← OneCRL Browser

Information Security Certification Authority

bd3be540-4f0c-4a0c-9524-98f6c6cfc2c6

Revocation Entry

Status
enabled
Serial
2309498E297C5FFE
Last Modified
2021-05-06 16:50:15 UTC
Schema
1620318295703

Issuer

DN
C=KZ, ST=Nur-Sultan, L=Nur-Sultan, O=ISCA, CN=Information Security Certification Authority
DN SHA-256
254aff5b83acba9528322b89d76ff8f1575f66b01decc4739bd21b6c274b9b0a
Issuer DER
MH0xCzAJBgNVBAYTAktaMRMwEQYDVQQIEwpOdXItU3VsdGFuMRMwEQYDVQQHEwpOdXItU3VsdGFuMQ0wCwYDVQQKEwRJU0NBMTUwMwYDVQQDEyxJbmZvcm1hdGlvbiBTZWN1cml0eSBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eQ==

Context

Bugzilla
1709666
Action
Added a OneCRL entry for 'Information Security Certification Authority' by d**********r@mozilla.com, requested by Kathleen Wilson, created 2021-05-06T00:05:29Z and last modified 2021-05-06T16:50:15Z.
Confidence
Explicit in OneCRL thread · 0.96

CCADB Link

Issuer CA
CA Owner

AI Summary

Generated 2026-06-30 10:40 UTC · Model: gpt-5.4-mini

This bug added a new OneCRL entry for the Information Security Certification Authority, the regenerated Kazakhstan MITM root. Kathleen Wilson initiated the request and explicitly asked for the regenerated root cert to be added to OneCRL. David Keeler then confirmed the entry was staged and that production changes were waiting, with the OneCRL record showing the issuer DN and serial for the certificate. The local OneCRL entry was created on 2021-05-06T00:05:29Z and last modified on 2021-05-06T16:50:15Z. The thread explicitly ties the qualification to the Kazakhstan MITM case (#5) and to the regenerated root certificate, but it does not state a CCADB revocation field or candidate-report state. The external cause is the Kazakhstan government’s regenerated root certificate, referenced to Mozilla’s blog post about the Kazakhstan root 2020 incident.

OneCRL action

Added a OneCRL entry for 'Information Security Certification Authority' by d**********r@mozilla.com, requested by Kathleen Wilson, created 2021-05-06T00:05:29Z and last modified 2021-05-06T16:50:15Z.

CCADB trigger

Manual addition for the Kazakhstan MITM (#5) regenerated root; no CCADB revocation field or candidate-report state is stated.

External cause

Kazakhstan government regenerated the root certificate used in the Kazakhstan MITM incident; the thread links to Mozilla’s blog post on the Kazakhstan root 2020 case.

Confidence

Explicit in OneCRL thread · 0.96

Chronology
  • 2021-05-05Bug 1709666 was created as a clone of Bug 1688277 to add the regenerated Kazakhstan MITM root to OneCRL.
  • 2021-05-05Kathleen Wilson requested adding the regenerated root certificate for Information Security Certification Authority to OneCRL.
  • 2021-05-06David Keeler confirmed the test site showed revoked as expected and that staging was updated with production changes waiting.
  • 2021-05-06The OneCRL entry for Information Security Certification Authority was created.
  • 2021-05-06Kathleen Wilson confirmed the new OneCRL entry was present in her Nightly Firefox profile.

AI-generated from the OneCRL record and linked Bugzilla thread. Mozilla and CCADB records remain authoritative.

Raw Remote Settings Record

{
    "schema": 1620318295703,
    "details": {
        "bug": "https://bugzilla.mozilla.org/show_bug.cgi?id=1709666",
        "who": "dkeeler@mozilla.com",
        "why": "Kazakhstan MITM (#5)",
        "name": "Information Security Certification Authority",
        "created": "2021-05-06T00:05:29Z"
    },
    "enabled": true,
    "issuerName": "MH0xCzAJBgNVBAYTAktaMRMwEQYDVQQIEwpOdXItU3VsdGFuMRMwEQYDVQQHEwpOdXItU3VsdGFuMQ0wCwYDVQQKEwRJU0NBMTUwMwYDVQQDEyxJbmZvcm1hdGlvbiBTZWN1cml0eSBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eQ==",
    "serialNumber": "IwlJjil8X/4=",
    "id": "bd3be540-4f0c-4a0c-9524-98f6c6cfc2c6",
    "last_modified": 1620319815847
}

We use only essential cookies and local browser storage for preferences and security. See our Privacy Policy for details.

Confirm action