← OneCRL Browser

OneCRL Entry

c26d58d0-63a0-42c9-bbb7-07b3475d7093

Revocation Entry

Status
disabled
Serial
33000000269AB02DDE29ABBCF7000000000026
Last Modified
2021-06-14 21:09:55 UTC
Schema
1623430892479

Issuer

DN
C=US, O=Microsoft Corporation, CN=Microsoft ECC Root Certificate Authority 2017
DN SHA-256
26a2d5d4f6c981b3123fedf7724bf25084a63dffdf6e01f7d1f5f50e9d043f82
Issuer DER
MGUxCzAJBgNVBAYTAlVTMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xNjA0BgNVBAMTLU1pY3Jvc29mdCBFQ0MgUm9vdCBDZXJ0aWZpY2F0ZSBBdXRob3JpdHkgMjAxNw==

Context

Bugzilla
1716034
Action
A large batch of issuer/serial entries for revoked intermediate certificates was added to OneCRL. The action was initiated by the Common CA Database to OneCRL Bot when it filed the bug on 2021-06-11T17:00:54Z, then reviewed by Mozilla staff, approved by d**********r@mozilla.com in Kinto Production on 2021-06-14T21:10:18Z, and subsequently verified by Kathleen Wilson.
Confidence
Explicit in OneCRL thread · 0.98

AI Summary

Generated 2026-06-30 11:41 UTC · Model: gpt-5.4

Bug 1716034 is a batch OneCRL case created by the Common CA Database to OneCRL Bot on 2021-06-11. The bug explicitly states that entries were being added to OneCRL based on revoked intermediate certificates reported in the CCADB. The proposed additions covered many issuer/serial pairs across multiple CA owners, and the bug included attachments listing the issuer/serial pairs and proposed OneCRL additions. Kathleen Wilson confirmed on 2021-06-11 that these were the correct entries to add and that TLS Canary was not needed for this batch. David Keeler later reported that onecrl-entry-checker output looked good and approved the changes in Kinto Production on 2021-06-14. Kathleen Wilson then verified the changes in Firefox Nightly and Firefox Release profiles. The thread does not state per-certificate CCADB revocation reasons, revocation dates, or any single external compliance incident explaining the listed revocations. Because the bug is a bulk CCADB-driven import, any certificate-specific cause would require separate evidence not present in this thread.

OneCRL action

A large batch of issuer/serial entries for revoked intermediate certificates was added to OneCRL. The action was initiated by the Common CA Database to OneCRL Bot when it filed the bug on 2021-06-11T17:00:54Z, then reviewed by Mozilla staff, approved by d**********r@mozilla.com in Kinto Production on 2021-06-14T21:10:18Z, and subsequently verified by Kathleen Wilson.

CCADB trigger

Explicitly CCADB-driven: the bot stated the entries were added based on revoked intermediate certificates reported in the CCADB. No per-entry revocation status fields, reasons, dates, or candidate-report state are stated in the thread.

External cause

Unknown; the thread does not identify a single external compliance incident, CA closure, root program report, or m.d.s.p. discussion as the cause of the revocations in this batch.

Confidence

Explicit in OneCRL thread · 0.98

Chronology
  • 2021-06-11Bug 1716034 was created by the Common CA Database to OneCRL Bot.
  • 2021-06-11Bot stated it was adding entries to OneCRL based on revoked intermediate certificates reported in the CCADB.
  • 2021-06-11Attachments were added listing issuer/serial pairs and proposed OneCRL additions.
  • 2021-06-11Kathleen Wilson confirmed the entries were correct and said TLS Canary was not needed for this batch.
  • 2021-06-14David Keeler attached onecrl-entry-checker output and said everything looked good.
  • 2021-06-14Kathleen Wilson said to proceed with approving the changes at Kinto Production.
  • 2021-06-14David Keeler approved the changes in production.
  • 2021-06-15Kathleen Wilson verified the changes in a Firefox Nightly profile.
  • 2021-06-16Kathleen Wilson verified the changes in a Firefox Release profile.

AI-generated from the OneCRL record and linked Bugzilla thread. Mozilla and CCADB records remain authoritative.

Raw Remote Settings Record

{
    "schema": 1623430892479,
    "details": {
        "bug": "https://bugzilla.mozilla.org/show_bug.cgi?id=1716034",
        "who": "",
        "why": "",
        "name": "",
        "created": ""
    },
    "enabled": false,
    "issuerName": "MGUxCzAJBgNVBAYTAlVTMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xNjA0BgNVBAMTLU1pY3Jvc29mdCBFQ0MgUm9vdCBDZXJ0aWZpY2F0ZSBBdXRob3JpdHkgMjAxNw==",
    "serialNumber": "MwAAACaasC3eKau89wAAAAAAJg==",
    "id": "c26d58d0-63a0-42c9-bbb7-07b3475d7093",
    "last_modified": 1623704995186
}

We use only essential cookies and local browser storage for preferences and security. See our Privacy Policy for details.

Confirm action