OneCRL Entry
d59a7ea9-fef8-4133-886c-31a25f543e7e
Revocation Entry
- Status
- disabled
- Serial
1F00000007C30FBC43144D3B82000000000007- Last Modified
- 2025-07-14 21:43:28 UTC
- Schema
- 1752253362735
Issuer
- DN
- C=CH, O=WISeKey, OU=OISTE Foundation Endorsed, CN=OISTE WISeKey Global Root GC CA
- DN SHA-256
8d9912c2764827c085ee2c3d08169e28d80a1e2618948faacb59f0d436a1c170- Issuer DER
MG0xCzAJBgNVBAYTAkNIMRAwDgYDVQQKEwdXSVNlS2V5MSIwIAYDVQQLExlPSVNURSBGb3VuZGF0aW9uIEVuZG9yc2VkMSgwJgYDVQQDEx9PSVNURSBXSVNlS2V5IEdsb2JhbCBSb290IEdDIENB
Context
- Bugzilla
- 1976939
- Action
- On 2025-07-11, the ccadb2onercl bot opened the bug and proposed adding 16 issuer/serial OneCRL entries derived from CCADB-reported revoked intermediate certificates. Ben Wilson confirmed the decoded list on 2025-07-12 and approved it for staging review. Dana Keeler approved the batch in staging on 2025-07-14 after checker output showed 16 changes waiting in production, and later approved it in production the same day. Ben Wilson verified the change in Firefox Nightly and Beta profiles on 2025-07-15.
- Confidence
- Explicit in OneCRL thread · 0.97
CCADB Link
- Issuer CA
- OISTE WISeKey Global Root GC CA
- CA Owner
- OISTE
AI Summary
Generated 2026-06-30 11:13 UTC · Model: gpt-5.4Bug 1976939 was created by the Common CA Database to OneCRL Bot on 2025-07-11 to add OneCRL entries based on revoked intermediate certificates reported in the CCADB. The bug proposed 16 issuer-and-serial entries spanning certificates associated with OISTE WISeKey, UniTrust, GoDaddy, Starfield, Sectigo/Comodo, and Actalis. Ben Wilson decoded and confirmed the entries, stated they were the correct entries to add to OneCRL, and said TLS Canary was not needed for this batch. Review then proceeded through staging and production approval, with Dana Keeler reporting 16 changes waiting in production and later approving them in production. The resulting OneCRL records in the provided entry list are all disabled=false? No; they are enabled set to false, matching OneCRL blocklist-style entries as stored in the dataset. The thread explicitly ties qualification to revoked intermediate certificates reported in CCADB, but it does not state per-certificate revocation reasons, revocation dates, or candidate-report field values. The thread also does not cite any external compliance incident, mailing-list discussion, or CA closure as the cause of these revocations.
On 2025-07-11, the ccadb2onercl bot opened the bug and proposed adding 16 issuer/serial OneCRL entries derived from CCADB-reported revoked intermediate certificates. Ben Wilson confirmed the decoded list on 2025-07-12 and approved it for staging review. Dana Keeler approved the batch in staging on 2025-07-14 after checker output showed 16 changes waiting in production, and later approved it in production the same day. Ben Wilson verified the change in Firefox Nightly and Beta profiles on 2025-07-15.
Explicitly stated as revoked intermediate certificates reported in the CCADB; no per-certificate revocation reason, revocation date, candidate report state, or manual-addition explanation is stated in the thread.
unknown
Explicit in OneCRL thread · 0.97
- 2025-07-11ccadb2onercl bot filed Bug 1976939 stating it was adding entries to OneCRL based on revoked intermediate certificates reported in the CCADB.
- 2025-07-11The bot attached the issuer/serial list, proposed OneCRL additions, and a decoded attachment.
- 2025-07-12Ben Wilson posted decoded entries for the 16 certificates.
- 2025-07-12Ben Wilson stated these were the correct entries to add to OneCRL and that TLS Canary was not needed.
- 2025-07-14Dana Keeler reported checker output showing 16 changes waiting in production and approved the batch in staging.
- 2025-07-14Ben Wilson reconfirmed the production list matched the earlier attachment.
- 2025-07-14Dana Keeler approved the changes in production.
- 2025-07-15Ben Wilson verified the change in Firefox Nightly and Beta Release profiles.
AI-generated from the OneCRL record and linked Bugzilla thread. Mozilla and CCADB records remain authoritative.
Raw Remote Settings Record
{
"schema": 1752253362735,
"details": {
"bug": "https://bugzilla.mozilla.org/show_bug.cgi?id=1976939",
"who": "",
"why": "",
"name": "",
"created": ""
},
"enabled": false,
"issuerName": "MG0xCzAJBgNVBAYTAkNIMRAwDgYDVQQKEwdXSVNlS2V5MSIwIAYDVQQLExlPSVNURSBGb3VuZGF0aW9uIEVuZG9yc2VkMSgwJgYDVQQDEx9PSVNURSBXSVNlS2V5IEdsb2JhbCBSb290IEdDIENB",
"serialNumber": "HwAAAAfDD7xDFE07ggAAAAAABw==",
"id": "d59a7ea9-fef8-4133-886c-31a25f543e7e",
"last_modified": 1752529408928
}