← OneCRL Browser

OneCRL Entry

938ea097-b56a-4286-9370-a1dabb46c908

Revocation Entry

Status: enabled
Serial: 583166B348B2A658CC928853CC1BDFE069933AED
Last Modified: 2018-02-09 14:05:54 UTC
Schema: 1552493002970

Issuer

DN: C=BM, O=QuoVadis Limited, CN=QuoVadis Root CA 2
DN SHA-256: f1502792df303efb232e64e5c472eff9804eeda35966f16a207cd4112b3d3b2f
Issuer DER: MEUxCzAJBgNVBAYTAkJNMRkwFwYDVQQKExBRdW9WYWRpcyBMaW1pdGVkMRswGQYDVQQDExJRdW9WYWRpcyBSb290IENBIDI=

Context

Bugzilla: 1437038
Action: On 2018-02-09T14:05:40Z, 13 intermediate CA revocation entries were generated from CCADB data and added to OneCRL; o**********s@mozilla.bugs initiated the bug and attached the revocation data, Kathleen Wilson confirmed the entries were correct, and w**********r@fastly.com later confirmed they were added.
Confidence: Explicit in OneCRL thread · 0.97

CCADB Link

Issuer CA: QuoVadis Root CA 2
CA Owner: DigiCert

AI Summary

Generated 2026-06-30 11:42 UTC · Model: gpt-5.4-mini

This Bugzilla case added 13 CA intermediate certificates to Mozilla OneCRL, with the entries generated from CCADB revocation data on 2018-02-09T14:05:40Z. The thread explicitly says the correct entries were to be added to OneCRL, and later confirms that the entries had been added. The initial action was initiated by o**********s@mozilla.bugs, who created the bug and attached revocation data files. Kathleen Wilson explicitly reviewed the attachment and confirmed the entries were correct for OneCRL, and TLS Canary was run with no regressions. The bug comments also show a Kinto dataset check finding 13 expected added entries and no missing or extra entries, followed by confirmation that the changes were triggered at Kinto and then added to production. The thread does not state a specific CCADB revocation reason or external compliance incident for these certificates, so that cause is not stated here.

OneCRL action

On 2018-02-09T14:05:40Z, 13 intermediate CA revocation entries were generated from CCADB data and added to OneCRL; o**********s@mozilla.bugs initiated the bug and attached the revocation data, Kathleen Wilson confirmed the entries were correct, and w**********r@fastly.com later confirmed they were added.

CCADB trigger

CCADB-generated revocation data / candidate report state is explicit; no specific revocation reason, revoked-status field, or external compliance trigger is stated in the thread.

External cause

Unknown / not stated

Confidence

Explicit in OneCRL thread · 0.97

Chronology

2018-02-09Bug 1437038 created; revocation data attachments posted for intermediates to be revoked.
2018-02-09Kathleen Wilson confirmed the attachment contained the correct entries to add to OneCRL.
2018-02-10TLS Canary pass reported no regressions.
2018-02-12Kinto dataset comparison found 13 expected added entries and triggered the change at Kinto.
2018-02-13w**********r@fastly.com confirmed the entries had been added to OneCRL.

Bug 1437038

AI-generated from the OneCRL record and linked Bugzilla thread. Mozilla and CCADB records remain authoritative.

Status	Name	Issuer	Serial	CCADB	Modified
enabled	—	C=DE, O=Deutsche Telekom AG, OU=T-TeleSec Trust Center, CN=Deutsche Telekom Root CA 2	`22C58380932FEEE6`	Deutsche Telekom Root CA 2 Deutsche Telekom Security GmbH	2018-02-09
enabled	—	C=BM, O=QuoVadis Limited, CN=QuoVadis Root CA 2	`583166B348B2A658CC928853CC1BDFE069933AED`	QuoVadis Root CA 2 DigiCert	2018-02-09
enabled	—	C=BM, O=QuoVadis Limited, CN=QuoVadis Root CA 1 G3	`3F26C6EB68EAA71298395E4C9570063C9603CBD3`	QuoVadis Root CA 1 G3 DigiCert	2018-02-09
enabled	—	C=BM, O=QuoVadis Limited, OU=Root Certification Authority, CN=QuoVadis Root Certification Authority	`421FD2B1`	QuoVadis Root Certification Authority DigiCert	2018-02-09
enabled	—	C=NL, O=Staat der Nederlanden, CN=Staat der Nederlanden Organisatie CA - G2	`01313311`	Staat der Nederlanden Organisatie CA - G2 Government of The Netherlands, PKIoverheid (Logius)	2018-02-09
enabled	—	C=NL, O=Staat der Nederlanden, CN=Staat der Nederlanden Burger CA - G2	`013137DF`	Staat der Nederlanden Burger CA - G2 Government of The Netherlands, PKIoverheid (Logius)	2018-02-09
enabled	—	C=IE, O=Baltimore, OU=CyberTrust, CN=Baltimore CyberTrust Root	`07279CA7`	Baltimore CyberTrust Root DigiCert	2018-02-09
enabled	—	C=AU, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Australia Class 2 CA - G2	`3193700B1D01023CD33A072F1EC99D85`	Symantec Australia Class 2 CA - G2 DigiCert	2018-02-09
enabled	—	C=PT, O=SCEE, CN=ECRaizEstado	`3D6C218C41E1D27E46E8FF1BF9B02472`	ECRaizEstado DigiCert	2018-02-09
enabled	—	C=IE, O=Baltimore, OU=CyberTrust, CN=Baltimore CyberTrust Root	`0727BFC4`	Baltimore CyberTrust Root DigiCert	2018-02-09
enabled	—	C=AU, O=Symantec Corporation, OU=VeriSign Trust Network, CN=Symantec Australia Class 2 CA	`367E911DA54898C12D1CB6CFAA5C8610`	Symantec Australia Class 2 CA DigiCert	2018-02-09
enabled	—	C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=(c) 2008 VeriSign, Inc. - For authorized use only, CN=VeriSign Universal Root Certification Authority	`5F6D973A5C1F7354DAC3F391C063887A`	VeriSign Universal Root Certification Authority DigiCert	2018-02-09
enabled	—	C=PT, O=SCEE, CN=ECRaizEstado	`3E0226786A8291AA46E8FE36E8D7BCE7`	ECRaizEstado DigiCert	2018-02-09

Raw Remote Settings Record

{
    "schema": 1552493002970,
    "details": {
        "bug": "https://bugzilla.mozilla.org/show_bug.cgi?id=1437038",
        "who": "",
        "why": "",
        "name": "",
        "created": "2018-02-09T14:05:40Z"
    },
    "enabled": true,
    "issuerName": "MEUxCzAJBgNVBAYTAkJNMRkwFwYDVQQKExBRdW9WYWRpcyBMaW1pdGVkMRswGQYDVQQDExJRdW9WYWRpcyBSb290IENBIDI=",
    "serialNumber": "WDFms0iypljMkohTzBvf4GmTOu0=",
    "id": "938ea097-b56a-4286-9370-a1dabb46c908",
    "last_modified": 1518185154165
}