← OneCRL Browser

OneCRL Entry

a706658b-5671-47e8-8c2f-ad8296674b39

Revocation Entry

Status
disabled
Serial
06CFBA43CEEE00E9DF6FC9DB920BC6ECFBD0AB70
Last Modified
2025-08-22 04:33:07 UTC
Schema
1755622854805

Issuer

DN
C=CN, O=TrustAsia Technologies, Inc., CN=TrustAsia TLS ECC Root CA
DN SHA-256
7a309c2caccee214ee0c38be53387d5ad43641b5cd6873f6e09f62b3b1034973
Issuer DER
MFgxCzAJBgNVBAYTAkNOMSUwIwYDVQQKExxUcnVzdEFzaWEgVGVjaG5vbG9naWVzLCBJbmMuMSIwIAYDVQQDExlUcnVzdEFzaWEgVExTIEVDQyBSb290IENB

Context

Bugzilla
1983893
Action
Four disabled OneCRL issuer/serial entries were added for revoked intermediate certificates: two under issuer 'Actalis Authentication Root CA' and two under issuers 'TrustAsia TLS RSA Root CA' and 'TrustAsia TLS ECC Root CA'. The bug was initiated by the Common CA Database to OneCRL Bot on 2025-08-19, Ben Wilson specified the correct entries on 2025-08-20, staging was approved and validated by Daniel Keeler on 2025-08-21, production was approved by Daniel Keeler on 2025-08-22, and Ben Wilson verified the entries in Firefox Beta and Nightly later that day.
Confidence
Explicit in OneCRL thread · 0.97

AI Summary

Generated 2026-06-30 11:13 UTC · Model: gpt-5.4

This Bugzilla case tracks adding four revoked intermediate certificate entries to Mozilla OneCRL. The bug was created on 2025-08-19 by the Common CA Database to OneCRL Bot, which stated that the entries were being added based on revoked intermediate certificates reported in the CCADB. Ben Wilson then confirmed the specific four issuer/serial pairs to add, noting that they were only 4 of 15 CA revocations he had identified in the CCADB and that the other 11 would be handled later when the CCADB process was fixed. The four entries correspond to two Actalis-issued certificates under the Actalis Authentication Root CA and two TrustAsia-issued certificates under the TrustAsia TLS RSA Root CA and TrustAsia TLS ECC Root CA. Review and staging verification occurred on 2025-08-21, production approval occurred on 2025-08-22, and Ben Wilson later verified the changes in Firefox Beta and Nightly before closure. The thread does not state the individual revocation reasons, revocation dates, or any external compliance incident or CA closure explaining why these certificates had been revoked. A timeline-based inference is that qualification came from CCADB-reported revoked intermediates surfaced by the bot, but the exact CCADB candidate-report fields are not described in the thread.

OneCRL action

Four disabled OneCRL issuer/serial entries were added for revoked intermediate certificates: two under issuer 'Actalis Authentication Root CA' and two under issuers 'TrustAsia TLS RSA Root CA' and 'TrustAsia TLS ECC Root CA'. The bug was initiated by the Common CA Database to OneCRL Bot on 2025-08-19, Ben Wilson specified the correct entries on 2025-08-20, staging was approved and validated by Daniel Keeler on 2025-08-21, production was approved by Daniel Keeler on 2025-08-22, and Ben Wilson verified the entries in Firefox Beta and Nightly later that day.

CCADB trigger

Explicitly stated as revoked intermediate certificates reported in the CCADB. Ben Wilson also stated these were 4 of 15 CA revocations he had identified in the CCADB. No revocation reason, revocation date, or specific CCADB candidate-report field/state is stated.

External cause

unknown

Confidence

Explicit in OneCRL thread · 0.97

Chronology
  • 2025-08-19Bug 1983893 was created by the Common CA Database to OneCRL Bot to add entries to OneCRL based on revoked intermediate certificates reported in the CCADB.
  • 2025-08-19The bot attached issuer/serial data, proposed OneCRL additions, and decoded entry details.
  • 2025-08-20Ben Wilson stated these were only 4 of 15 CA revocations identified in the CCADB, confirmed the correct four entries, and said they had been filed in staging.
  • 2025-08-21Daniel Keeler approved the changes in staging, validated them with remote-settings-devtools, and attached onecrl-entry-checker output showing four production changes waiting.
  • 2025-08-21Ben Wilson verified the proposed additions were correct and requested approval in Kinto Production.
  • 2025-08-22Daniel Keeler approved the changes in production.
  • 2025-08-22Ben Wilson verified the changes in Firefox Beta and Nightly profiles and indicated the bug could be closed.
  • 2025-08-25The bug was resolved FIXED.

AI-generated from the OneCRL record and linked Bugzilla thread. Mozilla and CCADB records remain authoritative.

Raw Remote Settings Record

{
    "schema": 1755622854805,
    "details": {
        "bug": "https://bugzilla.mozilla.org/show_bug.cgi?id=1983893",
        "who": "",
        "why": "",
        "name": "",
        "created": ""
    },
    "enabled": false,
    "issuerName": "MFgxCzAJBgNVBAYTAkNOMSUwIwYDVQQKExxUcnVzdEFzaWEgVGVjaG5vbG9naWVzLCBJbmMuMSIwIAYDVQQDExlUcnVzdEFzaWEgVExTIEVDQyBSb290IENB",
    "serialNumber": "Bs+6Q87uAOnfb8nbkgvG7PvQq3A=",
    "id": "a706658b-5671-47e8-8c2f-ad8296674b39",
    "last_modified": 1755837187981
}

We use only essential cookies and local browser storage for preferences and security. See our Privacy Policy for details.

Confirm action