OneCRL Entry
b8043bef-5b50-48d6-8f99-99c0d54d0885
Revocation Entry
- Status
- disabled
- Serial
55672BE637DEC08F282C06964A184398E9922EC5- Last Modified
- 2025-05-21 00:25:34 UTC
- Schema
- 1746810063637
Issuer
- DN
- C=FR, O=Dhimyotis, OU=0002 48146308100036, CN=Certigna Root CA
- DN SHA-256
18f431ac72da138aaad6ac26bd50da8157f01cf1b68c95ef34fad74d033d0a80- Issuer DER
MFoxCzAJBgNVBAYTAkZSMRIwEAYDVQQKDAlEaGlteW90aXMxHDAaBgNVBAsMEzAwMDIgNDgxNDYzMDgxMDAwMzYxGTAXBgNVBAMMEENlcnRpZ25hIFJvb3QgQ0E=
Context
- Bugzilla
- 1965541
- Action
- On 2025-05-20, Ben Wilson manually added the intermediate CA certificate for SZAFIR Trusted CA3 to remote-settings-staging; on 2025-05-21, d**********r@mozilla.com approved the changes in production, and Ben Wilson confirmed 15 revoked CA certificates were in OneCRL.
- Confidence
- Explicit in OneCRL thread · 0.98
CCADB Link
- Issuer CA
- Certigna Root CA
- CA Owner
- Certigna
AI Summary
Generated 2026-06-30 09:57 UTC · Model: gpt-5.4-miniThis bug added 15 revoked CA certificate entries to OneCRL. The initial action was initiated by the CCADB-to-OneCRL bot, which opened the bug and attached the proposed issuer/serial pairs from revoked intermediate certificates reported in the CCADB. Ben Wilson then explicitly requested adding SZAFIR Trusted CA3 to the current batch and manually added that intermediate CA certificate to remote-settings-staging before production approval. The thread states the batch contained 15 CA certificate entries and that they were approved in production on 2025-05-21. The OneCRL record for SZAFIR Trusted CA3 shows it was manually added because it was not included in the batch. The thread explicitly states the CCADB basis was revoked intermediate certificates reported in the CCADB, but it does not state a specific CCADB candidate-report state or revocation field for the full batch. No external compliance incident or CA closure is stated in the thread.
On 2025-05-20, Ben Wilson manually added the intermediate CA certificate for SZAFIR Trusted CA3 to remote-settings-staging; on 2025-05-21, d**********r@mozilla.com approved the changes in production, and Ben Wilson confirmed 15 revoked CA certificates were in OneCRL.
Explicitly stated: revoked intermediate certificates reported in the CCADB; one entry (SZAFIR Trusted CA3) was manually added because it was not included in the batch. No specific candidate-report state or revocation field beyond the revocation date 2025-03-05 for SZAFIR Trusted CA3 is stated.
Unknown / not stated
Explicit in OneCRL thread · 0.98
- 2025-05-09ccadb2onercl bot opened the bug and said it was adding entries based on revoked intermediate certificates reported in the CCADB.
- 2025-05-19Ben Wilson requested adding SZAFIR Trusted CA3 to the current batch and provided its revocation date of 2025-03-05.
- 2025-05-20Ben Wilson manually added SZAFIR Trusted CA3 to remote-settings-staging; the batch was described as 15 CA certificate entries.
- 2025-05-21d**********r@mozilla.com approved the changes in production.
- 2025-05-21Ben Wilson confirmed the 15 revoked CA certificates were now in OneCRL and his Firefox profile.
AI-generated from the OneCRL record and linked Bugzilla thread. Mozilla and CCADB records remain authoritative.
Raw Remote Settings Record
{
"schema": 1746810063637,
"details": {
"bug": "https://bugzilla.mozilla.org/show_bug.cgi?id=1965541",
"who": "",
"why": "",
"name": "",
"created": ""
},
"enabled": false,
"issuerName": "MFoxCzAJBgNVBAYTAkZSMRIwEAYDVQQKDAlEaGlteW90aXMxHDAaBgNVBAsMEzAwMDIgNDgxNDYzMDgxMDAwMzYxGTAXBgNVBAMMEENlcnRpZ25hIFJvb3QgQ0E=",
"serialNumber": "VWcr5jfewI8oLAaWShhDmOmSLsU=",
"id": "b8043bef-5b50-48d6-8f99-99c0d54d0885",
"last_modified": 1747787134511
}