OneCRL Entry
936c78c6-41e6-4de9-ac19-69096be77277
Revocation Entry
- Status
- disabled
- Serial
00AC9A58D8637568D2CDFDDC1C7955CC- Last Modified
- 2025-09-11 18:59:28 UTC
- Schema
- 1757350848496
Issuer
- DN
- C=US, O=Entrust, Inc., OU=See www.entrust.net/legal-terms, OU=(c) 2009 Entrust, Inc. - for authorized use only, CN=Entrust Root Certification Authority - G2
- DN SHA-256
4a52f0f2755d03c6917af91b3dfb35b318d11974d77f6c48a4b3571a91e43042- Issuer DER
MIG+MQswCQYDVQQGEwJVUzEWMBQGA1UEChMNRW50cnVzdCwgSW5jLjEoMCYGA1UECxMfU2VlIHd3dy5lbnRydXN0Lm5ldC9sZWdhbC10ZXJtczE5MDcGA1UECxMwKGMpIDIwMDkgRW50cnVzdCwgSW5jLiAtIGZvciBhdXRob3JpemVkIHVzZSBvbmx5MTIwMAYDVQQDEylFbnRydXN0IFJvb3QgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkgLSBHMg==
Context
- Bugzilla
- 1987472
- Action
- Eleven issuer/serial pairs were proposed for addition to OneCRL by the Common CA Database to OneCRL Bot on 2025-09-08, based on revoked intermediate certificates reported in the CCADB. Ben Wilson confirmed the 11 decoded entries were correct for staging review on 2025-09-08. David Keeler approved them in staging on 2025-09-11 and then approved them in production on 2025-09-11.
- Confidence
- Explicit in OneCRL thread · 0.96
CCADB Link
- Issuer CA
- Entrust Root Certification Authority - G2
- CA Owner
- Sectigo
AI Summary
Generated 2026-06-30 11:13 UTC · Model: gpt-5.4Bug 1987472 is a Mozilla OneCRL case automatically created by the Common CA Database to OneCRL Bot on 2025-09-08. The bot stated that it was adding entries to OneCRL based on revoked intermediate certificates reported in the CCADB. The bug proposed 11 issuer/serial OneCRL entries, and Ben Wilson confirmed that the decoded attachment contained the correct 11 entries for review and approval in Kinto Staging. On 2025-09-11, Mozilla staff approved the changes in staging and then in production, and a CCADB incident-reporting account confirmed the changes were correct. The local OneCRL entry data shows the affected certificates were associated with Entrust and AffirmTrust issuers, with CCADB CA owners listed as Entrust or Sectigo. The thread does not state the specific CCADB revocation reason codes, revocation dates, or candidate-report field values for each certificate. The thread also does not state any external compliance incident, CA closure, or separate Bugzilla incident as the cause of the revocations. The entries are now disabled in the provided local OneCRL snapshot, but the bug thread itself documents their addition and approval in September 2025.
Eleven issuer/serial pairs were proposed for addition to OneCRL by the Common CA Database to OneCRL Bot on 2025-09-08, based on revoked intermediate certificates reported in the CCADB. Ben Wilson confirmed the 11 decoded entries were correct for staging review on 2025-09-08. David Keeler approved them in staging on 2025-09-11 and then approved them in production on 2025-09-11.
Explicitly stated as revoked intermediate certificates reported in the CCADB. No specific revocation reason, revocation date, candidate report state, or manual-addition rationale is stated in the thread.
unknown
Explicit in OneCRL thread · 0.96
- 2025-09-08Bug 1987472 was created by the Common CA Database to OneCRL Bot.
- 2025-09-08Bot stated it was adding entries to OneCRL based on revoked intermediate certificates reported in the CCADB.
- 2025-09-08Attachments were created with issuer/serial pairs and proposed OneCRL additions.
- 2025-09-08Ben Wilson confirmed the decoded attachment contained the correct 11 OneCRL entries for staging review.
- 2025-09-09Bot posted that the changes were still in review.
- 2025-09-10Bot posted that the changes were still in review.
- 2025-09-11Bot posted that the changes were still in review.
- 2025-09-11David Keeler approved the 11 changes in staging.
- 2025-09-11CCADB incident-reporting account said the changes were correct and could proceed to production.
- 2025-09-11David Keeler approved the changes in production.
- 2025-09-15Ben Wilson verified the entries were present in local Firefox profiles and at crt.sh/mozilla-onecrl.
AI-generated from the OneCRL record and linked Bugzilla thread. Mozilla and CCADB records remain authoritative.
Raw Remote Settings Record
{
"schema": 1757350848496,
"details": {
"bug": "https://bugzilla.mozilla.org/show_bug.cgi?id=1987472",
"who": "",
"why": "",
"name": "",
"created": ""
},
"enabled": false,
"issuerName": "MIG+MQswCQYDVQQGEwJVUzEWMBQGA1UEChMNRW50cnVzdCwgSW5jLjEoMCYGA1UECxMfU2VlIHd3dy5lbnRydXN0Lm5ldC9sZWdhbC10ZXJtczE5MDcGA1UECxMwKGMpIDIwMDkgRW50cnVzdCwgSW5jLiAtIGZvciBhdXRob3JpemVkIHVzZSBvbmx5MTIwMAYDVQQDEylFbnRydXN0IFJvb3QgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkgLSBHMg==",
"serialNumber": "AKyaWNhjdWjSzf3cHHlVzA==",
"id": "936c78c6-41e6-4de9-ac19-69096be77277",
"last_modified": 1757617168010
}