OneCRL Entry
9f83f0b8-c5af-4cc2-996d-8896890af6a5
Revocation Entry
- Status
- disabled
- Serial
2CD48AD3B11E0F89- Last Modified
- 2025-07-14 21:43:28 UTC
- Schema
- 1752253362015
Issuer
- DN
- C=IT, L=Milan, O=Actalis S.p.A./03358520967, CN=Actalis Authentication Root CA
- DN SHA-256
02b7fea4088dcc670549c2202e8c9ee89e50349368c0dd3c115a9a6c716022aa- Issuer DER
MGsxCzAJBgNVBAYTAklUMQ4wDAYDVQQHDAVNaWxhbjEjMCEGA1UECgwaQWN0YWxpcyBTLnAuQS4vMDMzNTg1MjA5NjcxJzAlBgNVBAMMHkFjdGFsaXMgQXV0aGVudGljYXRpb24gUm9vdCBDQQ==
Context
- Bugzilla
- 1976939
- Action
- On 2025-07-11, the ccadb2onercl bot opened the bug and proposed adding 16 issuer/serial OneCRL entries derived from CCADB-reported revoked intermediate certificates. Ben Wilson confirmed the decoded list on 2025-07-12 and approved it for staging review. Dana Keeler approved the batch in staging on 2025-07-14 after checker output showed 16 changes waiting in production, and later approved it in production the same day. Ben Wilson verified the change in Firefox Nightly and Beta profiles on 2025-07-15.
- Confidence
- Explicit in OneCRL thread · 0.97
CCADB Link
- Issuer CA
- Actalis Authentication Root CA
- CA Owner
- Actalis
AI Summary
Generated 2026-06-30 11:13 UTC · Model: gpt-5.4Bug 1976939 was created by the Common CA Database to OneCRL Bot on 2025-07-11 to add OneCRL entries based on revoked intermediate certificates reported in the CCADB. The bug proposed 16 issuer-and-serial entries spanning certificates associated with OISTE WISeKey, UniTrust, GoDaddy, Starfield, Sectigo/Comodo, and Actalis. Ben Wilson decoded and confirmed the entries, stated they were the correct entries to add to OneCRL, and said TLS Canary was not needed for this batch. Review then proceeded through staging and production approval, with Dana Keeler reporting 16 changes waiting in production and later approving them in production. The resulting OneCRL records in the provided entry list are all disabled=false? No; they are enabled set to false, matching OneCRL blocklist-style entries as stored in the dataset. The thread explicitly ties qualification to revoked intermediate certificates reported in CCADB, but it does not state per-certificate revocation reasons, revocation dates, or candidate-report field values. The thread also does not cite any external compliance incident, mailing-list discussion, or CA closure as the cause of these revocations.
On 2025-07-11, the ccadb2onercl bot opened the bug and proposed adding 16 issuer/serial OneCRL entries derived from CCADB-reported revoked intermediate certificates. Ben Wilson confirmed the decoded list on 2025-07-12 and approved it for staging review. Dana Keeler approved the batch in staging on 2025-07-14 after checker output showed 16 changes waiting in production, and later approved it in production the same day. Ben Wilson verified the change in Firefox Nightly and Beta profiles on 2025-07-15.
Explicitly stated as revoked intermediate certificates reported in the CCADB; no per-certificate revocation reason, revocation date, candidate report state, or manual-addition explanation is stated in the thread.
unknown
Explicit in OneCRL thread · 0.97
- 2025-07-11ccadb2onercl bot filed Bug 1976939 stating it was adding entries to OneCRL based on revoked intermediate certificates reported in the CCADB.
- 2025-07-11The bot attached the issuer/serial list, proposed OneCRL additions, and a decoded attachment.
- 2025-07-12Ben Wilson posted decoded entries for the 16 certificates.
- 2025-07-12Ben Wilson stated these were the correct entries to add to OneCRL and that TLS Canary was not needed.
- 2025-07-14Dana Keeler reported checker output showing 16 changes waiting in production and approved the batch in staging.
- 2025-07-14Ben Wilson reconfirmed the production list matched the earlier attachment.
- 2025-07-14Dana Keeler approved the changes in production.
- 2025-07-15Ben Wilson verified the change in Firefox Nightly and Beta Release profiles.
AI-generated from the OneCRL record and linked Bugzilla thread. Mozilla and CCADB records remain authoritative.
Raw Remote Settings Record
{
"schema": 1752253362015,
"details": {
"bug": "https://bugzilla.mozilla.org/show_bug.cgi?id=1976939",
"who": "",
"why": "",
"name": "",
"created": ""
},
"enabled": false,
"issuerName": "MGsxCzAJBgNVBAYTAklUMQ4wDAYDVQQHDAVNaWxhbjEjMCEGA1UECgwaQWN0YWxpcyBTLnAuQS4vMDMzNTg1MjA5NjcxJzAlBgNVBAMMHkFjdGFsaXMgQXV0aGVudGljYXRpb24gUm9vdCBDQQ==",
"serialNumber": "LNSK07EeD4k=",
"id": "9f83f0b8-c5af-4cc2-996d-8896890af6a5",
"last_modified": 1752529408880
}