← OneCRL Browser

Revoked intermediates

b21c90ad-5618-40c1-ac75-eaf73b2c333b

Revocation Entry

Status: disabled
Serial: 46C74E0B17A96571C4B3512BC0F7
Last Modified: 2017-06-15 16:03:28 UTC
Schema: 1552493014308

Issuer

DN: C=BE, OU=Trusted Root, O=GlobalSign nv-sa, CN=Trusted Root CA G2
DN SHA-256: d2e22b23c473d1cb544150aa0c7acd0078af11a9f71c51b8d813adba0c19d5f2
Issuer DER: MFwxCzAJBgNVBAYTAkJFMRUwEwYDVQQLEwxUcnVzdGVkIFJvb3QxGTAXBgNVBAoTEEdsb2JhbFNpZ24gbnYtc2ExGzAZBgNVBAMTElRydXN0ZWQgUm9vdCBDQSBHMg==

Context

Bugzilla: 1373288
Action: Four revoked intermediate entries were prepared for addition to OneCRL in a Kinto-admin formatted attachment created by Mark Goodwin on 2017-06-15, validated as correct by Kathleen Wilson on 2017-06-16, compatibility-tested by Matt Wobensmith on 2017-06-26, and confirmed by Kathleen Wilson as added to OneCRL on 2017-06-28.
Confidence: Explicit in OneCRL thread · 0.93

CCADB Link

Issuer CA: Trusted Root CA G2
CA Owner: GlobalSign nv-sa

AI Summary

Generated 2026-06-30 11:49 UTC · Model: gpt-5.4

Bug 1373288 tracks the addition of four revoked intermediate certificate entries to Mozilla OneCRL. The bug was opened by Mark Goodwin on 2017-06-15, with an attachment containing revocation data for new records, and Kathleen Wilson later confirmed the entries were correct to add. The local OneCRL entry data tied to this bug shows three specific disabled records: one under GlobalSign's Trusted Root CA G2 and two under the Baltimore CyberTrust Root owned in CCADB by DigiCert. A tooling comment stated that the pending Kinto dataset matched the bug's expected changeset, reporting 444 added entries and no missing or deleted entries. Matt Wobensmith later ran a canary compatibility test using a revocations.txt file that included these revocations and reported zero errors. Kathleen Wilson confirmed on 2017-06-28 that the entries had been added to OneCRL. The bug title and comments indicate the source was a batch of CCADB-generated entries, but the thread does not state the specific revocation reason, revocation date, or candidate-report field values for these certificates. The thread also does not state any external compliance incident or CA shutdown as the cause for these revocations.

OneCRL action

Four revoked intermediate entries were prepared for addition to OneCRL in a Kinto-admin formatted attachment created by Mark Goodwin on 2017-06-15, validated as correct by Kathleen Wilson on 2017-06-16, compatibility-tested by Matt Wobensmith on 2017-06-26, and confirmed by Kathleen Wilson as added to OneCRL on 2017-06-28.

CCADB trigger

Explicitly described only as 'CCADB entries generated 2017-06-15T17:03:23Z' and as new revoked intermediate records. No specific CCADB revocation status fields, revocation reason, revocation date, or candidate-report qualification criteria are stated in the thread.

External cause

unknown

Confidence

Explicit in OneCRL thread · 0.93

Chronology

2017-06-15Mark Goodwin filed Bug 1373288 for CCADB-generated entries and attached revocation data for new records.
2017-06-15A tooling check reported the pending Kinto dataset matched the bug changeset.
2017-06-16Kathleen Wilson confirmed the entries were the correct ones to add to OneCRL.
2017-06-19Discussion clarified the difference between Kinto-admin input format and revocations.txt test format.
2017-06-22Mark Goodwin pointed to a revocations.txt file in Bug 1375006 that included the revocations from this bug.
2017-06-26Matt Wobensmith reported a canary compatibility test found zero errors.
2017-06-28Kathleen Wilson confirmed the entries had been added to OneCRL.
2021-04-15Automation moved the bug to Core::Security Block-lists, Allow-lists, and other State.

Bug 1343305 Bug 1369342 Bug 1375006 Bug 1373288

AI-generated from the OneCRL record and linked Bugzilla thread. Mozilla and CCADB records remain authoritative.

Status	Name	Issuer	Serial	CCADB	Modified
disabled	Revoked intermediates	C=BE, OU=Trusted Root, O=GlobalSign nv-sa, CN=Trusted Root CA G2	`46C74E0B17A96571C4B3512BC0F7`	Trusted Root CA G2 GlobalSign nv-sa	2017-06-15
disabled	Revoked intermediates	C=IE, O=Baltimore, OU=CyberTrust, CN=Baltimore CyberTrust Root	`0727A66D`	Baltimore CyberTrust Root DigiCert	2017-06-15
disabled	Revoked intermediates	C=IE, O=Baltimore, OU=CyberTrust, CN=Baltimore CyberTrust Root	`0727A66B`	Baltimore CyberTrust Root DigiCert	2017-06-15

Raw Remote Settings Record

{
    "schema": 1552493014308,
    "details": {
        "bug": "https://bugzilla.mozilla.org/show_bug.cgi?id=1373288",
        "who": ".",
        "why": "",
        "name": "Revoked intermediates",
        "created": "2017-06-15T16:43:23Z"
    },
    "enabled": false,
    "issuerName": "MFwxCzAJBgNVBAYTAkJFMRUwEwYDVQQLEwxUcnVzdGVkIFJvb3QxGTAXBgNVBAoTEEdsb2JhbFNpZ24gbnYtc2ExGzAZBgNVBAMTElRydXN0ZWQgUm9vdCBDQSBHMg==",
    "serialNumber": "RsdOCxepZXHEs1ErwPc=",
    "id": "b21c90ad-5618-40c1-ac75-eaf73b2c333b",
    "last_modified": 1497542608552
}