Information Security Certification Authority
befbd0cf-44bd-4bde-bb2c-bfd439e50dba
Revocation Entry
- Status
- enabled
- Serial
5877D30C6F0F3C367F8C34F286FDA52843BBB9F3- Last Modified
- 2021-06-02 20:21:12 UTC
- Schema
- 1622538398718
Issuer
- DN
- CN=Information Security Certification Authority, O=ISCA, C=KZ
- DN SHA-256
e14b60e76779d8927d4278b44223cf3d4362fa72866ab89a0e1b0698fc97a2a3- Issuer DER
MFMxNTAzBgNVBAMTLEluZm9ybWF0aW9uIFNlY3VyaXR5IENlcnRpZmljYXRpb24gQXV0aG9yaXR5MQ0wCwYDVQQKEwRJU0NBMQswCQYDVQQGEwJLWg==
Context
- Bugzilla
- 1713980
- Action
- Added the regenerated Information Security Certification Authority root to OneCRL by d**********r@mozilla.com on 2021-06-02T19:29:08Z, requested by Kathleen Wilson; the entry was later approved in Kinto production the same day.
- Confidence
- Explicit in OneCRL thread · 0.98
CCADB Link
- Issuer CA
- —
- CA Owner
- —
AI Summary
Generated 2026-06-30 10:41 UTC · Model: gpt-5.4-miniMozilla added the regenerated Information Security Certification Authority root to OneCRL. The action was initiated by Kathleen Wilson, who filed the bug and requested the addition after noting that the Kazakhstan government had regenerated the root certificate previously added to OneCRL. The OneCRL entry was created by dr@mozilla.com on 2021-06-02T19:29:08Z with the reason “Kazakhstan MITM (#6).” Kathleen Wilson then verified and approved it in Kinto staging, and dr@mozilla.com confirmed the test site showed revoked as expected before production approval. The thread does not state a CCADB revocation field or candidate-report state as the trigger, so that part is unknown from the explicit record. The external cause is explicitly tied to the Kazakhstan government regenerating the root certificate, with a Mozilla blog post cited in the bug.
Added the regenerated Information Security Certification Authority root to OneCRL by d**********r@mozilla.com on 2021-06-02T19:29:08Z, requested by Kathleen Wilson; the entry was later approved in Kinto production the same day.
Unknown / not stated; the thread only shows a OneCRL addition and does not cite a CCADB revocation field, candidate report state, or manual-add trigger beyond the OneCRL workflow.
The Kazakhstan government regenerated the root certificate previously used in the Kazakhstan MITM case; the bug cites Mozilla’s blog post https://blog.mozilla.org/netpolicy/2020/12/18/kazakhstan-root-2020/ as context.
Explicit in OneCRL thread · 0.98
- 2021-06-02Kathleen Wilson filed Bug 1713980 to add the regenerated ISCA root to OneCRL.
- 2021-06-02Kathleen Wilson stated the Kazakhstan government had regenerated the root certificate and provided the new cert details.
- 2021-06-02Kathleen Wilson verified and approved the change in Kinto staging.
- 2021-06-02d**********r@mozilla.com confirmed the test site showed revoked as expected and the OneCRL change was waiting in production.
- 2021-06-02Kathleen Wilson approved the change in Kinto production.
- 2021-06-02Kathleen Wilson verified the change in Firefox nightly and release profiles.
AI-generated from the OneCRL record and linked Bugzilla thread. Mozilla and CCADB records remain authoritative.
Raw Remote Settings Record
{
"schema": 1622538398718,
"details": {
"bug": "https://bugzilla.mozilla.org/show_bug.cgi?id=1713980",
"who": "dkeeler@mozilla.com",
"why": "Kazakhstan MITM (#6)",
"name": "Information Security Certification Authority",
"created": "2021-06-02T19:29:08Z"
},
"enabled": true,
"issuerName": "MFMxNTAzBgNVBAMTLEluZm9ybWF0aW9uIFNlY3VyaXR5IENlcnRpZmljYXRpb24gQXV0aG9yaXR5MQ0wCwYDVQQKEwRJU0NBMQswCQYDVQQGEwJLWg==",
"serialNumber": "WHfTDG8PPDZ/jDTyhv2lKEO7ufM=",
"id": "befbd0cf-44bd-4bde-bb2c-bfd439e50dba",
"last_modified": 1622665272229
}