← OneCRL Browser

OneCRL Entry

9b13e978-d61b-4572-8227-5a297f82a11e

Revocation Entry

Status: disabled
Serial: 6A4596653CAD8B2E7C9F22CEB2AA6769
Last Modified: 2020-11-05 22:40:23 UTC
Schema: 1604163626424

Issuer

DN: C=NL, O=Staat der Nederlanden, CN=Staat der Nederlanden EV Intermediair CA
DN SHA-256: 416db71ff702ac678f5b7eb795daaa98272ab5f0c919bf80f02955a9b71f1f21
Issuer DER: MGAxCzAJBgNVBAYTAk5MMR4wHAYDVQQKDBVTdGFhdCBkZXIgTmVkZXJsYW5kZW4xMTAvBgNVBAMMKFN0YWF0IGRlciBOZWRlcmxhbmRlbiBFViBJbnRlcm1lZGlhaXIgQ0E=

Context

Bugzilla: 1674587
Action: Three OneCRL issuer/serial entries were proposed by the Common CA Database to OneCRL Bot on 2020-10-31 and then reviewed, stage-approved, tested, confirmed by Kathleen Wilson, and approved for production by J.C. Jones on 2020-11-05. The affected entries correspond to GlobalSign, Staat der Nederlanden EV Intermediair CA, and SECOM Trust Systems CO., LTD.; local entry metadata shows them last modified on 2020-11-05T22:40:23+00:00.
Confidence: Explicit in OneCRL thread · 0.98

CCADB Link

Issuer CA: Staat der Nederlanden EV Intermediair CA
CA Owner: Government of The Netherlands, PKIoverheid (Logius)

AI Summary

Generated 2026-06-30 11:42 UTC · Model: gpt-5.4

Bug 1674587 was created automatically by the Common CA Database to OneCRL Bot on 2020-10-31 for CCADB entries generated at 2020-10-31T17:00:16Z. The bug explicitly states that entries were being added to OneCRL based on revoked intermediate certificates reported in the CCADB. The proposed additions covered three issuer/serial pairs associated with GlobalSign, Staat der Nederlanden EV Intermediair CA, and SECOM Trust Systems CO., LTD. Review and testing were performed in stage by J.C. Jones, who approved the stage rollout on 2020-11-02 and confirmed receipt of the revocations in a Firefox profile on 2020-11-04. Kathleen Wilson confirmed on 2020-11-05 that these were the correct entries to add to OneCRL, and J.C. Jones approved production the same day. The local OneCRL entry metadata shows the three records as disabled and last modified at 2020-11-05T22:40:23+00:00. The thread does not state the specific CCADB revocation reason, revocation date, or any external compliance incident or CA closure that caused the revocations.

OneCRL action

Three OneCRL issuer/serial entries were proposed by the Common CA Database to OneCRL Bot on 2020-10-31 and then reviewed, stage-approved, tested, confirmed by Kathleen Wilson, and approved for production by J.C. Jones on 2020-11-05. The affected entries correspond to GlobalSign, Staat der Nederlanden EV Intermediair CA, and SECOM Trust Systems CO., LTD.; local entry metadata shows them last modified on 2020-11-05T22:40:23+00:00.

CCADB trigger

Explicitly stated as additions to OneCRL based on revoked intermediate certificates reported in the CCADB; no revocation reason, revocation date, or candidate-report state beyond that is stated.

External cause

unknown

Confidence

Explicit in OneCRL thread · 0.98

Chronology

2020-10-31Bug 1674587 was created by the Common CA Database to OneCRL Bot for CCADB entries generated at 2020-10-31T17:00:16Z.
2020-10-31Bot stated it was adding entries to OneCRL based on revoked intermediate certificates reported in the CCADB.
2020-10-31Bot attached issuer/serial pairs, proposed OneCRL additions, and decoded names and serials.
2020-11-02J.C. Jones identified the three additions and approved them at stage.
2020-11-04J.C. Jones confirmed receipt of all three revocations in a Firefox profile from the stage endpoint.
2020-11-05Kathleen Wilson confirmed that these were the correct entries to add to OneCRL.
2020-11-05J.C. Jones approved the production changes.
2020-11-05Local OneCRL metadata shows the three records last modified at 2020-11-05T22:40:23+00:00.
2021-04-15Automation moved the bug to Core::Security Block-lists, Allow-lists, and other State.

Bug 1674587 settings.stage.mozaws.net

AI-generated from the OneCRL record and linked Bugzilla thread. Mozilla and CCADB records remain authoritative.

Status	Name	Issuer	Serial	CCADB	Modified
disabled	—	OU=GlobalSign ECC Root CA - R5, O=GlobalSign, CN=GlobalSign	`01EE5F2279EBF4086959522393`	GlobalSign GlobalSign nv-sa	2020-11-05
disabled	—	C=NL, O=Staat der Nederlanden, CN=Staat der Nederlanden EV Intermediair CA	`6A4596653CAD8B2E7C9F22CEB2AA6769`	Staat der Nederlanden EV Intermediair CA Government of The Netherlands, PKIoverheid (Logius)	2020-11-05
disabled	—	C=JP, O=SECOM Trust Systems CO.,LTD., OU=Security Communication RootCA2	`22B9B0D6`	Security Communication RootCA2 SECOM Trust Systems CO., LTD.	2020-11-05

Raw Remote Settings Record

{
    "schema": 1604163626424,
    "details": {
        "bug": "https://bugzilla.mozilla.org/show_bug.cgi?id=1674587",
        "who": "",
        "why": "",
        "name": "",
        "created": ""
    },
    "enabled": false,
    "issuerName": "MGAxCzAJBgNVBAYTAk5MMR4wHAYDVQQKDBVTdGFhdCBkZXIgTmVkZXJsYW5kZW4xMTAvBgNVBAMMKFN0YWF0IGRlciBOZWRlcmxhbmRlbiBFViBJbnRlcm1lZGlhaXIgQ0E=",
    "serialNumber": "akWWZTytiy58nyLOsqpnaQ==",
    "id": "9b13e978-d61b-4572-8227-5a297f82a11e",
    "last_modified": 1604616023867
}