Information Security Certification Authority
cd5f0792-b5d2-4215-a5eb-92fc483c3491
Revocation Entry
- Status
- enabled
- Serial
254498FCAADD96DE5181472ED07B163FF79E6AD3- Last Modified
- 2021-06-22 00:05:50 UTC
- Schema
- 1623872990204
Issuer
- DN
- CN=Information Security Certification Authority, O=ISCA, C=KZ
- DN SHA-256
e14b60e76779d8927d4278b44223cf3d4362fa72866ab89a0e1b0698fc97a2a3- Issuer DER
MFMxNTAzBgNVBAMTLEluZm9ybWF0aW9uIFNlY3VyaXR5IENlcnRpZmljYXRpb24gQXV0aG9yaXR5MQ0wCwYDVQQKEwRJU0NBMQswCQYDVQQGEwJLWg==
Context
- Bugzilla
- 1717548
- Action
- Added a OneCRL block entry for "Information Security Certification Authority" (ISCA) by d**********r@mozilla.com on 2021-06-21T23:32:05Z; the block was approved at Kinto Production on 2021-06-22 and verified in Firefox Nightly and Release profiles.
- Confidence
- Explicit in OneCRL thread · 0.98
CCADB Link
- Issuer CA
- —
- CA Owner
- —
AI Summary
Generated 2026-06-30 10:31 UTC · Model: gpt-5.4-miniThis bug added a regenerated Kazakhstan MITM root certificate to OneCRL for the Information Security Certification Authority (ISCA). Kathleen Wilson opened the bug on 2021-06-21 and explicitly requested that the regenerated root cert be added. David Keeler confirmed on 2021-06-22 that the staged block showed the test site revoked as expected and that production changes were waiting, then the entry was approved at Kinto Production. The OneCRL entry was created by d**********r@mozilla.com with the why field set to "Kazakhstan MITM (#7)" and later verified in Firefox Nightly and Release profiles. The thread explicitly ties the addition to the Kazakhstan government regenerating the root certificate previously added to OneCRL. No CCADB revocation field state is stated in the thread, so the qualification trigger is not explicitly documented here.
Added a OneCRL block entry for "Information Security Certification Authority" (ISCA) by d**********r@mozilla.com on 2021-06-21T23:32:05Z; the block was approved at Kinto Production on 2021-06-22 and verified in Firefox Nightly and Release profiles.
Unknown / not stated; the thread only shows a OneCRL block entry and staged/prod approval, with no explicit CCADB revocation field or candidate-report state mentioned.
The thread states the Kazakhstan government regenerated the root certificate previously added to OneCRL, referencing the Mozilla blog post about the Kazakhstan root 2020 incident; no separate CA closure is stated.
Explicit in OneCRL thread · 0.98
- 2021-06-21Kathleen Wilson opened Bug 1717548 to add another regenerated version of the Kazakhstan MITM root to OneCRL.
- 2021-06-21The OneCRL entry for Information Security Certification Authority was created by d**********r@mozilla.com with why "Kazakhstan MITM (#7)".
- 2021-06-22David Keeler confirmed the staged block showed the test site revoked as expected and production changes were waiting.
- 2021-06-22Kathleen Wilson approved the change at Kinto Production.
- 2021-06-22Kathleen Wilson verified the block in Firefox Nightly and Release profiles.
AI-generated from the OneCRL record and linked Bugzilla thread. Mozilla and CCADB records remain authoritative.
Raw Remote Settings Record
{
"schema": 1623872990204,
"details": {
"bug": "https://bugzilla.mozilla.org/show_bug.cgi?id=1717548",
"who": "dkeeler@mozilla.com",
"why": "Kazakhstan MITM (#7)",
"name": "Information Security Certification Authority",
"created": "2021-06-21T23:32:05Z"
},
"enabled": true,
"issuerName": "MFMxNTAzBgNVBAMTLEluZm9ybWF0aW9uIFNlY3VyaXR5IENlcnRpZmljYXRpb24gQXV0aG9yaXR5MQ0wCwYDVQQKEwRJU0NBMQswCQYDVQQGEwJLWg==",
"serialNumber": "JUSY/Krdlt5RgUcu0HsWP/eeatM=",
"id": "cd5f0792-b5d2-4215-a5eb-92fc483c3491",
"last_modified": 1624320350090
}