exceptional SHA-1 Certificates
8e453b5c-3f81-2694-2f10-73ec8c406c49
Revocation Entry
- Status
- enabled
- Serial
34CA4C7049DEC77797C78A2193D82571- Last Modified
- 2016-11-28 16:06:07 UTC
- Schema
- 1552493024471
Issuer
- DN
- C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)10, CN=VeriSign Class 3 International Server CA - G3
- DN SHA-256
0ca28e71d04c14a9d6b4dbc8cbf6ed4c205925e4829d0ca030f6863944deab40- Issuer DER
MIG8MQswCQYDVQQGEwJVUzEXMBUGA1UEChMOVmVyaVNpZ24sIEluYy4xHzAdBgNVBAsTFlZlcmlTaWduIFRydXN0IE5ldHdvcmsxOzA5BgNVBAsTMlRlcm1zIG9mIHVzZSBhdCBodHRwczovL3d3dy52ZXJpc2lnbi5jb20vcnBhIChjKTEwMTYwNAYDVQQDEy1WZXJpU2lnbiBDbGFzcyAzIEludGVybmF0aW9uYWwgU2VydmVyIENBIC0gRzM=
Context
- Bugzilla
- 1252142
- Action
- On 2016-03-01, 7 OneCRL certificate blocklist entries were added for issuer "VeriSign Class 3 International Server CA - G3"; Mark Goodwin requested the additions and Andrew Williamson confirmed they were all blocked.
- Confidence
- Explicit in OneCRL thread · 0.93
CCADB Link
- Issuer CA
- VeriSign Class 3 International Server CA - G3
- CA Owner
- DigiCert
AI Summary
Generated 2026-06-30 11:47 UTC · Model: gpt-5.4-miniMozilla added 7 certificate blocklist entries to OneCRL for the issuer "VeriSign Class 3 International Server CA - G3". The request was initiated by Mark Goodwin (:mgoodwin) on 2016-02-29, who asked to add the entries as part of the discussion linked from the mozilla.dev.security.policy thread. Andrew Williamson (:eviljeff) confirmed on 2016-03-01 that all requested certificates were blocked. The OneCRL records show the entries were created on 2016-03-01 and later last modified on 2016-11-28, with detail_name set to "exceptional SHA-1 Certificates" and detail_who/detail_why left as ".". The thread does not state a CCADB revocation field, candidate-report state, or manual-add trigger beyond the blocklist request itself. The external cause is not explicitly described in the Bugzilla thread, but the linked policy discussion indicates these were exceptional SHA-1 certificates being revoked in that context.
On 2016-03-01, 7 OneCRL certificate blocklist entries were added for issuer "VeriSign Class 3 International Server CA - G3"; Mark Goodwin requested the additions and Andrew Williamson confirmed they were all blocked.
Unknown / not stated; the thread only shows a blocklist request for "exceptional SHA-1 Certificates" and does not cite a CCADB revocation field, candidate report, or other qualification state.
Unknown / not stated in the Bugzilla thread; the only explicit external reference is the linked mozilla.dev.security.policy discussion about exceptional SHA-1 certificates.
Explicit in OneCRL thread · 0.93
- 2016-02-29Mark Goodwin filed Bugzilla 1252142 requesting 7 certificate blocklist entries.
- 2016-03-01Andrew Williamson confirmed all requested certificates were blocked.
- 2016-03-01OneCRL entries were created for the 7 certificates with detail_name "exceptional SHA-1 Certificates".
- 2016-11-28The OneCRL records show last_modified_at timestamps on the entries.
AI-generated from the OneCRL record and linked Bugzilla thread. Mozilla and CCADB records remain authoritative.
Raw Remote Settings Record
{
"schema": 1552493024471,
"details": {
"bug": "https://bugzilla.mozilla.org/show_bug.cgi?id=1252142",
"who": ".",
"why": ".",
"name": "exceptional SHA-1 Certificates",
"created": "2016-03-01T21:22:27Z"
},
"enabled": true,
"issuerName": "MIG8MQswCQYDVQQGEwJVUzEXMBUGA1UEChMOVmVyaVNpZ24sIEluYy4xHzAdBgNVBAsTFlZlcmlTaWduIFRydXN0IE5ldHdvcmsxOzA5BgNVBAsTMlRlcm1zIG9mIHVzZSBhdCBodHRwczovL3d3dy52ZXJpc2lnbi5jb20vcnBhIChjKTEwMTYwNAYDVQQDEy1WZXJpU2lnbiBDbGFzcyAzIEludGVybmF0aW9uYWwgU2VydmVyIENBIC0gRzM=",
"serialNumber": "NMpMcEnex3eXx4ohk9glcQ==",
"id": "8e453b5c-3f81-2694-2f10-73ec8c406c49",
"last_modified": 1480349167827
}