OneCRL Entry
bc098dc1-29b5-4604-a794-449f31ee0753
Revocation Entry
- Status
- enabled
- Serial
009898E8- Last Modified
- 2021-02-25 01:50:22 UTC
- Schema
- 1614215515705
Issuer
- DN
- C=NL, O=Staat der Nederlanden, CN=Staat der Nederlanden EV Root CA
- DN SHA-256
30533f957d9fbc4fcc1ac963b689ffb926f1c5ef2164723e7dbe2c28a2015bfa- Issuer DER
MFgxCzAJBgNVBAYTAk5MMR4wHAYDVQQKDBVTdGFhdCBkZXIgTmVkZXJsYW5kZW4xKTAnBgNVBAMMIFN0YWF0IGRlciBOZWRlcmxhbmRlbiBFViBSb290IENB
Context
- Bugzilla
- 1694779
- Action
- On 2021-02-25, Kathleen Wilson requested a OneCRL fix for an entry whose serial needed the leading 00 restored, and two other OneCRL entries were removed; David Keeler confirmed the update and staged it for production.
- Confidence
- Explicit in OneCRL thread · 0.96
CCADB Link
AI Summary
Generated 2026-06-30 10:41 UTC · Model: gpt-5.4-miniThis Bugzilla case updated OneCRL with one corrected revocation entry for the Staat der Nederlanden EV Root CA and removed two other OneCRL entries that were identified as no longer needed. Kathleen Wilson opened the bug after noticing that three OneCRL serial numbers were missing a leading 00 compared with the certificate serials. David Keeler confirmed that Firefox requires the OneCRL serial contents to match the certificate serial exactly, so the entry with the missing leading 00 had to be updated. The thread explicitly states that the first entry was added to OneCRL via Bug 1678378, and that the other two entries were added via Bugs 1155145 and 1214321#c26. The OneCRL update was staged on 2021-02-25 and Kathleen later confirmed the changes were present in her Firefox profile and then in Firefox Release. The thread does not state a CCADB revocation-field trigger or candidate-report state for this case. The external cause is only partially stated: one removed entry was said to be signed by a certificate that was itself revoked, while the other removal was requested in another bug.
On 2021-02-25, Kathleen Wilson requested a OneCRL fix for an entry whose serial needed the leading 00 restored, and two other OneCRL entries were removed; David Keeler confirmed the update and staged it for production.
Unknown / not stated; the thread only says Firefox requires exact serial matching and that one removed entry was signed by a certificate that was itself revoked, while another removal was requested in Bug 1337228.
Partially stated: one removed entry was signed by a certificate that was itself revoked; the other removal was requested in Bug 1337228. No CCADB candidate-report or explicit CA closure is stated.
Explicit in OneCRL thread · 0.96
- 2021-02-24Kathleen Wilson filed Bug 1694779 about three OneCRL entries missing a leading 00.
- 2021-02-25David Keeler confirmed Firefox requires exact serial matching and said the OneCRL entry with the missing 00 must be updated.
- 2021-02-25The OneCRL update was staged, adding the corrected entry and removing two others.
- 2021-02-25Kathleen Wilson confirmed the updates were in her Firefox profile.
- 2021-02-26Kathleen Wilson confirmed the updates were in her Firefox Release profile.
AI-generated from the OneCRL record and linked Bugzilla thread. Mozilla and CCADB records remain authoritative.
Raw Remote Settings Record
{
"schema": 1614215515705,
"details": {
"bug": "https://bugzilla.mozilla.org/show_bug.cgi?id=1694779",
"who": "",
"why": "",
"name": "",
"created": "2021-02-25T00:48:11Z"
},
"enabled": true,
"issuerName": "MFgxCzAJBgNVBAYTAk5MMR4wHAYDVQQKDBVTdGFhdCBkZXIgTmVkZXJsYW5kZW4xKTAnBgNVBAMMIFN0YWF0IGRlciBOZWRlcmxhbmRlbiBFViBSb290IENB",
"serialNumber": "AJiY6A==",
"id": "bc098dc1-29b5-4604-a794-449f31ee0753",
"last_modified": 1614217822898
}