← OneCRL Browser

OneCRL Entry

d28c363b-b7a2-4eac-b1fe-bee041912d9f

Revocation Entry

Status
disabled
Serial
018BD2F900F7301C73EC5F583AEBCE
Last Modified
2025-01-08 22:18:56 UTC
Schema
1734800449538

Issuer

DN
C=FI, O=Telia Finland Oyj, CN=Telia Root CA v2
DN SHA-256
d77acfa9a5e7c356566f566430e80532ad5697386f4ed01f2e23e4f4fc149b5b
Issuer DER
MEQxCzAJBgNVBAYTAkZJMRowGAYDVQQKDBFUZWxpYSBGaW5sYW5kIE95ajEZMBcGA1UEAwwQVGVsaWEgUm9vdCBDQSB2Mg==

Context

Bugzilla
1938770
Action
Fifteen disabled OneCRL records tied to bug 1938770 were added for specific issuer/serial pairs representing revoked intermediate certificates, initiated by the Common CA Database to OneCRL Bot when it opened the bug on 2024-12-21. Ben Wilson explicitly confirmed on 2025-01-06 that these were the correct entries, staging approval was recorded on 2025-01-07, production approval on 2025-01-08, and propagation to OneCRL and Firefox profiles was verified on 2025-01-09.
Confidence
Explicit in OneCRL thread · 0.98

CCADB Link

Issuer CA
Telia Root CA v2
CA Owner
Telia Company

AI Summary

Generated 2026-06-30 11:13 UTC · Model: gpt-5.4

Bug 1938770 tracks a batch addition of revoked intermediate certificate entries to Mozilla OneCRL. The bug was created on 2024-12-21 by the Common CA Database to OneCRL Bot, which stated that it was adding entries to OneCRL based on revoked intermediate certificates reported in the CCADB. The proposed additions covered 15 issuer-and-serial entries associated with SwissSign AG, Telia Company, Krajowa Izba Rozliczeniowa S.A. (KIR), and SECOM Trust Systems Co., Ltd. On 2025-01-06, Ben Wilson confirmed that these were the correct entries to add to OneCRL. The entries were then approved in staging on 2025-01-07, confirmed as correct for production on 2025-01-08, approved in production on 2025-01-08, and verified as propagated to OneCRL and Firefox profiles on 2025-01-09. The thread does not state individual revocation reasons, revocation dates, or any external compliance incident for the listed certificates. It also does not cite a related CA incident bug, root program report, or mailing-list discussion explaining why the certificates had been revoked.

OneCRL action

Fifteen disabled OneCRL records tied to bug 1938770 were added for specific issuer/serial pairs representing revoked intermediate certificates, initiated by the Common CA Database to OneCRL Bot when it opened the bug on 2024-12-21. Ben Wilson explicitly confirmed on 2025-01-06 that these were the correct entries, staging approval was recorded on 2025-01-07, production approval on 2025-01-08, and propagation to OneCRL and Firefox profiles was verified on 2025-01-09.

CCADB trigger

Explicitly stated as revoked intermediate certificates reported in the CCADB; no individual CCADB revocation reason, revocation date, candidate-report field state, or manual-addition explanation is given in the thread.

External cause

unknown

Confidence

Explicit in OneCRL thread · 0.98

Chronology
  • 2024-12-21ccadb2onercl bot opened Bug 1938770 and said it was adding entries to OneCRL based on revoked intermediate certificates reported in the CCADB.
  • 2024-12-21Bot attached issuer/serial pairs, proposed OneCRL additions, and decoded entry details.
  • 2025-01-06David Keeler asked Ben Wilson to confirm whether the entries were correct.
  • 2025-01-06Ben Wilson confirmed these were the correct entries to add to OneCRL and listed staging and verification steps.
  • 2025-01-07Attachment with compare.py output was added noting approval in staging.
  • 2025-01-08Ben Wilson said the staging entries were correct and could be moved into production.
  • 2025-01-08David Keeler recorded approval in production.
  • 2025-01-09Ben Wilson verified that the additions had propagated to OneCRL and Firefox profiles.

AI-generated from the OneCRL record and linked Bugzilla thread. Mozilla and CCADB records remain authoritative.

Raw Remote Settings Record

{
    "schema": 1734800449538,
    "details": {
        "bug": "https://bugzilla.mozilla.org/show_bug.cgi?id=1938770",
        "who": "",
        "why": "",
        "name": "",
        "created": ""
    },
    "enabled": false,
    "issuerName": "MEQxCzAJBgNVBAYTAkZJMRowGAYDVQQKDBFUZWxpYSBGaW5sYW5kIE95ajEZMBcGA1UEAwwQVGVsaWEgUm9vdCBDQSB2Mg==",
    "serialNumber": "AYvS+QD3MBxz7F9YOuvO",
    "id": "d28c363b-b7a2-4eac-b1fe-bee041912d9f",
    "last_modified": 1736374736456
}

We use only essential cookies and local browser storage for preferences and security. See our Privacy Policy for details.

Confirm action