OneCRL Entry
8e410ddb-9913-4914-a771-f6d1e056e819
Revocation Entry
- Status
- disabled
- Serial
3424A1ECF8F0A35FE746B7011C43E844- Last Modified
- 2025-09-11 18:59:27 UTC
- Schema
- 1757350848040
Issuer
- DN
- C=US, O=AffirmTrust, CN=AffirmTrust Networking
- DN SHA-256
07f063d42e07baf67233bbecd984ecf4fa38faa548598d3835f1c910da319dc9- Issuer DER
MEQxCzAJBgNVBAYTAlVTMRQwEgYDVQQKDAtBZmZpcm1UcnVzdDEfMB0GA1UEAwwWQWZmaXJtVHJ1c3QgTmV0d29ya2luZw==
Context
- Bugzilla
- 1987472
- Action
- Eleven issuer/serial pairs were proposed for addition to OneCRL by the Common CA Database to OneCRL Bot on 2025-09-08, based on revoked intermediate certificates reported in the CCADB. Ben Wilson confirmed the 11 decoded entries were correct for staging review on 2025-09-08. David Keeler approved them in staging on 2025-09-11 and then approved them in production on 2025-09-11.
- Confidence
- Explicit in OneCRL thread · 0.96
CCADB Link
- Issuer CA
- AffirmTrust Networking
- CA Owner
- Entrust
AI Summary
Generated 2026-06-30 11:13 UTC · Model: gpt-5.4Bug 1987472 is a Mozilla OneCRL case automatically created by the Common CA Database to OneCRL Bot on 2025-09-08. The bot stated that it was adding entries to OneCRL based on revoked intermediate certificates reported in the CCADB. The bug proposed 11 issuer/serial OneCRL entries, and Ben Wilson confirmed that the decoded attachment contained the correct 11 entries for review and approval in Kinto Staging. On 2025-09-11, Mozilla staff approved the changes in staging and then in production, and a CCADB incident-reporting account confirmed the changes were correct. The local OneCRL entry data shows the affected certificates were associated with Entrust and AffirmTrust issuers, with CCADB CA owners listed as Entrust or Sectigo. The thread does not state the specific CCADB revocation reason codes, revocation dates, or candidate-report field values for each certificate. The thread also does not state any external compliance incident, CA closure, or separate Bugzilla incident as the cause of the revocations. The entries are now disabled in the provided local OneCRL snapshot, but the bug thread itself documents their addition and approval in September 2025.
Eleven issuer/serial pairs were proposed for addition to OneCRL by the Common CA Database to OneCRL Bot on 2025-09-08, based on revoked intermediate certificates reported in the CCADB. Ben Wilson confirmed the 11 decoded entries were correct for staging review on 2025-09-08. David Keeler approved them in staging on 2025-09-11 and then approved them in production on 2025-09-11.
Explicitly stated as revoked intermediate certificates reported in the CCADB. No specific revocation reason, revocation date, candidate report state, or manual-addition rationale is stated in the thread.
unknown
Explicit in OneCRL thread · 0.96
- 2025-09-08Bug 1987472 was created by the Common CA Database to OneCRL Bot.
- 2025-09-08Bot stated it was adding entries to OneCRL based on revoked intermediate certificates reported in the CCADB.
- 2025-09-08Attachments were created with issuer/serial pairs and proposed OneCRL additions.
- 2025-09-08Ben Wilson confirmed the decoded attachment contained the correct 11 OneCRL entries for staging review.
- 2025-09-09Bot posted that the changes were still in review.
- 2025-09-10Bot posted that the changes were still in review.
- 2025-09-11Bot posted that the changes were still in review.
- 2025-09-11David Keeler approved the 11 changes in staging.
- 2025-09-11CCADB incident-reporting account said the changes were correct and could proceed to production.
- 2025-09-11David Keeler approved the changes in production.
- 2025-09-15Ben Wilson verified the entries were present in local Firefox profiles and at crt.sh/mozilla-onecrl.
AI-generated from the OneCRL record and linked Bugzilla thread. Mozilla and CCADB records remain authoritative.
Raw Remote Settings Record
{
"schema": 1757350848040,
"details": {
"bug": "https://bugzilla.mozilla.org/show_bug.cgi?id=1987472",
"who": "",
"why": "",
"name": "",
"created": ""
},
"enabled": false,
"issuerName": "MEQxCzAJBgNVBAYTAlVTMRQwEgYDVQQKDAtBZmZpcm1UcnVzdDEfMB0GA1UEAwwWQWZmaXJtVHJ1c3QgTmV0d29ya2luZw==",
"serialNumber": "NCSh7Pjwo1/nRrcBHEPoRA==",
"id": "8e410ddb-9913-4914-a771-f6d1e056e819",
"last_modified": 1757617167993
}