OneCRL Entry
bbfdf584-a0ee-48d3-9b75-1987b0a4b636
Revocation Entry
- Status
- enabled
- Serial
6C47089C34A88E43DDE0DEE30661558DA9CB2E70- Last Modified
- 2024-09-25 22:00:48 UTC
- Schema
- 1727282210311
Issuer
- DN
- CN=Information Security Certification Authority, O=ISCA, C=KZ
- DN SHA-256
e14b60e76779d8927d4278b44223cf3d4362fa72866ab89a0e1b0698fc97a2a3- Issuer DER
MFMxNTAzBgNVBAMTLEluZm9ybWF0aW9uIFNlY3VyaXR5IENlcnRpZmljYXRpb24gQXV0aG9yaXR5MQ0wCwYDVQQKEwRJU0NBMQswCQYDVQQGEwJLWg==
Context
- Bugzilla
- 1920157
- Action
- A OneCRL entry was added for issuer "CN=Information Security Certification Authority, O=ISCA, C=KZ" and serial 6C47089C34A88E43DDE0DEE30661558DA9CB2E70. Brian Wilson posted the OneCRL JSON to be added on 2024-09-24, Dana Keeler approved it in stage on 2024-09-25, and Brian Wilson confirmed on 2024-09-26 that it was in OneCRL.
- Confidence
- Explicit in OneCRL thread · 0.98
CCADB Link
- Issuer CA
- —
- CA Owner
- —
AI Summary
Generated 2026-06-30 10:24 UTC · Model: gpt-5.4Bug 1920157 tracks adding a certificate identified as "Information Security Certification Authority" to Mozilla OneCRL. The OneCRL entry added the issuer DN CN=Information Security Certification Authority, O=ISCA, C=KZ with serial number 6C47089C34A88E43DDE0DEE30661558DA9CB2E70. Dana Keeler opened the bug on 2024-09-20 and attached the certificate, stating that it appeared to have been regenerated again. Brian Wilson later provided the exact OneCRL record to add on 2024-09-24, and Dana Keeler approved it in stage on 2024-09-25. Brian Wilson confirmed on 2024-09-26 that the entry was now in OneCRL. The thread does not state any CCADB revocation status, revocation reason, or candidate-report qualification for this certificate. The thread explicitly references external reporting by OONI, Internet Freedom Kazakhstan, and Eurasian Digital Foundation about Kazakhstan TLS MITM activity since 2021 as the reason the certificate was investigated. The bug also explicitly notes that a duplicate, Bug 1920163, was merged into this case.
A OneCRL entry was added for issuer "CN=Information Security Certification Authority, O=ISCA, C=KZ" and serial 6C47089C34A88E43DDE0DEE30661558DA9CB2E70. Brian Wilson posted the OneCRL JSON to be added on 2024-09-24, Dana Keeler approved it in stage on 2024-09-25, and Brian Wilson confirmed on 2024-09-26 that it was in OneCRL.
unknown
The thread explicitly cites a new OONI / Internet Freedom Kazakhstan / Eurasian Digital Foundation report on Kazakhstan TLS man-in-the-middle attacks and also links a related net4people discussion; no CA closure is stated.
Explicit in OneCRL thread · 0.98
- 2024-09-20Dana Keeler opened Bug 1920157 and attached the Information Security Certification Authority certificate, saying it looked like they regenerated it again.
- 2024-09-20David Fifield copied notes from duplicate Bug 1920163, identifying the certificate, download URL, Wayback snapshots, and citing the new OONI/IFKZ/Eurasian Digital Foundation report.
- 2024-09-20David Fifield noted HTTP headers indicating the certificate became available for download around 2024-09-20 10:07:01 UTC.
- 2024-09-24Brian Wilson posted the exact OneCRL record information to be added.
- 2024-09-25Brian Wilson posted a crt.sh CA record link for the certificate.
- 2024-09-25Dana Keeler approved the entry in stage and asked for it to be added to production.
- 2024-09-26Brian Wilson confirmed the certificate was now in OneCRL.
AI-generated from the OneCRL record and linked Bugzilla thread. Mozilla and CCADB records remain authoritative.
Raw Remote Settings Record
{
"schema": 1727282210311,
"details": {
"bug": "1920157",
"who": "",
"why": "",
"name": "",
"created": ""
},
"enabled": true,
"issuerName": "MFMxNTAzBgNVBAMTLEluZm9ybWF0aW9uIFNlY3VyaXR5IENlcnRpZmljYXRpb24gQXV0aG9yaXR5MQ0wCwYDVQQKEwRJU0NBMQswCQYDVQQGEwJLWg==",
"serialNumber": "bEcInDSojkPd4N7jBmFVjanLLnA=",
"id": "bbfdf584-a0ee-48d3-9b75-1987b0a4b636",
"last_modified": 1727301648510
}