OneCRL Entry
ae2dba14-429b-4f98-abfa-0b38e64af09e
Revocation Entry
- Status
- disabled
- Serial
13A8CBC9B35CE15B3A98EC0FBF87B3380E06B6AF- Last Modified
- 2022-03-24 18:06:20 UTC
- Schema
- 1648054861121
Issuer
- DN
- C=NL, O=Staat der Nederlanden, CN=Staat der Nederlanden Domein Server CA 2020
- DN SHA-256
f986cad4563886d2053582c6d1fbf5055878dd7c881d7e7f4093cbdd6c3aa65a- Issuer DER
MGMxCzAJBgNVBAYTAk5MMR4wHAYDVQQKDBVTdGFhdCBkZXIgTmVkZXJsYW5kZW4xNDAyBgNVBAMMK1N0YWF0IGRlciBOZWRlcmxhbmRlbiBEb21laW4gU2VydmVyIENBIDIwMjA=
Context
- Bugzilla
- 1761053
- Action
- On 2022-03-23, c**********l@bots.tld created a bug and proposed 15 disabled OneCRL issuer/serial additions based on revoked intermediate certificates reported in the CCADB; Dana Keeler approved staging on 2022-03-24 and production later that day.
- Confidence
- Explicit in OneCRL thread · 0.98
CCADB Link
AI Summary
Generated 2026-06-30 11:41 UTC · Model: gpt-5.4-miniThis bug added 15 OneCRL entries, all disabled, corresponding to revoked intermediate certificates reported in the CCADB. The additions were generated by the ccadb2onercl bot and then reviewed by Mozilla security staff. Kathleen Wilson explicitly confirmed the entries were correct and said TLS Canary was not needed for this batch. Dana Keeler approved the changes in Kinto staging and then in production, after which the bug was resolved FIXED. The thread does not state a specific CCADB revocation field or candidate-report state beyond the fact that the certificates were revoked in CCADB. The thread also does not name a separate external compliance incident or CA closure as the cause; only the CCADB revocation report is explicitly cited.
On 2022-03-23, c**********l@bots.tld created a bug and proposed 15 disabled OneCRL issuer/serial additions based on revoked intermediate certificates reported in the CCADB; Dana Keeler approved staging on 2022-03-24 and production later that day.
Explicitly stated trigger: revoked intermediate certificates reported in the CCADB; no specific revocation field, candidate-report state, or manual-addition rationale is stated.
Unknown / not stated; the thread only references CCADB-reported revocation and does not identify a separate compliance incident, root program report, m.d.s.p. thread, or CA closure.
Explicit in OneCRL thread · 0.98
- 2022-03-23c**********l@bots.tld opened bug 1761053 and proposed OneCRL additions based on revoked intermediate certificates reported in CCADB.
- 2022-03-23Kathleen Wilson confirmed the entries were correct and said TLS Canary was not needed.
- 2022-03-24Dana Keeler approved the changes in Kinto staging.
- 2022-03-24Dana Keeler approved the changes in production.
- 2022-03-24Bug 1761053 was resolved FIXED.
AI-generated from the OneCRL record and linked Bugzilla thread. Mozilla and CCADB records remain authoritative.
Raw Remote Settings Record
{
"schema": 1648054861121,
"details": {
"bug": "https://bugzilla.mozilla.org/show_bug.cgi?id=1761053",
"who": "",
"why": "",
"name": "",
"created": ""
},
"enabled": false,
"issuerName": "MGMxCzAJBgNVBAYTAk5MMR4wHAYDVQQKDBVTdGFhdCBkZXIgTmVkZXJsYW5kZW4xNDAyBgNVBAMMK1N0YWF0IGRlciBOZWRlcmxhbmRlbiBEb21laW4gU2VydmVyIENBIDIwMjA=",
"serialNumber": "E6jLybNc4Vs6mOwPv4ezOA4Gtq8=",
"id": "ae2dba14-429b-4f98-abfa-0b38e64af09e",
"last_modified": 1648145180717
}