Information Security Certification Authority
9d1000df-4c91-448e-9fe1-9f8b613ed89d
Revocation Entry
- Status
- enabled
- Serial
1089FC3F19C903F3839BCF70B97DC7CFAAD3D4DD- Last Modified
- 2021-07-08 21:37:26 UTC
- Schema
- 1625675805133
Issuer
- DN
- CN=Information Security Certification Authority, O=ISCA, C=KZ
- DN SHA-256
e14b60e76779d8927d4278b44223cf3d4362fa72866ab89a0e1b0698fc97a2a3- Issuer DER
MFMxNTAzBgNVBAMTLEluZm9ybWF0aW9uIFNlY3VyaXR5IENlcnRpZmljYXRpb24gQXV0aG9yaXR5MQ0wCwYDVQQKEwRJU0NBMQswCQYDVQQGEwJLWg==
Context
- Bugzilla
- 1719704
- Action
- Added a OneCRL revocation/block entry for CN=Information Security Certification Authority, O=ISCA, C=KZ by d**********r@mozilla.com on 2021-07-08T19:58:35Z; approved for production the same day by Kathleen Wilson.
- Confidence
- Explicit in OneCRL thread · 0.98
CCADB Link
- Issuer CA
- —
- CA Owner
- —
AI Summary
Generated 2026-06-30 10:28 UTC · Model: gpt-5.4-miniThis bug added a new OneCRL block entry for the Information Security Certification Authority, with the stated reason “Kazakhstan MITM (#8).” Kathleen Wilson opened the bug and requested that the new certificate be added after the ISCA CA PEM changed again. The OneCRL entry was created by d**********r@mozilla.com on 2021-07-08T19:58:35Z and later approved for production the same day. The thread explicitly says the key was changing each time, so blocking by public key hash would not work. The entry was verified in Firefox Nightly and Release on 2021-07-09. The thread does not state a CCADB revocation field or candidate-report state as the trigger, and it does not identify a separate CA closure; the only explicit external cause is the Kazakhstan MITM incident.
Added a OneCRL revocation/block entry for CN=Information Security Certification Authority, O=ISCA, C=KZ by d**********r@mozilla.com on 2021-07-08T19:58:35Z; approved for production the same day by Kathleen Wilson.
Unknown / not stated; the thread does not mention a CCADB revocation field, candidate report state, or manual-add qualification beyond the OneCRL request.
Kazakhstan MITM (#8) incident; no separate CA closure is stated.
Explicit in OneCRL thread · 0.98
- 2021-07-08Bug 1719704 opened to add another regenerated version of the Kazakhstan MITM root to OneCRL.
- 2021-07-08Kathleen Wilson requested adding the new ISCA certificate after the CA PEM changed again.
- 2021-07-08d**********r@mozilla.com noted the key was changing each time, so public key hash blocking would not work.
- 2021-07-08OneCRL entry was created for Information Security Certification Authority with reason Kazakhstan MITM (#8).
- 2021-07-08Kinto staging and then production were approved.
- 2021-07-09Kathleen Wilson verified the block in Firefox Nightly and Release profiles.
AI-generated from the OneCRL record and linked Bugzilla thread. Mozilla and CCADB records remain authoritative.
Raw Remote Settings Record
{
"schema": 1625675805133,
"details": {
"bug": "https://bugzilla.mozilla.org/show_bug.cgi?id=1719704",
"who": "dkeeler@mozilla.com",
"why": "Kazakhstan MITM (#8)",
"name": "Information Security Certification Authority",
"created": "2021-07-08T19:58:35Z"
},
"enabled": true,
"issuerName": "MFMxNTAzBgNVBAMTLEluZm9ybWF0aW9uIFNlY3VyaXR5IENlcnRpZmljYXRpb24gQXV0aG9yaXR5MQ0wCwYDVQQKEwRJU0NBMQswCQYDVQQGEwJLWg==",
"serialNumber": "EIn8PxnJA/ODm89wuX3Hz6rT1N0=",
"id": "9d1000df-4c91-448e-9fe1-9f8b613ed89d",
"last_modified": 1625780246117
}