OneCRL Entry
c84c4011-c6d4-4b04-93fa-0b6581bc17ce
Revocation Entry
- Status
- disabled
- Serial
0A4F7939B52AA411EC887ECC60204145- Last Modified
- 2026-06-11 22:56:44 UTC
- Schema
- 1781197370693
Issuer
- DN
- C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Global Root G2
- DN SHA-256
b965834d63c2aa0675acd92be6ca95c69826a1180f6b594dec731a6cd6dac9d4- Issuer DER
MGExCzAJBgNVBAYTAlVTMRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5jb20xIDAeBgNVBAMTF0RpZ2lDZXJ0IEdsb2JhbCBSb290IEcy
Context
- Bugzilla
- 2046880
- Action
- 37 CA certificates were added to OneCRL from a CCADB-derived list; initiated by c**********l@bots.tld on 2026-06-11T17:02:37Z, reviewed by Ben Wilson, approved in staging by d**********r@mozilla.com at 2026-06-11T18:36:42Z, and approved in production at 2026-06-11T22:57:03Z.
- Confidence
- Explicit in OneCRL thread · 0.98
CCADB Link
- Issuer CA
- DigiCert Global Root G2
- CA Owner
- DigiCert
AI Summary
Generated 2026-06-30 10:49 UTC · Model: gpt-5.4-miniThis Bugzilla case added 37 CA certificates to Mozilla OneCRL. The action was initiated by the ccadb2onercl bot, which opened the bug and attached the proposed issuer/serial pairs on 2026-06-11T17:02:37Z. Ben Wilson reviewed the list, confirmed that 37 CA certificates needed to be added, and requested production approval later that day. David Keeler approved the changes in staging and then in production on 2026-06-11. The thread explicitly says the entries were based on revoked intermediate certificates reported in the CCADB, but it does not state the specific CCADB revocation fields or candidate-report state that qualified them. The thread also does not name an external compliance incident or CA closure; only the CCADB-reported revocations are stated. Timeline-wise, the OneCRL additions were approved in production on 2026-06-11 and were confirmed present in Firefox profiles by 2026-06-12.
37 CA certificates were added to OneCRL from a CCADB-derived list; initiated by c**********l@bots.tld on 2026-06-11T17:02:37Z, reviewed by Ben Wilson, approved in staging by d**********r@mozilla.com at 2026-06-11T18:36:42Z, and approved in production at 2026-06-11T22:57:03Z.
Explicitly stated trigger: revoked intermediate certificates reported in the CCADB; specific revocation fields or candidate-report state not stated.
Unknown / not stated; the thread only references CCADB-reported revoked intermediate certificates and does not identify a separate compliance incident or CA closure.
Explicit in OneCRL thread · 0.98
- 2026-06-11ccadb2onercl bot opened the bug and attached proposed OneCRL additions based on revoked intermediate certificates reported in CCADB.
- 2026-06-11Ben Wilson said 37 CA certificates needed to be added and were ready for review in Staging.
- 2026-06-11David Keeler marked the changes approved in stage.
- 2026-06-11Ben Wilson asked to proceed with production approval.
- 2026-06-11David Keeler approved the changes in production.
- 2026-06-12Ben Wilson said the certificates were in Firefox profiles and he would update them in CCADB.
AI-generated from the OneCRL record and linked Bugzilla thread. Mozilla and CCADB records remain authoritative.
Raw Remote Settings Record
{
"schema": 1781197370693,
"details": {
"bug": "https://bugzilla.mozilla.org/show_bug.cgi?id=2046880",
"who": "",
"why": "",
"name": "",
"created": ""
},
"enabled": false,
"issuerName": "MGExCzAJBgNVBAYTAlVTMRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5jb20xIDAeBgNVBAMTF0RpZ2lDZXJ0IEdsb2JhbCBSb290IEcy",
"serialNumber": "Ck95ObUqpBHsiH7MYCBBRQ==",
"id": "c84c4011-c6d4-4b04-93fa-0b6581bc17ce",
"last_modified": 1781218604584
}