS RSA Root CA and TrustAsia TLS ECC Root CA. Review and staging verification occurred on 2025-08-21, production approval occurred on 2025-08-22, and Ben Wilson later verified the changes in Firefox Beta and Nightly before closure. The thread does not state the individual revocation reasons, revocation dates, or any external compliance incident or CA closure explaining why these certificates had been revoked. A timeline-based inference is that qualification came from CCADB-reported revoked intermediates surfaced by the bot, but the exact CCADB candidate-report fields are not described in the thread.
Four disabled OneCRL issuer/serial entries were added for revoked intermediate certificates: two under issuer 'Actalis Authentication Root CA' and two under issuers 'TrustAsia TLS RSA Root CA' and 'TrustAsia TLS ECC Root CA'. The bug was initiated by the Common CA Database to OneCRL Bot on 2025-08-19, Ben Wilson specified the correct entries on 2025-08-20, staging was approved and validated by Daniel Keeler on 2025-08-21, production was approved by Daniel Keeler on 2025-08-22, and Ben Wilson verified the entries in Firefox Beta and Nightly later that day.
Explicitly stated as revoked intermediate certificates reported in the CCADB. Ben Wilson also stated these were 4 of 15 CA revocations he had identified in the CCADB. No revocation reason, revocation date, or specific CCADB candidate-report field/state is stated.
unknown
Explicit in OneCRL thread · 0.97
- 2025-08-19Bug 1983893 was created by the Common CA Database to OneCRL Bot to add entries to OneCRL based on revoked intermediate certificates reported in the CCADB.
- 2025-08-19The bot attached issuer/serial data, proposed OneCRL additions, and decoded entry details.
- 2025-08-20Ben Wilson stated these were only 4 of 15 CA revocations identified in the CCADB, confirmed the correct four entries, and said they had been filed in staging.
- 2025-08-21Daniel Keeler approved the changes in staging, validated them with remote-settings-devtools, and attached onecrl-entry-checker output showing four production changes waiting.
- 2025-08-21Ben Wilson verified the proposed additions were correct and requested approval in Kinto Production.
- 2025-08-22Daniel Keeler approved the changes in production.
- 2025-08-22Ben Wilson verified the changes in Firefox Beta and Nightly profiles and indicated the bug could be closed.
- 2025-08-25The bug was resolved FIXED.
AI-generated from the OneCRL record and linked Bugzilla thread. Mozilla and CCADB records remain authoritative.
Raw Remote Settings Record
{
"schema": 1755569747528,
"details": {
"bug": "https://bugzilla.mozilla.org/show_bug.cgi?id=1983893",
"who": "",
"why": "",
"name": "",
"created": ""
},
"enabled": false,
"issuerName": "MGsxCzAJBgNVBAYTAklUMQ4wDAYDVQQHDAVNaWxhbjEjMCEGA1UECgwaQWN0YWxpcyBTLnAuQS4vMDMzNTg1MjA5NjcxJzAlBgNVBAMMHkFjdGFsaXMgQXV0aGVudGljYXRpb24gUm9vdCBDQQ==",
"serialNumber": "CIdlGZ6j3wjy2fQlfOOQrQ==",
"id": "890fcce3-a97e-4372-aa5f-e02609358139",
"last_modified": 1755837187972
}